diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/__init__.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/__init__.py deleted file mode 100644 index e69de29bb2d..00000000000 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/crossrg_deploy.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/crossrg_deploy.json deleted file mode 100644 index dc9825b3936..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/crossrg_deploy.json +++ /dev/null @@ -1,63 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "StorageAccountName1": { - "type": "string", - "defaultValue": "test1ddosdatest72" - }, - "StorageAccountName2": { - "type": "string", - "defaultValue": "test1ddfosatdest73" - }, - "CrossRg": { - "type": "string", - "defaultValue": "crossrg5" - } - }, - "variables": {}, - "resources": [ - { - "apiVersion": "2017-05-10", - "name": "nestedTemplate", - "type": "Microsoft.Resources/deployments", - "resourceGroup": "[parameters('CrossRg')]", - "properties": { - "mode": "Incremental", - "template": { - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": {}, - "variables": {}, - "resources": [ - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[parameters('StorageAccountName2')]", - "apiVersion": "2015-06-15", - "location": "West US", - "properties": { - "accountType": "Standard_LRS" - } - } - ], - "outputs": { - "result": { - "value": "Hello World", - "type": "string" - } - } - }, - "parameters": {} - } - }, - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[parameters('StorageAccountName1')]", - "apiVersion": "2015-06-15", - "location": "West US", - "properties": { - "accountType": "Standard_LRS" - } - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-params.json deleted file mode 100644 index 65314592608..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-params.json +++ /dev/null @@ -1,15 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "stringParam": { - "value": "foo" - }, - "intParam": { - "value": 10 - }, - "madeupParam": { - "value": "bar" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-ref-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-ref-params.json deleted file mode 100644 index d21f959362c..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-ref-params.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "secretReference": { - "reference": { - "keyVault": { - "id": "some-random-id-goes-here" - }, - "secretName": "magicalSecret" - } - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template-$ref-indirection.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template-$ref-indirection.json deleted file mode 100644 index 8d3e8020c55..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template-$ref-indirection.json +++ /dev/null @@ -1,45 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "languageVersion": "2.0", - "contentVersion": "1.0.0.0", - "definitions": { - "objectType": { - "type": "object" - }, - "object&type~/with~weird name": { - "$ref": "#/definitions/object", - "properties": { - "foo": { - "type": "string" - } - } - } - }, - "parameters": { - "stringParam": { - "$ref": "#/definitions/object%26type~~1with~0weird%20name/properties/foo" - }, - "intParam": { - "$ref": "#/parameters/tupleParam/prefixItems/0" - }, - "boolParam": { - "$ref": "#/outputs/anOutput/additionalProperties" - }, - "tupleParam": { - "type": "array", - "prefixItems": [ - {"type": "int"} - ], - "defaultValue": [1] - } - }, - "resources": {}, - "outputs": { - "anOutput": { - "type": "object", - "additionalProperties": { - "type": "bool" - } - } - } -} diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template.json deleted file mode 100644 index acc098b630d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/param-validation-template.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "stringParam": { - "type": "string" - }, - "intParam": { - "type": "int" - }, - "secureParam": { - "type": "securestring" - }, - "boolParam": { - "type": "bool" - }, - "enumParam": { - "type": "string", - "allowedValues": [ "value1", "value2" ] - }, - "arrayParam": { - "type": "array" - }, - "objectParam": { - "type": "object" - }, - "secretReference": { - "type": "string" - }, - "defaultString": { - "type": "string", - "defaultValue": "default" - }, - "defaultNull": { - "type": "string", - "defaultValue": null - } - }, - "resources": [ - { - "apiVersion": "2016-03-30", - "dependsOn": [ ], - "location": "westus", - "name": "vnet", - "properties": { - }, - "type": "Microsoft.Network/virtualNetworks" - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_group_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_group_lock.yaml deleted file mode 100644 index d6f7572db29..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_group_lock.yaml +++ /dev/null @@ -1,434 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockiyyu7x77giupak3ulhxrma4yjh6gcsld3euail/providers/Microsoft.Authorization/locks/cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - -g --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}' - headers: - cache-control: - - no-cache - content-length: - - '387' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockiyyu7x77giupak3ulhxrma4yjh6gcsld3euail/providers/Microsoft.Authorization/locks/cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000003"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '402' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notessd35nrovhkcyl4c\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000003\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15779' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_lock.yaml deleted file mode 100644 index 1e2fd06a4f7..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_cannotdelete_resource_lock.yaml +++ /dev/null @@ -1,658 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001","name":"cli_test_cannotdelete_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:18Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"eb94ce25-1fb1-4282-b8d7-d93f5c1b8f6d\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"3caefd5c-9846-432e-ad36-6b92e128a1e2\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/4bca6a12-da0c-469e-b125-076754bbea93?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e28237b8-74d5-4e1f-83f4-bd3d71769415 - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/4bca6a12-da0c-469e-b125-076754bbea93?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c4edfc57-1034-4c07-9e2f-6932ed0fb056 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"3c0ee2ec-5b66-499b-beae-c57a79ed36d1\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"3caefd5c-9846-432e-ad36-6b92e128a1e2\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:31 GMT - etag: - - W/"3c0ee2ec-5b66-499b-beae-c57a79ed36d1" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 760ff2d3-461a-4e56-ae94-5cab8098d453 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl/providers/Microsoft.Authorization/locks/cli-test-lock7zjib2ccopj3wkysm5az4whszjaioknmlibh5\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7zjib2ccopj3wkysm5az4whszjaioknmlibh5\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15931' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '529' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl/providers/Microsoft.Authorization/locks/cli-test-lock7zjib2ccopj3wkysm5az4whszjaioknmlibh5\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7zjib2ccopj3wkysm5az4whszjaioknmlibh5\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl/subnets/cli-lock-subnetwfj6jyosf623whd/providers/Microsoft.Authorization/locks/cli-test-lockltlizcu\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockltlizcu\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsor57szkn3yfyhcr6rlu7j7c7na25loweu2mprcjonyll/providers/Microsoft.Authorization/locks/cli-test-locksfqueprbzrshoifee7nh4loo5j2k4j5jribgp\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locksfqueprbzrshoifee7nh4loo5j2k4j5jribgp\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16772' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_delete_dependent_resources.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_delete_dependent_resources.yaml deleted file mode 100644 index e6c8f5c7f0a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_delete_dependent_resources.yaml +++ /dev/null @@ -1,359 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001","name":"cli_test_delete_dependent_resources000001","location":"southcentralus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:28:20Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '392' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:28:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - Connection: - - keep-alive - User-Agent: - - python-requests/2.25.1 - method: GET - uri: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/arm-compute/quickstart-templates/aliases.json - response: - body: - string: "{\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\n - \ \"contentVersion\": \"1.0.0.0\",\n \"parameters\": {},\n \"variables\": - {},\n \"resources\": [],\n \"outputs\": {\n \"aliases\": {\n \"type\": - \"object\",\n \"value\": {\n \"Linux\": {\n \"CentOS\": - {\n \"publisher\": \"OpenLogic\",\n \"offer\": \"CentOS\",\n - \ \"sku\": \"7.5\",\n \"version\": \"latest\"\n },\n - \ \"CoreOS\": {\n \"publisher\": \"CoreOS\",\n \"offer\": - \"CoreOS\",\n \"sku\": \"Stable\",\n \"version\": \"latest\"\n - \ },\n \"Debian\": {\n \"publisher\": \"Debian\",\n - \ \"offer\": \"debian-10\",\n \"sku\": \"10\",\n \"version\": - \"latest\"\n },\n \"openSUSE-Leap\": {\n \"publisher\": - \"SUSE\",\n \"offer\": \"openSUSE-Leap\",\n \"sku\": - \"42.3\",\n \"version\": \"latest\"\n },\n \"RHEL\": - {\n \"publisher\": \"RedHat\",\n \"offer\": \"RHEL\",\n - \ \"sku\": \"7-LVM\",\n \"version\": \"latest\"\n },\n - \ \"SLES\": {\n \"publisher\": \"SUSE\",\n \"offer\": - \"SLES\",\n \"sku\": \"15\",\n \"version\": \"latest\"\n - \ },\n \"UbuntuLTS\": {\n \"publisher\": \"Canonical\",\n - \ \"offer\": \"UbuntuServer\",\n \"sku\": \"18.04-LTS\",\n - \ \"version\": \"latest\"\n }\n },\n \"Windows\": - {\n \"Win2019Datacenter\": {\n \"publisher\": \"MicrosoftWindowsServer\",\n - \ \"offer\": \"WindowsServer\",\n \"sku\": \"2019-Datacenter\",\n - \ \"version\": \"latest\"\n },\n \"Win2016Datacenter\": - {\n \"publisher\": \"MicrosoftWindowsServer\",\n \"offer\": - \"WindowsServer\",\n \"sku\": \"2016-Datacenter\",\n \"version\": - \"latest\"\n },\n \"Win2012R2Datacenter\": {\n \"publisher\": - \"MicrosoftWindowsServer\",\n \"offer\": \"WindowsServer\",\n \"sku\": - \"2012-R2-Datacenter\",\n \"version\": \"latest\"\n },\n - \ \"Win2012Datacenter\": {\n \"publisher\": \"MicrosoftWindowsServer\",\n - \ \"offer\": \"WindowsServer\",\n \"sku\": \"2012-Datacenter\",\n - \ \"version\": \"latest\"\n },\n \"Win2008R2SP1\": - {\n \"publisher\": \"MicrosoftWindowsServer\",\n \"offer\": - \"WindowsServer\",\n \"sku\": \"2008-R2-SP1\",\n \"version\": - \"latest\"\n }\n }\n }\n }\n }\n}\n" - headers: - accept-ranges: - - bytes - access-control-allow-origin: - - '*' - cache-control: - - max-age=300 - connection: - - keep-alive - content-length: - - '2501' - content-security-policy: - - default-src 'none'; style-src 'unsafe-inline'; sandbox - content-type: - - text/plain; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:28:27 GMT - etag: - - W/"540044b4084c3c314537f1baa1770f248628b2bc9ba0328f1004c33862e049da" - expires: - - Mon, 19 Apr 2021 09:33:27 GMT - source-age: - - '210' - strict-transport-security: - - max-age=31536000 - vary: - - Authorization,Accept-Encoding - via: - - 1.1 varnish - x-cache: - - HIT - x-cache-hits: - - '1' - x-content-type-options: - - nosniff - x-fastly-request-id: - - d9816ea478544a7aac5d0357c5597d01129af3b9 - x-frame-options: - - deny - x-github-request-id: - - 14AA:2B35:16FBB5:1F1AF3:607D43E2 - x-served-by: - - cache-qpg1236-QPG - x-timer: - - S1618824508.661923,VS0,VE0 - x-xss-protection: - - 1; mode=block - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks?api-version=2017-10-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:28:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"template": {"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", "parameters": {"adminPassword": {"type": "securestring", - "metadata": {"description": "Secure adminPassword"}}}, "variables": {}, "resources": - [{"name": "cli-test-vm000002VNET", "type": "Microsoft.Network/virtualNetworks", - "location": "southcentralus", "apiVersion": "2015-06-15", "dependsOn": [], "tags": - {"cli-test-tag000003": ""}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "subnets": [{"name": "cli-test-vm000002Subnet", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}, {"type": "Microsoft.Network/networkSecurityGroups", - "name": "cli-test-vm000002NSG", "apiVersion": "2015-06-15", "location": "southcentralus", - "tags": {"cli-test-tag000003": ""}, "dependsOn": []}, {"apiVersion": "2017-10-01", - "type": "Microsoft.Network/publicIPAddresses", "name": "cli-test-vm000002PublicIP", - "location": "southcentralus", "tags": {"cli-test-tag000003": ""}, "dependsOn": - [], "properties": {"publicIPAllocationMethod": null}}, {"apiVersion": "2015-06-15", - "type": "Microsoft.Network/networkInterfaces", "name": "cli-test-vm000002VMNic", - "location": "southcentralus", "tags": {"cli-test-tag000003": ""}, "dependsOn": - ["Microsoft.Network/virtualNetworks/cli-test-vm000002VNET", "Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG", - "Microsoft.Network/publicIpAddresses/cli-test-vm000002PublicIP"], "properties": - {"ipConfigurations": [{"name": "ipconfigcli-test-vm000002", "properties": {"privateIPAllocationMethod": - "Dynamic", "subnet": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"}, - "publicIPAddress": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"}}}], - "networkSecurityGroup": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"}}}, - {"apiVersion": "2017-03-30", "type": "Microsoft.Compute/virtualMachines", "name": - "cli-test-vm000002", "location": "southcentralus", "tags": {"cli-test-tag000003": - ""}, "dependsOn": ["Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"], - "properties": {"hardwareProfile": {"vmSize": "Standard_DS1_v2"}, "networkProfile": - {"networkInterfaces": [{"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"}]}, - "storageProfile": {"osDisk": {"createOption": "fromImage", "name": null, "caching": - "ReadWrite", "managedDisk": {"storageAccountType": null}}, "imageReference": - {"publisher": "Canonical", "offer": "UbuntuServer", "sku": "18.04-LTS", "version": - "latest"}}, "osProfile": {"computerName": "cli-test-vm000002", "adminUsername": - "ubuntu", "adminPassword": "[parameters(''adminPassword'')]"}, "securityProfile": - {}}}], "outputs": {}}, "parameters": {"adminPassword": {"value": "Password#1000004"}}, - "mode": "incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - Content-Length: - - '3702' - Content-Type: - - application/json - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/vm_deploy_G3Y7S0H5IMHeZzKt6zEO1UsgR4oIf4eW","name":"vm_deploy_G3Y7S0H5IMHeZzKt6zEO1UsgR4oIf4eW","properties":{"templateHash":"13332318223272946205","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:28:32.9977817Z","duration":"PT2.3929164S","correlationId":"ec0b6847-8523-43f3-82de-3e5b75db8f4a","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["southcentralus"]},{"resourceType":"networkSecurityGroups","locations":["southcentralus"]},{"resourceType":"publicIPAddresses","locations":["southcentralus"]},{"resourceType":"networkInterfaces","locations":["southcentralus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["southcentralus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/vm_deploy_G3Y7S0H5IMHeZzKt6zEO1UsgR4oIf4eW/operationStatuses/08585827823748727672?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '3105' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:28:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827823748727672?api-version=2018-02-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:29:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827823748727672?api-version=2018-02-01 - response: - body: - string: '{"status":"Failed","error":{"code":"DeploymentFailed","message":"At - least one resource deployment operation failed. Please list deployment operations - for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"BadRequest","message":"{\r\n \"error\": - {\r\n \"code\": \"BadRequest\",\r\n \"message\": \"Could not find member - ''securityProfile'' on object of type ''Properties''. Path ''properties.securityProfile'', - line 1, position 790.\",\r\n \"target\": \"vm.properties.securityProfile\"\r\n }\r\n}"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '545' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:29:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_generic_subscription_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_generic_subscription_locks.yaml deleted file mode 100644 index 1d118acdcfc..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_generic_subscription_locks.yaml +++ /dev/null @@ -1,770 +0,0 @@ -interactions: -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"level": - "ReadOnly"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock create] - Connection: [keep-alive] - Content-Length: ['97'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:39 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock list] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:39 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:40 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:40 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:40 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:40 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:41 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:41 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"notes": - "notes000002", "level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['134'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:41 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['327'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:41 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:41 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"notes": - "notes000002", "level": "ReadOnly"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['130'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:42 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:42 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Fri, 17 Aug 2018 17:07:42 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000003", "properties": {"level": - "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock create] - Connection: [keep-alive] - Content-Length: ['101'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:43 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock list] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:44 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:43 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:44 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:45 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:45 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:45 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:46 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000003", "properties": {"notes": - "notes000004", "level": "ReadOnly"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['130'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:46 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1198'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:46 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:47 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000003", "properties": {"notes": - "notes000004", "level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['134'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:47 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:07:48 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: !!python/unicode ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Fri, 17 Aug 2018 17:07:48 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14998'] - status: {code: 200, message: OK} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment.yaml deleted file mode 100644 index f203608006a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment.yaml +++ /dev/null @@ -1,719 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001","name":"cli_test_deployment000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:39Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": [{"name": "subnet1", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '205' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"1ae611e2-561f-4c35-bf71-54d1383c6219\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"230df022-ebbb-4a32-8af2-409472b23a3d\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet1\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\",\r\n - \ \"etag\": \"W/\\\"1ae611e2-561f-4c35-bf71-54d1383c6219\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/db1722f9-743a-4fef-bb76-8de58201aee0?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1258' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 3f579124-4796-4f21-9a46-1432e5e9dddc - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/db1722f9-743a-4fef-bb76-8de58201aee0?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a68ebc16-7f2a-4a8d-9fff-7cd46018f506 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"13829c50-6764-4345-92aa-dc1001298d32\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"230df022-ebbb-4a32-8af2-409472b23a3d\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet1\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\",\r\n - \ \"etag\": \"W/\\\"13829c50-6764-4345-92aa-dc1001298d32\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1260' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:50 GMT - etag: - - W/"13829c50-6764-4345-92aa-dc1001298d32" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f8654d1a-f4cd-49a8-a80d-344281bf8c25 - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment validate - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/deployment_dry_run","name":"deployment_dry_run","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:02:52.7487145Z","duration":"PT0S","correlationId":"ed7a5d9a-8c66-4d93-b9a1-2c905ea03000","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2016-03-30","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","tags":{"key":"super=value"},"properties":{"frontendIPConfigurations":[{"name":"LoadBalancerFrontEnd","properties":{"privateIPAllocationMethod":"Dynamic","subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"}}}],"backendAddressPools":[{"name":"bepool1"},{"name":"bepool2"}]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1936' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:53 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:02:55.2525774Z","duration":"PT0S","correlationId":"cfd8a4c9-a749-449a-bb71-a60c1609dd0e","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2016-03-30","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","tags":{"key":"super=value"},"properties":{"frontendIPConfigurations":[{"name":"LoadBalancerFrontEnd","properties":{"privateIPAllocationMethod":"Dynamic","subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"}}}],"backendAddressPools":[{"name":"bepool1"},{"name":"bepool2"}]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1940' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-16T09:02:58.2802695Z","duration":"PT2.0640393S","correlationId":"e79a4f7c-faf0-4bdf-85a3-b1b6794132ba","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operationStatuses/08585830431092613897?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '1171' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585830431092613897?api-version=2018-02-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:11.0685948Z","duration":"PT14.8523646S","correlationId":"e79a4f7c-faf0-4bdf-85a3-b1b6794132ba","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network lb show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"test-lb\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb\",\r\n - \ \"etag\": \"W/\\\"f2083d2f-2743-4e13-b860-5389cba688b2\\\"\",\r\n \"type\": - \"Microsoft.Network/loadBalancers\",\r\n \"location\": \"westus\",\r\n \"tags\": - {\r\n \"key\": \"super=value\"\r\n },\r\n \"properties\": {\r\n \"provisioningState\": - \"Succeeded\",\r\n \"resourceGuid\": \"89d6959d-3480-49e7-8c12-06304a585ff1\",\r\n - \ \"frontendIPConfigurations\": [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/frontendIPConfigurations/LoadBalancerFrontEnd\",\r\n - \ \"etag\": \"W/\\\"f2083d2f-2743-4e13-b860-5389cba688b2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers/frontendIPConfigurations\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"privateIPAddress\": \"10.0.0.4\",\r\n \"privateIPAllocationMethod\": - \"Dynamic\",\r\n \"subnet\": {\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - [\r\n {\r\n \"name\": \"bepool1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/backendAddressPools/bepool1\",\r\n - \ \"etag\": \"W/\\\"f2083d2f-2743-4e13-b860-5389cba688b2\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\"\r\n - \ },\r\n \"type\": \"Microsoft.Network/loadBalancers/backendAddressPools\"\r\n - \ },\r\n {\r\n \"name\": \"bepool2\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/backendAddressPools/bepool2\",\r\n - \ \"etag\": \"W/\\\"f2083d2f-2743-4e13-b860-5389cba688b2\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\"\r\n - \ },\r\n \"type\": \"Microsoft.Network/loadBalancers/backendAddressPools\"\r\n - \ }\r\n ],\r\n \"loadBalancingRules\": [],\r\n \"probes\": [],\r\n - \ \"inboundNatRules\": [],\r\n \"inboundNatPools\": []\r\n },\r\n \"sku\": - {\r\n \"name\": \"Basic\"\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2651' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:31 GMT - etag: - - W/"f2083d2f-2743-4e13-b860-5389cba688b2" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 384011a8-d317-4d23-8486-ce6acc9e3a89 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:11.0685948Z","duration":"PT14.8523646S","correlationId":"e79a4f7c-faf0-4bdf-85a3-b1b6794132ba","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1407' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:11.0685948Z","duration":"PT14.8523646S","correlationId":"e79a4f7c-faf0-4bdf-85a3-b1b6794132ba","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment operation list - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/deployments/mock-deployment/operations?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operations/AAD6843997B1B3AF","operationId":"AAD6843997B1B3AF","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:10.0742414Z","duration":"PT9.5540988S","trackingId":"92714c24-6220-4a3b-b0e5-e3470ace8678","serviceRequestId":"dd732682-f607-4fae-a54d-f2067c2a5b47","statusCode":"Created","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","resourceType":"Microsoft.Network/loadBalancers","resourceName":"test-lb"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operations/08585830431092613897","operationId":"08585830431092613897","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:10.8523198Z","duration":"PT10.3321772S","trackingId":"3eddae70-d434-4c49-a7d4-2978298c8e34","statusCode":"OK"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_crossrg.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_crossrg.yaml deleted file mode 100644 index b8967d05001..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_crossrg.yaml +++ /dev/null @@ -1,484 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}, - \"StorageAccountName1\": {\"value\": \"crossrgbod3p43cvhioou7rt\"}, \"StorageAccountName2\": - {\"value\": \"crossrg3yqprkngoekm7wfse\"}}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment validate - Connection: - - keep-alive - Content-Length: - - '2072' - Content-Type: - - application/json - ParameterSetName: - - -g --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/deployment_dry_run","name":"deployment_dry_run","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"crossrgbod3p43cvhioou7rt"},"storageAccountName2":{"type":"String","value":"crossrg3yqprkngoekm7wfse"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:49.6856785Z","duration":"PT0S","correlationId":"32a4b239-6bdc-4e73-825a-61304bb12256","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2017-05-10","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","name":"nestedTemplate","type":"Microsoft.Resources/deployments","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"crossrg3yqprkngoekm7wfse","apiVersion":"2015-06-15","location":"West - US","properties":{"accountType":"Standard_LRS"}}],"outputs":{"result":{"value":"Hello - World","type":"string"}}},"parameters":{}}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/crossrgbod3p43cvhioou7rt","name":"crossrgbod3p43cvhioou7rt","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/crossrg3yqprkngoekm7wfse","name":"crossrg3yqprkngoekm7wfse","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '2546' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1948' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:53.9739078Z","duration":"PT0S","correlationId":"1b9014e1-f63e-49fc-94b2-82f8a4954078","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2017-05-10","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","name":"nestedTemplate","type":"Microsoft.Resources/deployments","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"test1ddfosatdest73","apiVersion":"2015-06-15","location":"West - US","properties":{"accountType":"Standard_LRS"}}],"outputs":{"result":{"value":"Hello - World","type":"string"}}},"parameters":{}}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72","name":"test1ddosdatest72","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73","name":"test1ddfosatdest73","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '2545' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1948' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-16T09:03:57.3699518Z","duration":"PT1.8329927S","correlationId":"62a0d9a7-78fe-4f18-8546-d19e83cde3fa","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operationStatuses/08585830430499406567?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '1023' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585830430499406567?api-version=2018-02-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585830430499406567?api-version=2018-02-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:41.2393167Z","duration":"PT45.7023576S","correlationId":"62a0d9a7-78fe-4f18-8546-d19e83cde3fa","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1474' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:05:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:41.2393167Z","duration":"PT45.7023576S","correlationId":"62a0d9a7-78fe-4f18-8546-d19e83cde3fa","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1486' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:05:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:41.2393167Z","duration":"PT45.7023576S","correlationId":"62a0d9a7-78fe-4f18-8546-d19e83cde3fa","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1474' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:05:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment operation list - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/deployments/mock-deployment/operations?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/B880A73A957380CB","operationId":"B880A73A957380CB","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:26.7296318Z","duration":"PT27.6923146S","trackingId":"ba7de203-cc78-4875-aed5-dc5757330800","serviceRequestId":"2ec07cde-f965-4aca-8758-5772797bebd9","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"test1ddosdatest72"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/646674CBE7DF78F3","operationId":"646674CBE7DF78F3","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:40.9999187Z","duration":"PT41.9626015S","trackingId":"cb8c6b9c-f936-451c-86d8-cae9d8719672","serviceRequestId":"bfd00acd-3904-4fc4-ad41-cfd4d580ea83","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","resourceType":"Microsoft.Resources/deployments","resourceName":"nestedTemplate"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/08585830430499406567","operationId":"08585830430499406567","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:41.2121748Z","duration":"PT0.0570241S","trackingId":"9863e82c-39c3-4b37-8f8c-f50822bfd15d","statusCode":"OK"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '2324' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:05:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_lite.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_lite.yaml deleted file mode 100644 index c98e78088c6..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_lite.yaml +++ /dev/null @@ -1,188 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:07.8870212Z","duration":"PT0S","correlationId":"5403022c-9f71-44c0-b6fd-6dfd1ea79808","providers":[],"dependencies":[],"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '542' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-16T09:03:09.3051864Z","duration":"PT0.7223739S","correlationId":"9e1266c8-dd26-4d6b-896f-0b3d3bccce34","providers":[],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002/operationStatuses/08585830430968947774?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '525' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585830430968947774?api-version=2018-02-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:10.6869311Z","duration":"PT2.1041186S","correlationId":"9e1266c8-dd26-4d6b-896f-0b3d3bccce34","providers":[],"dependencies":[],"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '547' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_no_wait.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_no_wait.yaml deleted file mode 100644 index 022bb425fd8..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_deployment_no_wait.yaml +++ /dev/null @@ -1,268 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {\"location\": {\"value\": \"westus\"}, - \"name\": {\"value\": \"azure-cli-deploy-test-nsg1\"}}, \"mode\": \"Incremental\", - template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"location\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"[resourceGroup().location]\",\r\n - \ \"metadata\": {\r\n \"description\": \"Location for the network - security group.\"\r\n }\r\n },\r\n \"name\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Name of the - network security group.\"\r\n }\r\n }\r\n },\r\n \"variables\": {\r\n - \ },\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Network/networkSecurityGroups\",\r\n - \ \"name\": \"[parameters('name')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"[parameters('location')]\",\r\n \"properties\": {\r\n - \ \"securityRules\": [\r\n ]\r\n },\r\n \"dependsOn\": - [ ]\r\n }\r\n ],\r\n \"outputs\": {\r\n \"NewNSG\": {\r\n \"type\": - \"object\",\r\n \"value\": \"[reference(parameters('name'))]\"\r\n }\r\n - \ }\r\n}\r\n}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1106' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --no-wait - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:03:42.5861339Z","duration":"PT0S","correlationId":"f1a6c99a-ec7e-4325-b425-6f85a200515f","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1","name":"azure-cli-deploy-test-nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","properties":{"securityRules":[]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1154' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"location\": {\"value\": \"westus\"}, - \"name\": {\"value\": \"azure-cli-deploy-test-nsg1\"}}, \"mode\": \"Incremental\", - template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"location\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"[resourceGroup().location]\",\r\n - \ \"metadata\": {\r\n \"description\": \"Location for the network - security group.\"\r\n }\r\n },\r\n \"name\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Name of the - network security group.\"\r\n }\r\n }\r\n },\r\n \"variables\": {\r\n - \ },\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Network/networkSecurityGroups\",\r\n - \ \"name\": \"[parameters('name')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"[parameters('location')]\",\r\n \"properties\": {\r\n - \ \"securityRules\": [\r\n ]\r\n },\r\n \"dependsOn\": - [ ]\r\n }\r\n ],\r\n \"outputs\": {\r\n \"NewNSG\": {\r\n \"type\": - \"object\",\r\n \"value\": \"[reference(parameters('name'))]\"\r\n }\r\n - \ }\r\n}\r\n}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1106' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --no-wait - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-16T09:03:45.42646Z","duration":"PT1.8738361S","correlationId":"c691f1cd-4c2a-4ffd-b9aa-3e966d3d99b8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operationStatuses/08585830430619250112?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '742' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1193' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment wait - Connection: - - keep-alive - ParameterSetName: - - -g -n --created - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Running","timestamp":"2021-04-16T09:03:47.3488769Z","duration":"PT3.796253S","correlationId":"c691f1cd-4c2a-4ffd-b9aa-3e966d3d99b8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '742' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:47 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment wait - Connection: - - keep-alive - ParameterSetName: - - -g -n --created - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:00.1781898Z","duration":"PT16.6255659S","correlationId":"c691f1cd-4c2a-4ffd-b9aa-3e966d3d99b8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"7e2f497f-10d8-47bc-86a7-44817ec0bba6","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5456' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:17 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-16T09:04:00.1781898Z","duration":"PT16.6255659S","correlationId":"c691f1cd-4c2a-4ffd-b9aa-3e966d3d99b8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"7e2f497f-10d8-47bc-86a7-44817ec0bba6","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"9dddb449-c9e3-47cb-be24-29c82aee8730\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5456' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_lock_commands.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_lock_commands.yaml deleted file mode 100644 index 917dadbee62..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_group_lock_commands.yaml +++ /dev/null @@ -1,434 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockiyyu7x77giupak3ulhxrma4yjh6gcsld3euail/providers/Microsoft.Authorization/locks/cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock list - Connection: - - keep-alive - ParameterSetName: - - -g --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}' - headers: - cache-control: - - no-cache - content-length: - - '387' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockiyyu7x77giupak3ulhxrma4yjh6gcsld3euail/providers/Microsoft.Authorization/locks/cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockoory5wv6j47iwiggyeme2rd5qwvfk6l2moe\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000003"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '402' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000003\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"noteskrmo65eme5wg7yn\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15779' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_invoke_action.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_invoke_action.yaml deleted file mode 100644 index 99f43d5c9aa..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_invoke_action.yaml +++ /dev/null @@ -1,4828 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001","name":"cli_test_invoke_action000001","location":"eastus","tags":{"product":"azurecli","cause":"automation","test":"test_invoke_action","date":"2024-09-29T08:08:41Z","module":"resource"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '338' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:08:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: A10EE33FAF4F46B689314702CDB11F9E Ref B: TYO201151005031 Ref C: 2024-09-29T08:08:49Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/publishers/Canonical/artifacttypes/vmimage/offers/UbuntuServer/skus/18.04-LTS/versions?$top=1&$orderby=name%20desc&api-version=2017-03-30 - response: - body: - string: "[\r\n {\r\n \"location\": \"eastus\",\r\n \"name\": \"18.04.202401161\",\r\n - \ \"id\": \"/Subscriptions/00000000-0000-0000-0000-000000000000/Providers/Microsoft.Compute/Locations/eastus/Publishers/Canonical/ArtifactTypes/VMImage/Offers/UbuntuServer/Skus/18.04-LTS/Versions/18.04.202401161\"\r\n - \ }\r\n]" - headers: - cache-control: - - no-cache - content-length: - - '286' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:08:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/ListVMImagesVersionsFromLocation3Min;15999,Microsoft.Compute/ListVMImagesVersionsFromLocation30Min;43999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: FD50AD243E014C8AA04E31FE7B19E92F Ref B: TYO201151005054 Ref C: 2024-09-29T08:08:56Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/publishers/Canonical/artifacttypes/vmimage/offers/UbuntuServer/skus/18.04-LTS/versions/18.04.202401161?api-version=2017-03-30 - response: - body: - string: "{\r\n \"properties\": {\r\n \"hyperVGeneration\": \"V1\",\r\n \"architecture\": - \"x64\",\r\n \"replicaType\": \"Unmanaged\",\r\n \"disallowed\": {\r\n - \ \"vmDiskType\": \"None\"\r\n },\r\n \"automaticOSUpgradeProperties\": - {\r\n \"automaticOSUpgradeSupported\": true\r\n },\r\n \"imageDeprecationStatus\": - {\r\n \"imageState\": \"Active\"\r\n },\r\n \"features\": [\r\n - \ {\r\n \"name\": \"IsAcceleratedNetworkSupported\",\r\n \"value\": - \"True\"\r\n },\r\n {\r\n \"name\": \"DiskControllerTypes\",\r\n - \ \"value\": \"SCSI, NVMe\"\r\n },\r\n {\r\n \"name\": - \"IsHibernateSupported\",\r\n \"value\": \"True\"\r\n }\r\n ],\r\n - \ \"osDiskImage\": {\r\n \"operatingSystem\": \"Linux\",\r\n \"sizeInBytes\": - 32213303808\r\n },\r\n \"dataDiskImages\": []\r\n },\r\n \"location\": - \"eastus\",\r\n \"name\": \"18.04.202401161\",\r\n \"id\": \"/Subscriptions/00000000-0000-0000-0000-000000000000/Providers/Microsoft.Compute/Locations/eastus/Publishers/Canonical/ArtifactTypes/VMImage/Offers/UbuntuServer/Skus/18.04-LTS/Versions/18.04.202401161\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1025' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetVMImageFromLocation3Min;12999,Microsoft.Compute/GetVMImageFromLocation30Min;73999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: FF6A160A863847FAB411CED8B41AA4D7 Ref B: TYO201100116045 Ref C: 2024-09-29T08:09:05Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts?api-version=2016-01-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: CF59A725DE54414EB837BF90BDA4E87B Ref B: TYO201151004062 Ref C: 2024-09-29T08:09:10Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks?api-version=2017-10-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:17 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: B766C4F3D33F4BBFBA6AC91C1E959E36 Ref B: TYO201100116053 Ref C: 2024-09-29T08:09:17Z' - status: - code: 200 - message: OK -- request: - body: '{"properties": {"template": {"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", "parameters": {"adminPassword": {"type": "securestring", - "metadata": {"description": "Secure adminPassword"}}}, "variables": {}, "resources": - [{"type": "Microsoft.Storage/storageAccounts", "name": "vhdstorage4bf4f04edfab1f", - "apiVersion": "2015-06-15", "location": "eastus", "tags": {}, "dependsOn": [], - "properties": {"accountType": "Premium_LRS"}}, {"name": "cli-test-vm000002VNET", - "type": "Microsoft.Network/virtualNetworks", "location": "eastus", "apiVersion": - "2015-06-15", "dependsOn": [], "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "subnets": [{"name": "cli-test-vm000002Subnet", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}, {"type": "Microsoft.Network/networkSecurityGroups", - "name": "cli-test-vm000002NSG", "apiVersion": "2015-06-15", "location": "eastus", - "tags": {}, "dependsOn": []}, {"apiVersion": "2017-10-01", "type": "Microsoft.Network/publicIPAddresses", - "name": "cli-test-vm000002PublicIP", "location": "eastus", "tags": {}, "dependsOn": - [], "properties": {"publicIPAllocationMethod": "Static"}, "sku": {"name": "Standard"}}, - {"apiVersion": "2015-06-15", "type": "Microsoft.Network/networkInterfaces", - "name": "cli-test-vm000002VMNic", "location": "eastus", "tags": {}, "dependsOn": - ["Microsoft.Network/virtualNetworks/cli-test-vm000002VNET", "Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG", - "Microsoft.Network/publicIpAddresses/cli-test-vm000002PublicIP"], "properties": - {"ipConfigurations": [{"name": "ipconfigcli-test-vm000002", "properties": {"privateIPAllocationMethod": - "Dynamic", "subnet": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"}, - "publicIPAddress": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"}}}], - "networkSecurityGroup": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"}}}, - {"apiVersion": "2017-03-30", "type": "Microsoft.Compute/virtualMachines", "name": - "cli-test-vm000002", "location": "eastus", "tags": {}, "dependsOn": ["Microsoft.Storage/storageAccounts/vhdstorage4bf4f04edfab1f", - "Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"], "properties": - {"hardwareProfile": {"vmSize": "Standard_DS1_v2"}, "networkProfile": {"networkInterfaces": - [{"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic", - "properties": {"deleteOption": null}}]}, "storageProfile": {"osDisk": {"createOption": - "fromImage", "name": "osdisk_4bf4f04edf", "caching": "ReadWrite", "vhd": {"uri": - "https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/vhds/osdisk_4bf4f04edf.vhd"}}, - "imageReference": {"publisher": "Canonical", "offer": "UbuntuServer", "sku": - "18.04-LTS", "version": "latest"}}, "osProfile": {"computerName": "cli-test-vm000002", - "adminUsername": "ubuntu", "adminPassword": "[parameters(''adminPassword'')]"}}}], - "outputs": {}}, "parameters": {"adminPassword": {"value": "Longpassword#1000003"}}, - "mode": "incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - Content-Length: - - '3502' - Content-Type: - - application/json - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_x9pbfysHU6hRfCJEovbAh5ROpe8thpqO","name":"vm_deploy_x9pbfysHU6hRfCJEovbAh5ROpe8thpqO","properties":{"templateHash":"5121064823063193497","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2024-09-29T08:09:25.6121435Z","duration":"PT0.0009842S","correlationId":"c6f5e0ec-1f47-46d3-9d40-3f9131feb9e1","providers":[{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["eastus"]}]},{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["eastus"]},{"resourceType":"networkSecurityGroups","locations":["eastus"]},{"resourceType":"publicIPAddresses","locations":["eastus"]},{"resourceType":"networkInterfaces","locations":["eastus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["eastus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage4bf4f04edfab1f","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"vhdstorage4bf4f04edfab1f"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_x9pbfysHU6hRfCJEovbAh5ROpe8thpqO/operationStatuses/08584740095234471430?api-version=2018-02-01 - cache-control: - - no-cache - content-length: - - '2956' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-deployment-engine-version: - - 1.109.0 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: 707E27F495F14B079AC383AB4E77C25B Ref B: TYO201151004023 Ref C: 2024-09-29T08:09:19Z' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740095234471430?api-version=2018-02-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 828ED5F63BFD4FC2A5813B873589D62D Ref B: TYO201151004023 Ref C: 2024-09-29T08:09:27Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740095234471430?api-version=2018-02-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:09:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 9EAFDA86532F4E64904018164435DC4F Ref B: TYO201151004023 Ref C: 2024-09-29T08:09:59Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740095234471430?api-version=2018-02-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:10:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 6A361F7321954BC79A920785C7DBA9A7 Ref B: TYO201151004023 Ref C: 2024-09-29T08:10:32Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740095234471430?api-version=2018-02-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 9F95F85CEF42464ABC8C2E05DE23F11C Ref B: TYO201151004023 Ref C: 2024-09-29T08:11:06Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_x9pbfysHU6hRfCJEovbAh5ROpe8thpqO","name":"vm_deploy_x9pbfysHU6hRfCJEovbAh5ROpe8thpqO","properties":{"templateHash":"5121064823063193497","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2024-09-29T08:10:50.1370947Z","duration":"PT1M24.5259354S","correlationId":"c6f5e0ec-1f47-46d3-9d40-3f9131feb9e1","providers":[{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["eastus"]}]},{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["eastus"]},{"resourceType":"networkSecurityGroups","locations":["eastus"]},{"resourceType":"publicIPAddresses","locations":["eastus"]},{"resourceType":"networkInterfaces","locations":["eastus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["eastus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage4bf4f04edfab1f","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"vhdstorage4bf4f04edfab1f"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}],"outputs":{},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage4bf4f04edfab1f"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '4032' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: D5C297CFEABA4F47BD3FFD71539C1EBD Ref B: TYO201151004023 Ref C: 2024-09-29T08:11:08Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002?$expand=instanceView&api-version=2017-03-30 - response: - body: - string: "{\r\n \"name\": \"cli-test-vm000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002\",\r\n - \ \"type\": \"Microsoft.Compute/virtualMachines\",\r\n \"location\": \"eastus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"hardwareProfile\": {\r\n \"vmSize\": - \"Standard_DS1_v2\"\r\n },\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"vmId\": \"10e15552-1e43-4497-8da6-297463157ee5\",\r\n \"storageProfile\": - {\r\n \"imageReference\": {\r\n \"publisher\": \"Canonical\",\r\n - \ \"offer\": \"UbuntuServer\",\r\n \"sku\": \"18.04-LTS\",\r\n - \ \"version\": \"latest\"\r\n },\r\n \"osDisk\": {\r\n \"osType\": - \"Linux\",\r\n \"name\": \"osdisk_4bf4f04edf\",\r\n \"createOption\": - \"FromImage\",\r\n \"vhd\": {\r\n \"uri\": \"https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/vhds/osdisk_4bf4f04edf.vhd\"\r\n - \ },\r\n \"caching\": \"ReadWrite\",\r\n \"diskSizeGB\": - 30\r\n },\r\n \"dataDisks\": []\r\n },\r\n \"osProfile\": - {\r\n \"computerName\": \"cli-test-vm000002\",\r\n \"adminUsername\": - \"ubuntu\",\r\n \"linuxConfiguration\": {\r\n \"disablePasswordAuthentication\": - false\r\n },\r\n \"secrets\": []\r\n },\r\n \"networkProfile\": - {\"networkInterfaces\":[{\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic\"}]},\r\n - \ \"instanceView\": {\r\n \"vmAgent\": {\r\n \"vmAgentVersion\": - \"2.11.1.12\",\r\n \"statuses\": [\r\n {\r\n \"code\": - \"ProvisioningState/succeeded\",\r\n \"level\": \"Info\",\r\n \"displayStatus\": - \"Ready\",\r\n \"message\": \"Guest Agent is running\",\r\n \"time\": - \"2024-09-29T08:11:03+00:00\"\r\n }\r\n ],\r\n \"extensionHandlers\": - []\r\n },\r\n \"disks\": [\r\n {\r\n \"name\": \"osdisk_4bf4f04edf\",\r\n - \ \"statuses\": [\r\n {\r\n \"code\": \"ProvisioningState/succeeded\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"Provisioning - succeeded\",\r\n \"time\": \"2024-09-29T08:09:51.822422+00:00\"\r\n - \ }\r\n ]\r\n }\r\n ],\r\n \"statuses\": - [\r\n {\r\n \"code\": \"ProvisioningState/succeeded\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"Provisioning - succeeded\",\r\n \"time\": \"2024-09-29T08:10:47.2758037+00:00\"\r\n - \ },\r\n {\r\n \"code\": \"PowerState/running\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"VM running\"\r\n - \ }\r\n ]\r\n }\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2607' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/LowCostGetSubscriptionMaximum;23997,Microsoft.Compute/LowCostGetResource;33 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 0F136248E2EB4B009A9F0C1BB3D5BFDE Ref B: TYO201151002060 Ref C: 2024-09-29T08:11:11Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic?api-version=2017-10-01 - response: - body: - string: '{"name":"cli-test-vm000002VMNic","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","etag":"W/\"0c0218b2-558b-4962-b6f9-7fb6a11d82d4\"","tags":{},"properties":{"provisioningState":"Succeeded","resourceGuid":"c4296466-79cf-47be-9628-1000dfde2a85","ipConfigurations":[{"name":"ipconfigcli-test-vm000002","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic/ipConfigurations/ipconfigcli-test-vm000002","etag":"W/\"0c0218b2-558b-4962-b6f9-7fb6a11d82d4\"","type":"Microsoft.Network/networkInterfaces/ipConfigurations","properties":{"provisioningState":"Succeeded","privateIPAddress":"10.0.0.4","privateIPAllocationMethod":"Dynamic","publicIPAddress":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"},"subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"},"primary":true,"privateIPAddressVersion":"IPv4"}}],"dnsSettings":{"dnsServers":[],"appliedDnsServers":[],"internalDomainNameSuffix":"oav4qfs4mcherhd4jp2i04ddyc.bx.internal.cloudapp.net"},"macAddress":"7C-1E-52-5B-B2-82","enableAcceleratedNetworking":false,"enableIPForwarding":false,"networkSecurityGroup":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"},"primary":true,"virtualMachine":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002"}},"type":"Microsoft.Network/networkInterfaces","location":"eastus"}' - headers: - cache-control: - - no-cache - content-length: - - '2020' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:12 GMT - etag: - - W/"0c0218b2-558b-4962-b6f9-7fb6a11d82d4" - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 229155cc-0ccb-4f75-a1eb-c0032c8fe212 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 089D2A904C044316AC94ADA9820692E2 Ref B: TYO201151001042 Ref C: 2024-09-29T08:11:12Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP?api-version=2017-10-01 - response: - body: - string: '{"name":"cli-test-vm000002PublicIP","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","etag":"W/\"8a858f58-1683-4dc9-b757-4e6049dc8bb0\"","location":"eastus","tags":{},"properties":{"provisioningState":"Succeeded","resourceGuid":"2d58aeab-56ef-4f1e-89f5-f415cea66cc3","ipAddress":"135.237.119.146","publicIPAddressVersion":"IPv4","publicIPAllocationMethod":"Static","idleTimeoutInMinutes":4,"ipTags":[],"ipConfiguration":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic/ipConfigurations/ipconfigcli-test-vm000002"}},"type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"}}' - headers: - cache-control: - - no-cache - content-length: - - '835' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:15 GMT - etag: - - W/"8a858f58-1683-4dc9-b757-4e6049dc8bb0" - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - cd497132-106a-4ff9-9af8-bd7921a5d86e - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: DAC9CCD90D89433AB190634F35D2FC29 Ref B: TYO201100113019 Ref C: 2024-09-29T08:11:15Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"]},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"]},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '95595' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 9EAF5748726F4BD5B6C1BD17148DCD88 Ref B: TYO201100114035 Ref C: 2024-09-29T08:11:18Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/powerOff?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/517caf11-3d04-41e1-8780-45cc8ba451a1?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631942927831622&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=OLW8k1bT8u113My0QW5X1cvHcnYAOdqk12ikq_VJp48Kuc2K50qvoQXX1GgwvLaETk8cmwH5rQuvybGkgXgMkg8i1qqNvVeEFH5J5G1ico0UT1PpFpAFdqWB8i94RkhVILZsIvbiYU15shZZNMavqV-lEiNfxioTFDYXVApHq-fquwunLMntwNC6IDuKystnvC6PbeSzkZyXnfYM1zBTy-I-ZGzuGn12doufzB7CKdb6nXUYx_B5eMZTdaOJMgaL8gShEV1FI6ufHeeX7cSBUMi1Icf1GufiNZuZQCpij5AnbJVDZKOK9JN7nzV4gJOqd_Cy5snQ6Bwn6k7NufZKaw&h=0Qpr4CpUdtRYYjBRpq9DSEdcNH5kXdRw6E4W_MgqkVk - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:11:32 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/517caf11-3d04-41e1-8780-45cc8ba451a1?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631942927831622&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=OLW8k1bT8u113My0QW5X1cvHcnYAOdqk12ikq_VJp48Kuc2K50qvoQXX1GgwvLaETk8cmwH5rQuvybGkgXgMkg8i1qqNvVeEFH5J5G1ico0UT1PpFpAFdqWB8i94RkhVILZsIvbiYU15shZZNMavqV-lEiNfxioTFDYXVApHq-fquwunLMntwNC6IDuKystnvC6PbeSzkZyXnfYM1zBTy-I-ZGzuGn12doufzB7CKdb6nXUYx_B5eMZTdaOJMgaL8gShEV1FI6ufHeeX7cSBUMi1Icf1GufiNZuZQCpij5AnbJVDZKOK9JN7nzV4gJOqd_Cy5snQ6Bwn6k7NufZKaw&h=0Qpr4CpUdtRYYjBRpq9DSEdcNH5kXdRw6E4W_MgqkVk - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1499,Microsoft.Compute/UpdateVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: 2D3852F9622349C78A920602FFAF3B75 Ref B: TYO201100114035 Ref C: 2024-09-29T08:11:32Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/517caf11-3d04-41e1-8780-45cc8ba451a1?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631942927831622&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=OLW8k1bT8u113My0QW5X1cvHcnYAOdqk12ikq_VJp48Kuc2K50qvoQXX1GgwvLaETk8cmwH5rQuvybGkgXgMkg8i1qqNvVeEFH5J5G1ico0UT1PpFpAFdqWB8i94RkhVILZsIvbiYU15shZZNMavqV-lEiNfxioTFDYXVApHq-fquwunLMntwNC6IDuKystnvC6PbeSzkZyXnfYM1zBTy-I-ZGzuGn12doufzB7CKdb6nXUYx_B5eMZTdaOJMgaL8gShEV1FI6ufHeeX7cSBUMi1Icf1GufiNZuZQCpij5AnbJVDZKOK9JN7nzV4gJOqd_Cy5snQ6Bwn6k7NufZKaw&h=0Qpr4CpUdtRYYjBRpq9DSEdcNH5kXdRw6E4W_MgqkVk - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:11:32.6666358+00:00\",\r\n \"status\": - \"InProgress\",\r\n \"name\": \"517caf11-3d04-41e1-8780-45cc8ba451a1\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '134' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:11:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14997 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: B8270AA9889349B5B8347210909C8BB3 Ref B: TYO201100114035 Ref C: 2024-09-29T08:11:35Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/517caf11-3d04-41e1-8780-45cc8ba451a1?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631942927831622&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=OLW8k1bT8u113My0QW5X1cvHcnYAOdqk12ikq_VJp48Kuc2K50qvoQXX1GgwvLaETk8cmwH5rQuvybGkgXgMkg8i1qqNvVeEFH5J5G1ico0UT1PpFpAFdqWB8i94RkhVILZsIvbiYU15shZZNMavqV-lEiNfxioTFDYXVApHq-fquwunLMntwNC6IDuKystnvC6PbeSzkZyXnfYM1zBTy-I-ZGzuGn12doufzB7CKdb6nXUYx_B5eMZTdaOJMgaL8gShEV1FI6ufHeeX7cSBUMi1Icf1GufiNZuZQCpij5AnbJVDZKOK9JN7nzV4gJOqd_Cy5snQ6Bwn6k7NufZKaw&h=0Qpr4CpUdtRYYjBRpq9DSEdcNH5kXdRw6E4W_MgqkVk - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:11:32.6666358+00:00\",\r\n \"endTime\": - \"2024-09-29T08:11:42.4792079+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"name\": \"517caf11-3d04-41e1-8780-45cc8ba451a1\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '184' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: FDBDF242DB9B419981CF06787198DA02 Ref B: TYO201100115029 Ref C: 2024-09-29T08:13:00Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/517caf11-3d04-41e1-8780-45cc8ba451a1?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631942927831622&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=OLW8k1bT8u113My0QW5X1cvHcnYAOdqk12ikq_VJp48Kuc2K50qvoQXX1GgwvLaETk8cmwH5rQuvybGkgXgMkg8i1qqNvVeEFH5J5G1ico0UT1PpFpAFdqWB8i94RkhVILZsIvbiYU15shZZNMavqV-lEiNfxioTFDYXVApHq-fquwunLMntwNC6IDuKystnvC6PbeSzkZyXnfYM1zBTy-I-ZGzuGn12doufzB7CKdb6nXUYx_B5eMZTdaOJMgaL8gShEV1FI6ufHeeX7cSBUMi1Icf1GufiNZuZQCpij5AnbJVDZKOK9JN7nzV4gJOqd_Cy5snQ6Bwn6k7NufZKaw&h=0Qpr4CpUdtRYYjBRpq9DSEdcNH5kXdRw6E4W_MgqkVk - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:13:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;43,Microsoft.Compute/GetOperationSubscriptionMaximum;14998 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 2F5D47166AE94D51AA9D039104F64969 Ref B: TYO201100115029 Ref C: 2024-09-29T08:13:00Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"]},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"]},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '95595' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: A3BB8F656D7E41EBADB4BC73BB831618 Ref B: TYO201100115039 Ref C: 2024-09-29T08:13:01Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/generalize?api-version=2024-07-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:13:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1499,Microsoft.Compute/UpdateVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: 597D58A6102B4D2D97449E424E24CF42 Ref B: TYO201100115039 Ref C: 2024-09-29T08:13:03Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"]},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"]},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '95595' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 0B870B6C12344F3DA8D2C90E63CE7985 Ref B: TYO201100114037 Ref C: 2024-09-29T08:13:04Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/deallocate?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/a282a1de-7570-4f48-981a-e1389fd0033e?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631943862102982&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=SRldbIyWRHs0NO3Kt7ZDD08QUHs9JPTCDEDXmFscrnlKH2kO3NkMzSJdczjfK3vLlF5PgHIY0ZgDkTbrWRapp7EDeNvyFYnsGKlFWpp--Xuci-SPRwoNUrEIsKc6rXFRMSAFLJ1amV8hR8ztsO0VPBSss7drtwVnAcHAt5xaCbyhxNqE7tV_z6w3_fM-1i2p2GNGypHQpHvMTFwih_1UJ5ZqX00iRahPe1GYyug8PDuQWL6-kjvMv6ZYJJ-OGv_zspuwHKgGoYD8Dj6ej2em3JFZCZ9cV_B-mhCDJwM6wnzY_hZButzsZ8seyqOa--U6uvjQ9rbMUsG2zE_JUNe6WA&h=BvwRP1ADeu13arJ8-YagOjS7vZV771UZLkSR8E1-IP4 - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:13:05 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/a282a1de-7570-4f48-981a-e1389fd0033e?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631943862102982&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=SRldbIyWRHs0NO3Kt7ZDD08QUHs9JPTCDEDXmFscrnlKH2kO3NkMzSJdczjfK3vLlF5PgHIY0ZgDkTbrWRapp7EDeNvyFYnsGKlFWpp--Xuci-SPRwoNUrEIsKc6rXFRMSAFLJ1amV8hR8ztsO0VPBSss7drtwVnAcHAt5xaCbyhxNqE7tV_z6w3_fM-1i2p2GNGypHQpHvMTFwih_1UJ5ZqX00iRahPe1GYyug8PDuQWL6-kjvMv6ZYJJ-OGv_zspuwHKgGoYD8Dj6ej2em3JFZCZ9cV_B-mhCDJwM6wnzY_hZButzsZ8seyqOa--U6uvjQ9rbMUsG2zE_JUNe6WA&h=BvwRP1ADeu13arJ8-YagOjS7vZV771UZLkSR8E1-IP4 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/DeleteVMSubscriptionMaximum;1499,Microsoft.Compute/DeleteVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: 6F93BFB1A5294BD1987D3E6600A5E74D Ref B: TYO201100114037 Ref C: 2024-09-29T08:13:05Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/a282a1de-7570-4f48-981a-e1389fd0033e?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631943862102982&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=SRldbIyWRHs0NO3Kt7ZDD08QUHs9JPTCDEDXmFscrnlKH2kO3NkMzSJdczjfK3vLlF5PgHIY0ZgDkTbrWRapp7EDeNvyFYnsGKlFWpp--Xuci-SPRwoNUrEIsKc6rXFRMSAFLJ1amV8hR8ztsO0VPBSss7drtwVnAcHAt5xaCbyhxNqE7tV_z6w3_fM-1i2p2GNGypHQpHvMTFwih_1UJ5ZqX00iRahPe1GYyug8PDuQWL6-kjvMv6ZYJJ-OGv_zspuwHKgGoYD8Dj6ej2em3JFZCZ9cV_B-mhCDJwM6wnzY_hZButzsZ8seyqOa--U6uvjQ9rbMUsG2zE_JUNe6WA&h=BvwRP1ADeu13arJ8-YagOjS7vZV771UZLkSR8E1-IP4 - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:13:06.0888107+00:00\",\r\n \"status\": - \"InProgress\",\r\n \"name\": \"a282a1de-7570-4f48-981a-e1389fd0033e\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '134' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14997 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: A6AE0232A6244A849D7CCC8A2487695B Ref B: TYO201100114037 Ref C: 2024-09-29T08:13:12Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/a282a1de-7570-4f48-981a-e1389fd0033e?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631943862102982&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=SRldbIyWRHs0NO3Kt7ZDD08QUHs9JPTCDEDXmFscrnlKH2kO3NkMzSJdczjfK3vLlF5PgHIY0ZgDkTbrWRapp7EDeNvyFYnsGKlFWpp--Xuci-SPRwoNUrEIsKc6rXFRMSAFLJ1amV8hR8ztsO0VPBSss7drtwVnAcHAt5xaCbyhxNqE7tV_z6w3_fM-1i2p2GNGypHQpHvMTFwih_1UJ5ZqX00iRahPe1GYyug8PDuQWL6-kjvMv6ZYJJ-OGv_zspuwHKgGoYD8Dj6ej2em3JFZCZ9cV_B-mhCDJwM6wnzY_hZButzsZ8seyqOa--U6uvjQ9rbMUsG2zE_JUNe6WA&h=BvwRP1ADeu13arJ8-YagOjS7vZV771UZLkSR8E1-IP4 - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:13:06.0888107+00:00\",\r\n \"endTime\": - \"2024-09-29T08:13:15.479466+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"name\": \"a282a1de-7570-4f48-981a-e1389fd0033e\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '183' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:45 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;42,Microsoft.Compute/GetOperationSubscriptionMaximum;14995 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: DFF3D370F9BD44B691A9E563A7BC15A6 Ref B: TYO201100114037 Ref C: 2024-09-29T08:13:46Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/a282a1de-7570-4f48-981a-e1389fd0033e?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631943862102982&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=SRldbIyWRHs0NO3Kt7ZDD08QUHs9JPTCDEDXmFscrnlKH2kO3NkMzSJdczjfK3vLlF5PgHIY0ZgDkTbrWRapp7EDeNvyFYnsGKlFWpp--Xuci-SPRwoNUrEIsKc6rXFRMSAFLJ1amV8hR8ztsO0VPBSss7drtwVnAcHAt5xaCbyhxNqE7tV_z6w3_fM-1i2p2GNGypHQpHvMTFwih_1UJ5ZqX00iRahPe1GYyug8PDuQWL6-kjvMv6ZYJJ-OGv_zspuwHKgGoYD8Dj6ej2em3JFZCZ9cV_B-mhCDJwM6wnzY_hZButzsZ8seyqOa--U6uvjQ9rbMUsG2zE_JUNe6WA&h=BvwRP1ADeu13arJ8-YagOjS7vZV771UZLkSR8E1-IP4 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:13:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;41,Microsoft.Compute/GetOperationSubscriptionMaximum;14994 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 44D3168987EE4F1AAFD92A4A504E6788 Ref B: TYO201100114037 Ref C: 2024-09-29T08:13:46Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"]},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"]},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"]},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"]},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"]},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"]},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '95595' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:48 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: F68F96BC827244BB919A3464BC831968 Ref B: TYO201151006052 Ref C: 2024-09-29T08:13:47Z' - status: - code: 200 - message: OK -- request: - body: '{"vhdPrefix": "myPrefix", "destinationContainerName": "container", "overwriteVhds": - "true"}' - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '91' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/capture?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/27fa8474-b4b6-4ae4-8768-664ff716d6c8?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631944295668933&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Hhka6e4nQZMpfVBePGsuo-6J9ywbdkHwljyFI3T3cMlITv0xghWIki2GGH0HUgZ8SAq_2CUdc25jk0sGtbB0SzAy1k3AGGz_riDonH0tPBts-fhoRensH7gVQCrR-oDMt5fIeePWNqmgU7vjCGb8S5bKmXglfZxSoqvA7N2Y_xW65zPE_V1LpB8GstMO-lMlClkSkU54jO0_OJRMvn42cuZ_jLn7Zd19jMo97xXRhKqC9saAJ3tKLT485V_ISfq0shDG_AOtKSQKSPsfdPf1vWGCswL0qFVSSGXBsPZE7o52psp1_WULu4iZ6q0ryTpfCbeRqs707BcBfhiPiYhaKw&h=tzsaUMx59vgS0ueCW2Kqrt2i32THo6uQdG9SRpqGv-0 - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:13:49 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/27fa8474-b4b6-4ae4-8768-664ff716d6c8?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631944295668933&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Hhka6e4nQZMpfVBePGsuo-6J9ywbdkHwljyFI3T3cMlITv0xghWIki2GGH0HUgZ8SAq_2CUdc25jk0sGtbB0SzAy1k3AGGz_riDonH0tPBts-fhoRensH7gVQCrR-oDMt5fIeePWNqmgU7vjCGb8S5bKmXglfZxSoqvA7N2Y_xW65zPE_V1LpB8GstMO-lMlClkSkU54jO0_OJRMvn42cuZ_jLn7Zd19jMo97xXRhKqC9saAJ3tKLT485V_ISfq0shDG_AOtKSQKSPsfdPf1vWGCswL0qFVSSGXBsPZE7o52psp1_WULu4iZ6q0ryTpfCbeRqs707BcBfhiPiYhaKw&h=tzsaUMx59vgS0ueCW2Kqrt2i32THo6uQdG9SRpqGv-0 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1499,Microsoft.Compute/UpdateVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: 5A0C2E54DF304131AAD03226ADADF429 Ref B: TYO201151006052 Ref C: 2024-09-29T08:13:48Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/27fa8474-b4b6-4ae4-8768-664ff716d6c8?p=54253b73-cb53-496f-ab42-5e5ee19426f8&api-version=2024-07-01&t=638631944295668933&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-hZvdFs6dEoFghfmRS4WsmTQCAWQCAQcwggHLBggrBgEFBQcBAQSCAb0wggG5MGMGCCsGAQUFBzAChldodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpaW5mcmEvQ2VydHMvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmwxLmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MFMGCCsGAQUFBzAChkdodHRwOi8vY3JsMi5hbWUuZ2JsL2FpYS9DTzFQS0lJTlRDQTAxLkFNRS5HQkxfQU1FJTIwSW5mcmElMjBDQSUyMDA1LmNydDBTBggrBgEFBQcwAoZHaHR0cDovL2NybDMuYW1lLmdibC9haWEvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmw0LmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MB0GA1UdDgQWBBR539nE3pOaYqC09YY5sInoMk2T-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Hhka6e4nQZMpfVBePGsuo-6J9ywbdkHwljyFI3T3cMlITv0xghWIki2GGH0HUgZ8SAq_2CUdc25jk0sGtbB0SzAy1k3AGGz_riDonH0tPBts-fhoRensH7gVQCrR-oDMt5fIeePWNqmgU7vjCGb8S5bKmXglfZxSoqvA7N2Y_xW65zPE_V1LpB8GstMO-lMlClkSkU54jO0_OJRMvn42cuZ_jLn7Zd19jMo97xXRhKqC9saAJ3tKLT485V_ISfq0shDG_AOtKSQKSPsfdPf1vWGCswL0qFVSSGXBsPZE7o52psp1_WULu4iZ6q0ryTpfCbeRqs707BcBfhiPiYhaKw&h=tzsaUMx59vgS0ueCW2Kqrt2i32THo6uQdG9SRpqGv-0 - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:13:49.4170636+00:00\",\r\n \"endTime\": - \"2024-09-29T08:13:49.635814+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"properties\": {\r\n \"output\": {\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2014-04-01-preview/VM_IP.json\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"vmName\": - {\r\n \"type\": \"string\"\r\n },\r\n \"vmSize\": {\r\n \"type\": - \"string\",\r\n \"defaultValue\": \"Standard_DS1_v2\"\r\n },\r\n \"adminUserName\": - {\r\n \"type\": \"string\"\r\n },\r\n \"adminPassword\": {\r\n - \ \"type\": \"securestring\"\r\n },\r\n \"networkInterfaceId\": - {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"resources\": [\r\n - \ {\r\n \"name\": \"[parameters('vmName')]\",\r\n \"type\": \"Microsoft.Compute/virtualMachines\",\r\n - \ \"location\": \"eastus\",\r\n \"apiVersion\": \"2024-07-01\",\r\n - \ \"properties\": {\r\n \"hardwareProfile\": {\r\n \"vmSize\": - \"[parameters('vmSize')]\"\r\n },\r\n \"provisioningState\": - 0,\r\n \"storageProfile\": {\r\n \"osDisk\": {\r\n \"osType\": - \"Linux\",\r\n \"name\": \"myPrefix-osDisk.10e15552-1e43-4497-8da6-297463157ee5.vhd\",\r\n - \ \"createOption\": \"FromImage\",\r\n \"image\": {\r\n - \ \"uri\": \"https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/system/Microsoft.Compute/Images/container/myPrefix-osDisk.10e15552-1e43-4497-8da6-297463157ee5.vhd\"\r\n - \ },\r\n \"vhd\": {\r\n \"uri\": \"https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/vmcontainer74e9c273-5a7b-402a-a25d-36445609e5a8/osDisk.74e9c273-5a7b-402a-a25d-36445609e5a8.vhd\"\r\n - \ },\r\n \"caching\": \"ReadWrite\"\r\n }\r\n - \ },\r\n \"osProfile\": {\r\n \"computerName\": \"[parameters('vmName')]\",\r\n - \ \"adminUsername\": \"[parameters('adminUsername')]\",\r\n \"adminPassword\": - \"[parameters('adminPassword')]\"\r\n },\r\n \"networkProfile\": - {\"networkInterfaces\":[{\"id\":\"[parameters('networkInterfaceId')]\"}]}\r\n - \ }\r\n }\r\n ]\r\n}\r\n },\r\n \"name\": \"27fa8474-b4b6-4ae4-8768-664ff716d6c8\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2044' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 2E229A9A310644F084CCA0A6F2F094C0 Ref B: TYO201151006052 Ref C: 2024-09-29T08:13:49Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/eastus/operations/27fa8474-b4b6-4ae4-8768-664ff716d6c8?p=54253b73-cb53-496f-ab42-5e5ee19426f8&monitor=true&api-version=2024-07-01&t=638631944295668933&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Hhka6e4nQZMpfVBePGsuo-6J9ywbdkHwljyFI3T3cMlITv0xghWIki2GGH0HUgZ8SAq_2CUdc25jk0sGtbB0SzAy1k3AGGz_riDonH0tPBts-fhoRensH7gVQCrR-oDMt5fIeePWNqmgU7vjCGb8S5bKmXglfZxSoqvA7N2Y_xW65zPE_V1LpB8GstMO-lMlClkSkU54jO0_OJRMvn42cuZ_jLn7Zd19jMo97xXRhKqC9saAJ3tKLT485V_ISfq0shDG_AOtKSQKSPsfdPf1vWGCswL0qFVSSGXBsPZE7o52psp1_WULu4iZ6q0ryTpfCbeRqs707BcBfhiPiYhaKw&h=tzsaUMx59vgS0ueCW2Kqrt2i32THo6uQdG9SRpqGv-0 - response: - body: - string: '{"$schema":"http://schema.management.azure.com/schemas/2014-04-01-preview/VM_IP.json","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"vmSize":{"type":"string","defaultValue":"Standard_DS1_v2"},"adminUserName":{"type":"string"},"adminPassword":{"type":"securestring"},"networkInterfaceId":{"type":"string"}},"resources":[{"name":"[parameters(''vmName'')]","type":"Microsoft.Compute/virtualMachines","location":"eastus","apiVersion":"2024-07-01","properties":{"hardwareProfile":{"vmSize":"[parameters(''vmSize'')]"},"provisioningState":0,"storageProfile":{"osDisk":{"osType":"Linux","name":"myPrefix-osDisk.10e15552-1e43-4497-8da6-297463157ee5.vhd","createOption":"FromImage","image":{"uri":"https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/system/Microsoft.Compute/Images/container/myPrefix-osDisk.10e15552-1e43-4497-8da6-297463157ee5.vhd"},"vhd":{"uri":"https://vhdstorage4bf4f04edfab1f.blob.core.windows.net/vmcontainer74e9c273-5a7b-402a-a25d-36445609e5a8/osDisk.74e9c273-5a7b-402a-a25d-36445609e5a8.vhd"},"caching":"ReadWrite"}},"osProfile":{"computerName":"[parameters(''vmName'')]","adminUsername":"[parameters(''adminUsername'')]","adminPassword":"[parameters(''adminPassword'')]"},"networkProfile":{"networkInterfaces":[{"id":"[parameters(''networkInterfaceId'')]"}]}}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1292' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:13:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;43,Microsoft.Compute/GetOperationSubscriptionMaximum;14998 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 1B7C34964786441CA9B0684B422DA178 Ref B: TYO201151006052 Ref C: 2024-09-29T08:13:50Z' - status: - code: 200 - message: '' -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_list_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_list_locks.yaml deleted file mode 100644 index 5ad7620081a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_list_locks.yaml +++ /dev/null @@ -1,54 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '14973' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_commands_with_ids.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_commands_with_ids.yaml deleted file mode 100644 index ee1fa69d18e..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_commands_with_ids.yaml +++ /dev/null @@ -1,2404 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001","name":"cli_test_lock_commands_with_ids000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2023-02-27T04:57:34Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '308' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "enableDdosProtection": false, "enableVmProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '152' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"642f40cf-aaaf-402a-8849-c4630789f500\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \ - \ \"resourceGuid\": \"957c3731-6adf-4b4e-b1b3-a5d6de8673a3\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/68431a7e-e927-4b06-a3ee-2bfe6bab1595?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '653' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 5cc44582-d1f0-467e-81d3-3eb3f2df941e - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/68431a7e-e927-4b06-a3ee-2bfe6bab1595?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - dca398a9-f01a-495f-b575-5e0dc1fe949e - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"e61a777d-a9c3-4055-be95-fb8a5876e4e4\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n\ - \ \"resourceGuid\": \"957c3731-6adf-4b4e-b1b3-a5d6de8673a3\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '654' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:50 GMT - etag: - - W/"e61a777d-a9c3-4055-be95-fb8a5876e4e4" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e36db70e-24fd-4df4-b8a2-3bed91503426 - status: - code: 200 - message: OK -- request: - body: '{"name": "cli-lock-subnet000003", "properties": {"addressPrefix": "10.0.0.0/16"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - Content-Length: - - '81' - Content-Type: - - application/json - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"dc7e379f-f560-4be7-bb3b-2c88d6ced3d0\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/bcee6046-981b-4a6d-b937-39df1bab09e4?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '462' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e13d53bd-72fb-465e-ab9e-f084bc749972 - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/bcee6046-981b-4a6d-b937-39df1bab09e4?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 29ffa149-78b6-47a3-b57a-5f9c5e9de158 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"830b81e9-903d-4bb3-afb4-540247e878fa\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - cache-control: - - no-cache - content-length: - - '463' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:56 GMT - etag: - - W/"830b81e9-903d-4bb3-afb4-540247e878fa" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 1fcac633-efce-49d1-a97b-6f43bc3a2e16 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-name --resource-type --namespace --parent --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:57:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '295' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31454' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '359' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31470' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '389' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31486' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 04:58:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31190' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 04:58:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '30830' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 04:58:14 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - -g -o - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:58:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_with_resource_id.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_with_resource_id.yaml deleted file mode 100644 index 5b541a64871..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_lock_with_resource_id.yaml +++ /dev/null @@ -1,1221 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001","name":"cli_test_lock_with_resource_id000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2023-02-27T04:55:42Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '306' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:55:48 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "enableDdosProtection": false, "enableVmProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '152' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"51d55817-b94a-4033-946b-deca31e40d3b\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \ - \ \"resourceGuid\": \"bcca78a2-0b41-4d47-85e1-2a4f144ce347\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/c9f5a904-bb2b-444f-9c87-fd6da367d06c?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '652' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:55:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - de5caa88-c114-457a-8c14-321902bd60f2 - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/c9f5a904-bb2b-444f-9c87-fd6da367d06c?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:55:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 00b490c2-d5a4-45e4-abd2-32d462ae9623 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"a7340708-140b-44ba-bb7d-42108880b1dc\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n\ - \ \"resourceGuid\": \"bcca78a2-0b41-4d47-85e1-2a4f144ce347\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '653' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:00 GMT - etag: - - W/"a7340708-140b-44ba-bb7d-42108880b1dc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 767f5760-d0cc-45fd-a67a-3dbfa82079bc - status: - code: 200 - message: OK -- request: - body: '{"name": "cli-lock-subnet000003", "properties": {"addressPrefix": "10.0.0.0/16"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - Content-Length: - - '81' - Content-Type: - - application/json - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"340e9aa9-ec29-4479-96d5-e4933f41687d\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/650bcd3d-adbf-4e5e-a1cb-ed24c638c3fb?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '461' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 17e4a14e-3cf2-4578-ab16-eb54376260f5 - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/650bcd3d-adbf-4e5e-a1cb-ed24c638c3fb?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 84c4ff1f-7982-41d0-a8ac-51bdace19709 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"e8e062cf-7d3d-485f-bc7e-f1bf4ee42413\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - cache-control: - - no-cache - content-length: - - '462' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:06 GMT - etag: - - W/"e8e062cf-7d3d-485f-bc7e-f1bf4ee42413" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - ec4a76a0-069c-4751-8c48-17f36630a1d4 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n --resource --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '342' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n --resource --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '372' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '342' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '372' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 04:56:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '30813' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 04:56:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 04:56:14 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef.yaml deleted file mode 100644 index 0feee0a96b4..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef.yaml +++ /dev/null @@ -1,92 +0,0 @@ -interactions: -- request: - body: !!python/unicode '{"location": "westus", "tags": {"date": "2018-08-17T17:23:55Z", - "product": "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 resourcemanagementclient/2.0.0 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg000001?api-version=2018-02-01 - response: - body: {string: !!python/unicode '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001","name":"clitest.rg000001","location":"westus","tags":{"date":"2018-08-17T17:23:55Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:23:56 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1198'] - status: {code: 201, message: Created} -- request: - body: !!python/unicode '{"properties": {"displayName": "test_appdef000003", "lockLevel": - "None", "description": "test_appdef_123", "packageFileUri": "https://testclinew.blob.core.windows.net/files/vivekMAD.zip", - "authorizations": [{"roleDefinitionId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635", - "principalId": "5e91139a-c94b-462e-a6ff-1ee95e8aac07"}]}, "location": "eastus2euap"}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [managedapp definition create] - Connection: [keep-alive] - Content-Length: ['355'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 azure-mgmt-resource/2017-09-01 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002?api-version=2017-09-01 - response: - body: {string: !!python/unicode '{"error":{"code":"LocationNotAvailableForResourceType","message":"The - provided location ''eastus2euap'' is not available for resource type ''Microsoft.Solutions/applicationDefinitions''. - List of available regions for the resource type is ''southcentralus,northcentralus,westcentralus,westus,westus2,eastus,eastus2,centralus,westeurope,northeurope,eastasia,southeastasia,brazilsouth,japanwest,japaneast,australiaeast,australiasoutheast,southindia,westindia,centralindia,canadacentral,canadaeast,uksouth,ukwest,koreacentral,koreasouth,francecentral''."}}'} - headers: - cache-control: [no-cache] - content-length: ['546'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:23:57 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-failure-cause: [gateway] - status: {code: 400, message: Bad Request} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 resourcemanagementclient/2.0.0 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg000001?api-version=2018-02-01 - response: - body: {string: !!python/unicode ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Fri, 17 Aug 2018 17:23:58 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTElURVNUOjJFUkdWNldXU0ZSRzdKVDJHUkw3T0RJNTRXS0JFTFk3V1BPWjNOVnxEMjhGM0U5NzA4OEIyQjk3LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef_inline.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef_inline.yaml deleted file mode 100644 index a00d4f532e5..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_managedappdef_inline.yaml +++ /dev/null @@ -1,189 +0,0 @@ -interactions: -- request: - body: !!python/unicode '{"location": "westus", "tags": {"date": "2018-08-17T17:26:21Z", - "product": "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 resourcemanagementclient/2.0.0 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg000001?api-version=2018-02-01 - response: - body: {string: !!python/unicode '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001","name":"clitest.rg000001","location":"westus","tags":{"date":"2018-08-17T17:26:21Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:26:21 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: !!python/unicode '{"properties": {"displayName": "test_appdef000003", "description": - "test_appdef_123", "authorizations": [{"roleDefinitionId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635", - "principalId": "5e91139a-c94b-462e-a6ff-1ee95e8aac07"}], "createUiDefinition": - "{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#\",\r\n \"handler\": - \"Microsoft.Compute.MultiVm\",\r\n \"version\": \"0.1.2-preview\",\r\n \"parameters\": - {\r\n \"basics\": [\r\n {\r\n \"name\": \"adminUsername\",\r\n \"type\": - \"Microsoft.Compute.UserNameTextBox\",\r\n \"label\": \"Admin - Username\",\r\n \"toolTip\": \"Admin user name for the virtual - machine\",\r\n \"osPlatform\": \"Linux\"\r\n },\r\n {\r\n \"name\": - \"adminPassword\",\r\n \"type\": \"Microsoft.Common.PasswordBox\",\r\n \"label\": - {\r\n \"password\": \"Admin Password\",\r\n \"confirmPassword\": - \"Confirm password\"\r\n },\r\n \"toolTip\": \"Admin - password for the virtual machine\",\r\n \"constraints\": {\r\n \"required\": - true,\r\n \"regex\": \"^(?:(?=.*[a-z])(?:(?=.*[A-Z])(?=.*[\\\\d\\\\W])|(?=.*\\\\W)(?=.*\\\\d))|(?=.*\\\\W)(?=.*[A-Z])(?=.*\\\\d)).{6,72}$\",\r\n \"validationMessage\": - \"The password must be between 6 and 72 characters long, and contain characters - from at least 3 of the following groups: uppercase characters, lowercase characters, - numbers, and special characters.\"\r\n },\r\n \"options\": - {\r\n \"hideConfirmation\": false\r\n }\r\n }\r\n ],\r\n \"steps\": - [\r\n {\r\n \"name\": \"ipConfig\",\r\n \"label\": - \"IP Config\",\r\n \"subLabel\": {\r\n \"preValidation\": - \"Configure the public IP address\",\r\n \"postValidation\": - \"Done\"\r\n },\r\n \"bladeTitle\": \"IP Settings\",\r\n \"elements\": - [\r\n {\r\n \"name\": \"ipCombo\",\r\n \"type\": - \"Microsoft.Network.PublicIpAddressCombo\",\r\n \"label\": - {\r\n \"publicIpAddress\": \"Public IP address\",\r\n \"domainNameLabel\": - \"Domain name label\"\r\n },\r\n \"toolTip\": - {\r\n \"publicIpAddress\": \"\",\r\n \"domainNameLabel\": - \"\"\r\n },\r\n \"defaultValue\": - {\r\n \"publicIpAddressName\": \"myPublicIP\"\r\n },\r\n \"constraints\": - {\r\n \"required\": {\r\n \"domainNameLabel\": - true\r\n }\r\n },\r\n \"options\": - {\r\n \"hideNone\": true,\r\n \"hideDomainNameLabel\": - false,\r\n \"hideExisting\": true\r\n },\r\n \"visible\": - true\r\n }\r\n ]\r\n }\r\n ],\r\n \"outputs\": - {\r\n \"adminUsername\": \"[basics(''adminUsername'')]\",\r\n \"adminPassword\": - \"[basics(''adminPassword'')]\",\r\n \"dnsLabelPrefix\": \"[steps(''ipConfig'').ipCombo.domainNameLabel]\",\r\n \"applianceResourceNameForMainTemplate\": - \"testappname\"\r\n }\r\n }\r\n}", "mainTemplate": "{\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": - \"1.0.0.0\",\r\n \"parameters\": {\r\n \"adminUsername\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"User name - for the Virtual Machine.\"\r\n }\r\n },\r\n \"adminPassword\": {\r\n \"type\": - \"securestring\",\r\n \"metadata\": {\r\n \"description\": \"Password - for the Virtual Machine.\"\r\n }\r\n },\r\n \"dnsLabelPrefix\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Unique DNS - Name for the Public IP used to access the Virtual Machine.\"\r\n }\r\n },\r\n \"ubuntuOSVersion\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"16.04.0-LTS\",\r\n \"allowedValues\": - [\r\n \"12.04.5-LTS\",\r\n \"14.04.5-LTS\",\r\n \"15.10\",\r\n \"16.04.0-LTS\"\r\n ],\r\n \"metadata\": - {\r\n \"description\": \"The Ubuntu version for the VM. This will pick - a fully patched image of this given Ubuntu version.\"\r\n }\r\n }\r\n },\r\n \"variables\": - {\r\n \"storageAccountName\": \"[concat(uniquestring(resourceGroup().id), - ''salinuxvm'')]\",\r\n \"imagePublisher\": \"Canonical\",\r\n \"imageOffer\": - \"UbuntuServer\",\r\n \"nicName\": \"myVMNic\",\r\n \"addressPrefix\": - \"10.0.0.0/16\",\r\n \"subnetName\": \"Subnet\",\r\n \"subnetPrefix\": - \"10.0.0.0/24\",\r\n \"storageAccountType\": \"Standard_LRS\",\r\n \"publicIPAddressName\": - \"myPublicIP\",\r\n \"publicIPAddressType\": \"Dynamic\",\r\n \"vmName\": - \"MyUbuntuVM\",\r\n \"vmSize\": \"Standard_A1\",\r\n \"virtualNetworkName\": - \"MyVNET\",\r\n \"vnetID\": \"[resourceId(''Microsoft.Network/virtualNetworks'',variables(''virtualNetworkName''))]\",\r\n \"subnetRef\": - \"[concat(variables(''vnetID''),''/subnets/'',variables(''subnetName''))]\"\r\n },\r\n \"resources\": - [\r\n {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[variables(''storageAccountName'')]\",\r\n \"apiVersion\": \"2017-06-01\",\r\n \"location\": - \"westus\",\r\n \"sku\": {\r\n \"name\": \"[variables(''storageAccountType'')]\"\r\n },\r\n \"kind\": - \"Storage\",\r\n \"properties\": {}\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/publicIPAddresses\",\r\n \"name\": - \"[variables(''publicIPAddressName'')]\",\r\n \"location\": \"westus\",\r\n \"properties\": - {\r\n \"publicIPAllocationMethod\": \"[variables(''publicIPAddressType'')]\",\r\n \"dnsSettings\": - {\r\n \"domainNameLabel\": \"[parameters(''dnsLabelPrefix'')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"name\": - \"[variables(''virtualNetworkName'')]\",\r\n \"location\": \"westus\",\r\n \"properties\": - {\r\n \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"[variables(''addressPrefix'')]\"\r\n ]\r\n },\r\n \"subnets\": - [\r\n {\r\n \"name\": \"[variables(''subnetName'')]\",\r\n \"properties\": - {\r\n \"addressPrefix\": \"[variables(''subnetPrefix'')]\"\r\n }\r\n }\r\n ]\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/networkInterfaces\",\r\n \"name\": - \"[variables(''nicName'')]\",\r\n \"location\": \"westus\",\r\n \"dependsOn\": - [\r\n \"[resourceId(''Microsoft.Network/publicIPAddresses/'', variables(''publicIPAddressName''))]\",\r\n \"[resourceId(''Microsoft.Network/virtualNetworks/'', - variables(''virtualNetworkName''))]\"\r\n ],\r\n \"properties\": {\r\n \"ipConfigurations\": - [\r\n {\r\n \"name\": \"ipconfig1\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"Dynamic\",\r\n \"publicIPAddress\": - {\r\n \"id\": \"[resourceId(''Microsoft.Network/publicIPAddresses'',variables(''publicIPAddressName''))]\"\r\n },\r\n \"subnet\": - {\r\n \"id\": \"[variables(''subnetRef'')]\"\r\n }\r\n }\r\n }\r\n ]\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-03-30\",\r\n \"type\": \"Microsoft.Compute/virtualMachines\",\r\n \"name\": - \"[variables(''vmName'')]\",\r\n \"location\": \"westus\",\r\n \"dependsOn\": - [\r\n \"[resourceId(''Microsoft.Storage/storageAccounts/'', variables(''storageAccountName''))]\",\r\n \"[resourceId(''Microsoft.Network/networkInterfaces/'', - variables(''nicName''))]\"\r\n ],\r\n \"properties\": {\r\n \"hardwareProfile\": - {\r\n \"vmSize\": \"[variables(''vmSize'')]\"\r\n },\r\n \"osProfile\": - {\r\n \"computerName\": \"[variables(''vmName'')]\",\r\n \"adminUsername\": - \"[parameters(''adminUsername'')]\",\r\n \"adminPassword\": \"[parameters(''adminPassword'')]\"\r\n },\r\n \"storageProfile\": - {\r\n \"imageReference\": {\r\n \"publisher\": \"[variables(''imagePublisher'')]\",\r\n \"offer\": - \"[variables(''imageOffer'')]\",\r\n \"sku\": \"[parameters(''ubuntuOSVersion'')]\",\r\n \"version\": - \"latest\"\r\n },\r\n \"osDisk\": {\r\n \"createOption\": - \"FromImage\"\r\n },\r\n \"dataDisks\": [\r\n {\r\n \"diskSizeGB\": - \"1023\",\r\n \"lun\": 0,\r\n \"createOption\": \"Empty\"\r\n }\r\n ]\r\n },\r\n \"networkProfile\": - {\r\n \"networkInterfaces\": [\r\n {\r\n \"id\": - \"[resourceId(''Microsoft.Network/networkInterfaces'',variables(''nicName''))]\"\r\n }\r\n ]\r\n },\r\n \"diagnosticsProfile\": - {\r\n \"bootDiagnostics\": {\r\n \"enabled\": \"true\",\r\n \"storageUri\": - \"[concat(reference(concat(''Microsoft.Storage/storageAccounts/'', variables(''storageAccountName'')), - ''2016-01-01'').primaryEndpoints.blob)]\"\r\n }\r\n }\r\n }\r\n }\r\n ],\r\n \"outputs\": - {\r\n \"hostname\": {\r\n \"type\": \"string\",\r\n \"value\": - \"[reference(variables(''publicIPAddressName'')).dnsSettings.fqdn]\"\r\n },\r\n \"sshCommand\": - {\r\n \"type\": \"string\",\r\n \"value\": \"[concat(''ssh '', parameters(''adminUsername''), - ''@'', reference(variables(''publicIPAddressName'')).dnsSettings.fqdn)]\"\r\n }\r\n }\r\n}", - "lockLevel": "None"}, "location": "eastus2euap"}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [managedapp definition create] - Connection: [keep-alive] - Content-Length: ['10718'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 azure-mgmt-resource/2017-09-01 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002?api-version=2017-09-01 - response: - body: {string: !!python/unicode '{"error":{"code":"LocationNotAvailableForResourceType","message":"The - provided location ''eastus2euap'' is not available for resource type ''Microsoft.Solutions/applicationDefinitions''. - List of available regions for the resource type is ''southcentralus,northcentralus,westcentralus,westus,westus2,eastus,eastus2,centralus,westeurope,northeurope,eastasia,southeastasia,brazilsouth,japanwest,japaneast,australiaeast,australiasoutheast,southindia,westindia,centralindia,canadacentral,canadaeast,uksouth,ukwest,koreacentral,koreasouth,francecentral''."}}'} - headers: - cache-control: [no-cache] - content-length: ['546'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:26:22 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-failure-cause: [gateway] - status: {code: 400, message: Bad Request} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 resourcemanagementclient/2.0.0 Azure-SDK-For-Python - AZURECLI/2.0.45] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg000001?api-version=2018-02-01 - response: - body: {string: !!python/unicode ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Fri, 17 Aug 2018 17:26:23 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTElURVNUOjJFUkdBN1VUWFhLRFFKR1FYS1JQVlAzNkFNNU5JT1ZLTTNDS1JXNHwwOTdDMDExMEUyMDkwRDc3LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14998'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_operation.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_operation.yaml deleted file mode 100644 index c740a2adfcd..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_operation.yaml +++ /dev/null @@ -1,2311 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.compute?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: '{"displayName":"Microsoft Compute","operations":[{"name":"Microsoft.Compute/register/action","displayName":"Register - Subscription for Compute","description":"Registers Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null},{"name":"Microsoft.Compute/unregister/action","displayName":"Unregister - Subscription for Compute","description":"Unregisters Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null}],"resourceTypes":[{"name":"availabilitySets","displayName":"Availability - Sets","operations":[{"name":"Microsoft.Compute/availabilitySets/read","displayName":"Get - Availablity Set","description":"Get the properties of an availability set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/write","displayName":"Create - or Update Availability Set","description":"Creates a new availability set - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/delete","displayName":"Delete - Availability Set","description":"Deletes the availability set","origin":"user,system","properties":null}]},{"name":"availabilitySets/vmSizes","displayName":"Virtual - Machine Size for Availability set","operations":[{"name":"Microsoft.Compute/availabilitySets/vmSizes/read","displayName":"List - Virtual Machine Sizes for Availability Set","description":"List available - sizes for creating or updating a virtual machine in the availability set","origin":"user,system","properties":null}]},{"name":"virtualMachines","displayName":"Virtual - Machines","operations":[{"name":"Microsoft.Compute/virtualMachines/read","displayName":"Get - Virtual Machine","description":"Get the properties of a virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/write","displayName":"Create - or Update Virtual Machine","description":"Creates a new virtual machine or - updates an existing virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/delete","displayName":"Delete - Virtual Machine","description":"Deletes the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/start/action","displayName":"Start - Virtual Machine","description":"Starts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/powerOff/action","displayName":"Power - Off Virtual Machine","description":"Powers off the virtual machine. Note that - the virtual machine will continue to be billed.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reapply/action","displayName":"Reapply - a virtual machine''s current model","description":"Reapplies a virtual machine''s - current model","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine","description":"Redeploys virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/restart/action","displayName":"Restart - Virtual Machine","description":"Restarts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs","description":"Retrieves boot diagnostic logs - blob URIs","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine","description":"Powers off the virtual machine and releases - the compute resources","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/generalize/action","displayName":"Generalize - Virtual Machine","description":"Sets the virtual machine state to Generalized - and prepares the virtual machine for capture","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/capture/action","displayName":"Capture - Virtual Machine","description":"Captures the virtual machine by copying virtual - hard disks and generates a template that can be used to create similar virtual - machines","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommand/action","displayName":"Run - Command on Virtual Machine","description":"Executes a predefined script on - the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/convertToManagedDisks/action","displayName":"Convert - Virtual Machine disks to Managed Disks","description":"Converts the blob based - disks of the virtual machine to managed disks","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/performMaintenance/action","displayName":"Perform - Maintenance Redeploy","description":"Performs Maintenance Operation on the - VM.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine","description":"Reimages virtual machine which is using differencing - disk.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/login/action","displayName":"Log - in to Virtual Machine","description":"Log in to a virtual machine as a regular - user","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/loginAsAdmin/action","displayName":"Log - in to Virtual Machine as administrator","description":"Log in to a virtual - machine with Windows administrator or Linux root user privileges","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/installPatches/action","displayName":"Install - OS update patches on virtual machine","description":"Installs available OS - update patches on the virtual machine based on parameters provided by user. - Assessment results containing list of available patches will also get refreshed - as part of this.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/assessPatches/action","displayName":"Assess - virtual machine for available OS update patches","description":"Assesses the - virtual machine and finds list of available OS update patches for it.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/cancelPatchInstallation/action","displayName":"Cancel - install OS update patch operation on virtual machine","description":"Cancels - the ongoing install OS update patch operation on the virtual machine.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine","description":"Simulates the eviction of - spot Virtual Machine","origin":"user,system","properties":null}]},{"name":"virtualMachines/instanceView","displayName":"Virtual - Machine Instance View","operations":[{"name":"Microsoft.Compute/virtualMachines/instanceView/read","displayName":"Get - Virtual Machine Instance View","description":"Gets the detailed runtime status - of the virtual machine and its resources","origin":"user,system","properties":null}]},{"name":"virtualMachines/vmSizes","displayName":"Virtual - Machine Size","operations":[{"name":"Microsoft.Compute/virtualMachines/vmSizes/read","displayName":"Lists - Available Virtual Machine Sizes","description":"Lists available sizes the - virtual machine can be updated to","origin":"user,system","properties":null}]},{"name":"images","displayName":"Images","operations":[{"name":"Microsoft.Compute/images/read","displayName":"Get - Image","description":"Get the properties of the Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/write","displayName":"Create - or Update Image","description":"Creates a new Image or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/delete","displayName":"Delete - Image","description":"Deletes the image","origin":"user,system","properties":null}]},{"name":"restorePointCollections","displayName":"Restore - Point Collections","operations":[{"name":"Microsoft.Compute/restorePointCollections/read","displayName":"Get - Restore Point Collection","description":"Get the properties of a restore point - collection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/write","displayName":"Create - or Update Restore Point Collection","description":"Creates a new restore point - collection or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/delete","displayName":"Delete - Restore Point Collection","description":"Deletes the restore point collection - and contained restore points","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints","displayName":"Restore - Points","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/read","displayName":"Get - Restore Point","description":"Get the properties of a restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/write","displayName":"Create - Restore Point","description":"Creates a new restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/delete","displayName":"Delete - Restore Point","description":"Deletes the restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/retrieveSasUris/action","displayName":"Get - Restore Point along with blob SAS URIs","description":"Get the properties - of a restore point along with blob SAS URIs","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Metric Definitions","description":"Reads Virtual Machine Metric - Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"virtualMachines/extensions","displayName":"Virtual - Machine Extensions","operations":[{"name":"Microsoft.Compute/virtualMachines/extensions/read","displayName":"Get - Virtual Machine Extension","description":"Get the properties of a virtual - machine extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/write","displayName":"Create - or Update Virtual Machine Extension","description":"Creates a new virtual - machine extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/delete","displayName":"Delete - Virtual Machine Extension","description":"Deletes the virtual machine extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions","displayName":"Virtual - Machine Scale Set Extensions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/read","displayName":"Get - Virtual Machine Scale Set Extension","description":"Gets the properties of - a Virtual Machine Scale Set Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/write","displayName":"Create - or Update Virtual Machine Scale Set Extension","description":"Creates a new - Virtual Machine Scale Set Extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/delete","displayName":"Delete - Virtual Machine Scale Set Extension","description":"Deletes the Virtual Machine - Scale Set Extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets","displayName":"Virtual - Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/read","displayName":"Get - Virtual Machine Scale Set","description":"Get the properties of a Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/write","displayName":"Create - or Update Virtual Machine Scale Set","description":"Creates a new Virtual - Machine Scale Set or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete","displayName":"Delete - Virtual Machine Scale Set","description":"Deletes the Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete/action","displayName":"Delete - Virtual Machines in a Virtual Machine Scale Set","description":"Deletes the - instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/start/action","displayName":"Start - Virtual Machine Scale Set","description":"Starts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/powerOff/action","displayName":"Power - Off Virtual Machine Scale Set","description":"Powers off the instances of - the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/restart/action","displayName":"Restart - Virtual Machine Scale Set","description":"Restarts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/deallocate/action","displayName":"Deallocate - Virtual Machine Scale Set","description":"Powers off and releases the compute - resources for the instances of the Virtual Machine Scale Set ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/manualUpgrade/action","displayName":"Manual - Upgrade Virtual Machine Scale Set","description":"Manually updates instances - to latest model of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimage/action","displayName":"Reimage - Virtual Machine Scale Set","description":"Reimages the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine Scale Set","description":"Reimages all disks - (OS Disk and Data Disks) for the instances of a Virtual Machine Scale Set - ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/redeploy/action","displayName":"Redeploy - Virtual Machine Scale Set","description":"Redeploy the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine Scale Set","description":"Performs - planned maintenance on the instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/scale/action","displayName":"Verify - Scaling of Virtual Machine Scale Set","description":"Verify if an existing - Virtual Machine Scale Set can Scale In/Scale Out to specified instance count","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/forceRecoveryServiceFabricPlatformUpdateDomainWalk/action","displayName":"Manually - walk platform update domains in a service fabric Virtual Machine Scale Set","description":"Manually - walk the platform update domains of a service fabric Virtual Machine Scale - Set to finish a pending update that is stuck","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/osRollingUpgrade/action","displayName":"Upgrades - OS on Virtual Machine Scale Set instances to the latest available Platform - Image OS version.","description":"Starts a rolling upgrade to move all Virtual - Machine Scale Set instances to the latest available Platform Image OS version.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/setOrchestrationServiceState/action","displayName":"Sets - the state of an orchestration service in a Virtual Machine Scale Set.","description":"Sets - the state of an orchestration service based on the action provided in operation - input.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/action","displayName":"Cancel - Virtual Machine Scale Set Rolling Upgrade operation","description":"Cancels - the rolling upgrade of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/instanceView","displayName":"Virtual - Machine Scale Set Instance View","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/instanceView/read","displayName":"Get - Virtual Machine Scale Set Instance View","description":"Gets the instance - view of the Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/skus","displayName":"Virtual - Machine Scale Set SKU","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/skus/read","displayName":"List - SKUs for Virtual Machine Scale Set","description":"Lists the valid SKUs for - an existing Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Scalet Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Scalet Set Metric Definitions","description":"Reads Virtual - Machine Scalet Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of inbound flows (traffic - going into the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out Total","displayName":"Network Out Total","displayDescription":"The number - of bytes out on all network interfaces by the Virtual Machine(s) (Outgoing - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]}]}}}]},{"name":"virtualMachineScaleSets/rollingUpgrades","displayName":"Virtual - Machine Scale Sets Rolling Upgrades","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/read","displayName":"Gets - the latest Rolling Upgrade status for a Virtual Machine Scale Set","description":"Get - latest Rolling Upgrade status for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/osUpgradeHistory","displayName":"Virtual - Machine Scale Set OS Upgrade History","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/osUpgradeHistory/read","displayName":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","description":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines","displayName":"Virtual - Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read","displayName":"Gets - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write","displayName":"Updates - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Updates - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/delete","displayName":"Delete - Virtual Machine in a Virtual Machine Scale Set","description":"Delete a specific - Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/start/action","displayName":"Start - Virtual Machine in a Virtual Machine Scale Set","description":"Starts a Virtual - Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/powerOff/action","displayName":"Power - off Virtual Machine in a Virtual Machine Scale Set","description":"Powers - Off a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/restart/action","displayName":"Restart - Virtual Machine instance in a Virtual Machine Scale Set","description":"Restarts - a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine in a Virtual Machine Scale Set","description":"Powers off - and releases the compute resources for a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine in a Virtual Machine Scale Set","description":"Reimages a - Virtual Machine instance in a Virtual Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Reimages - all disks (OS Disk and Data Disks) for Virtual Machine instance in a Virtual - Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine instance in a Virtual Machine Scale Set","description":"Redeploys - a Virtual Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs of Virtual Machine instance in a Virtual Machine - Scale Set","description":"Retrieves boot diagnostic logs blob URIs of Virtual - Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine instance in a Virtual Machine Scale - Set","description":"Performs planned maintenance on a Virtual Machine instance - in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommand/action","displayName":"Run - Command on a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Executes - a predefined script on a Virtual Machine instance in a Virtual Machine Scale - Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine in Virtual Machine Scale Set","description":"Simulates - the eviction of spot Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/instanceView","displayName":"Instance - View of Virtual Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read","displayName":"Gets - Instance View of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the instance view of a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine in Scale Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine in Scale Set Metric Definitions","description":"Reads Virtual - Machine in Scale Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"locations/vmSizes","displayName":"Virtual - Machine Sizes","operations":[{"name":"Microsoft.Compute/locations/vmSizes/read","displayName":"List - Available Virtual Machine Sizes in Location","description":"Lists available - virtual machine sizes in a location","origin":"user,system","properties":null}]},{"name":"locations/operations","displayName":"Operation","operations":[{"name":"Microsoft.Compute/locations/operations/read","displayName":"Get - Operation","description":"Gets the status of an asynchronous operation","origin":"user,system","properties":null}]},{"name":"locations/usages","displayName":"Usage - Metrics","operations":[{"name":"Microsoft.Compute/locations/usages/read","displayName":"Get - Usage Metrics","description":"Gets service limits and current usage quantities - for the subscription''s compute resources in a location","origin":"user,system","properties":null}]},{"name":"locations/runCommands","displayName":"Run - Commands","operations":[{"name":"Microsoft.Compute/locations/runCommands/read","displayName":"Lists - Run Commands","description":"Lists available run commands in location","origin":"user,system","properties":null}]},{"name":"operations","displayName":"Available - Compute Operations","operations":[{"name":"Microsoft.Compute/operations/read","displayName":"List - Available Compute Operations","description":"Lists operations available on - Microsoft.Compute resource provider","origin":"user,system","properties":null}]},{"name":"skus","displayName":"Skus","operations":[{"name":"Microsoft.Compute/skus/read","displayName":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","description":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","origin":"user,system","properties":null}]},{"name":"disks","displayName":"Disks","operations":[{"name":"Microsoft.Compute/disks/read","displayName":"Get - Disk","description":"Get the properties of a Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/write","displayName":"Create - or Update Disk","description":"Creates a new Disk or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/delete","displayName":"Delete - Disk","description":"Deletes the Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/beginGetAccess/action","displayName":"Get - Disk SAS URI","description":"Get the SAS URI of the Disk for blob access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/endGetAccess/action","displayName":"Revoke - Disk SAS URI","description":"Revoke the SAS URI of the Disk","origin":"user,system","properties":null}]},{"name":"snapshots","displayName":"Snapshots","operations":[{"name":"Microsoft.Compute/snapshots/read","displayName":"Get - Snapshot","description":"Get the properties of a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/write","displayName":"Create - or Update Snapshot","description":"Create a new Snapshot or update an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/delete","displayName":"Delete - Snapshot","description":"Delete a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/beginGetAccess/action","displayName":"Get - Snapshot SAS URI","description":"Get the SAS URI of the Snapshot for blob - access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/endGetAccess/action","displayName":"Revoke - Snapshot SAS URI","description":"Revoke the SAS URI of the Snapshot","origin":"user,system","properties":null}]},{"name":"locations/diskOperations","displayName":"DiskOperation","operations":[{"name":"Microsoft.Compute/locations/diskOperations/read","displayName":"Get - Disk Operation","description":"Gets the status of an asynchronous Disk operation","origin":"user,system","properties":null}]},{"name":"sharedVMImages","displayName":"SharedVMImages","operations":[{"name":"Microsoft.Compute/sharedVMImages/read","displayName":"Get - SharedVMImage","description":"Get the properties of a SharedVMImage","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/write","displayName":"Create - or Update SharedVMImage","description":"Creates a new SharedVMImage or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/delete","displayName":"Delete - SharedVMImage","description":"Deletes the SharedVMImage","origin":"user,system","properties":null}]},{"name":"sharedVMImages/versions","displayName":"SharedVMImageVersions","operations":[{"name":"Microsoft.Compute/sharedVMImages/versions/read","displayName":"Get - SharedVMImageVersion","description":"Get the properties of a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/write","displayName":"Create - or Update SharedVMImageVersion","description":"Create a new SharedVMImageVersion - or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/delete","displayName":"Delete - SharedVMImageVersion","description":"Delete a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/replicate/action","displayName":"Replicate - SharedVMImageVersion","description":"Replicate a SharedVMImageVersion to target - regions","origin":"user,system","properties":null}]},{"name":"locations/capsOperations","displayName":"CapsOperation","operations":[{"name":"Microsoft.Compute/locations/capsOperations/read","displayName":"Get - Caps Operation","description":"Gets the status of an asynchronous Caps operation","origin":"user,system","properties":null}]},{"name":"locations/publishers","displayName":"Publishers","operations":[{"name":"Microsoft.Compute/locations/publishers/read","displayName":"Get - Publisher","description":"Get the properties of a Publisher","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers","displayName":"Platform - Image Offers","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/read","displayName":"Get - Platform Image Offer","description":"Get the properties of a Platform Image - Offer","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus","displayName":"Platform - Image Skus","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/read","displayName":"Get - Platform Image Sku","description":"Get the properties of a Platform Image - Sku","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus/versions","displayName":"Platform - Image Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/versions/read","displayName":"Get - Platform Image Version","description":"Get the properties of a Platform Image - Version","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types","displayName":"VMExtension - Types","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/read","displayName":"Get - VMExtension Type","description":"Get the properties of a VMExtension Type","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types/versions","displayName":"VMExtension - Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/versions/read","displayName":"Get - VMExtension Version","description":"Get the properties of a VMExtension Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/networkInterfaces","displayName":"Network - interfaces of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/networkInterfaces/read","displayName":"Get - all network interfaces of a Virtual Machine Scale Set","description":"Get - properties of all network interfaces of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/publicIPAddresses","displayName":"Public - IP addresses of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/publicIPAddresses/read","displayName":"Get - all public IP addresses of a Virtual Machine Scale Set","description":"Get - properties of all public IP addresses of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces","displayName":"Network - interfaces of a virtual machine created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read","displayName":"Get - one or all network interfaces of a virtual machine created using Virtual Machine - Scale Set","description":"Get properties of one or all network interfaces - of a virtual machine created using Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses","displayName":"IP - address created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read","displayName":"Get - public IP address created using Virtual Machine Scale Set. Virtual Machine - Scale Set can create at most one public IP per ipconfiguration (private IP)","description":"Get - properties of public IP address created using Virtual Machine Scale Set. Virtual - Machine Scale Set can create at most one public IP per ipconfiguration (private - IP)","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations","displayName":"IP - configurations of a network interface created using Virtual Machine Scale - Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read","displayName":"Get - one or all IP configurations of a network interface created using Virtual - Machine Scale Set. IP configurations represent private IPs","description":"Get - properties of one or all IP configurations of a network interface created - using Virtual Machine Scale Set. IP configurations represent private IPs","origin":"user,system","properties":null}]},{"name":"galleries","displayName":"Galleries","operations":[{"name":"Microsoft.Compute/galleries/read","displayName":"Get - Gallery","description":"Gets the properties of Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/write","displayName":"Create - or Update Gallery","description":"Creates a new Gallery or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/delete","displayName":"Delete - Gallery","description":"Deletes the Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/share/action","displayName":"Share - Gallery","description":"Shares a Gallery to different scopes","origin":"user,system","properties":null}]},{"name":"galleries/images","displayName":"GalleryImages","operations":[{"name":"Microsoft.Compute/galleries/images/read","displayName":"Get - Gallery Image","description":"Gets the properties of Gallery Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/write","displayName":"Create - or Update Gallery Image","description":"Creates a new Gallery Image or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/delete","displayName":"Delete - Gallery Image","description":"Deletes the Gallery Image","origin":"user,system","properties":null}]},{"name":"galleries/images/versions","displayName":"GalleryImageVersions","operations":[{"name":"Microsoft.Compute/galleries/images/versions/read","displayName":"Get - Gallery Image Version","description":"Gets the properties of Gallery Image - Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/write","displayName":"Create - or Update Gallery Image Version","description":"Creates a new Gallery Image - Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/delete","displayName":"Delete - Gallery Image Version","description":"Deletes the Gallery Image Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine Scale Set log definitions","description":"Gets the available - logs for Virtual Machine Scale Sets.","origin":"system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - Virtual Machine Scale Set.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine Scale set.","origin":"system","properties":null}]},{"name":"locations/logAnalytics","displayName":"Log - Analytics","operations":[{"name":"Microsoft.Compute/locations/logAnalytics/getRequestRateByInterval/action","displayName":"Create - logs to show total requests by time interval","description":"Create logs to - show total requests by time interval to aid throttling diagnostics.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/locations/logAnalytics/getThrottledRequests/action","displayName":"Create - logs to show aggregates of throttled requests","description":"Create logs - to show aggregates of throttled requests grouped by ResourceName, OperationName, - or the applied Throttle Policy.","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine log definitions","description":"Gets the available logs for - Virtual Machine.","origin":"system","properties":{"serviceSpecification":{"logSpecifications":[{"name":"SoftwareUpdates","displayName":"SoftwareUpdates"},{"name":"SoftwareUpdateProfile","displayName":"SoftwareUpdateProfile"}]}}}]},{"name":"virtualMachines/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - diagnostic setting","description":"Gets the diagnostic setting for the Virtual - Machine.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine.","origin":"system","properties":null}]},{"name":"hostGroups","displayName":"Host - Groups","operations":[{"name":"Microsoft.Compute/hostGroups/read","displayName":"Get - Host Group","description":"Get the properties of a host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/write","displayName":"Create - or Update Host Group","description":"Creates a new host group or updates an - existing host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/delete","displayName":"Delete - Host Group","description":"Deletes the host group","origin":"user,system","properties":null}]},{"name":"proximityPlacementGroups","displayName":"Proximity - Placement Groups","operations":[{"name":"Microsoft.Compute/proximityPlacementGroups/read","displayName":"Get - Proximity Placement Group","description":"Get the Properties of a Proximity - Placement Group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/write","displayName":"Create - or Update Proximity Placement Group","description":"Creates a new Proximity - Placement Group or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/delete","displayName":"Delete - Proximity Placement Group","description":"Deletes the Proximity Placement - Group","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/vmSizes","displayName":"Virtual - Machine Size for Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/vmSizes/read","displayName":"List - Virtual Machine Sizes for a Virtual Machine Scale Set","description":"List - available sizes for creating or updating a virtual machine in the Virtual - Machine Scale Set","origin":"user,system","properties":null}]},{"name":"hostGroups/hosts","displayName":"Hosts","operations":[{"name":"Microsoft.Compute/hostGroups/hosts/read","displayName":"Get - Host","description":"Get the properties of a host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/write","displayName":"Create - or Update Host","description":"Creates a new host or updates an existing host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/delete","displayName":"Delete - Host","description":"Deletes the host","origin":"user,system","properties":null}]},{"name":"diskEncryptionSets","displayName":"DiskEncryptionSets","operations":[{"name":"Microsoft.Compute/diskEncryptionSets/read","displayName":"Get - disk encryption set","description":"Get the properties of a disk encryption - set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/write","displayName":"Create - or update disk encryption set","description":"Create a new disk encryption - set or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/delete","displayName":"Delete - disk encryption set","description":"Delete a disk encryption set","origin":"user,system","properties":null}]},{"name":"locations/vsmOperations","displayName":"Operation - for Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","operations":[{"name":"Microsoft.Compute/locations/vsmOperations/read","displayName":"Get - Operation for Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","description":"Gets the status of an asynchronous operation for - Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null}]},{"name":"galleries/applications","displayName":"GalleryApplications","operations":[{"name":"Microsoft.Compute/galleries/applications/read","displayName":"Get - Gallery Application","description":"Gets the properties of Gallery Application","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/write","displayName":"Create - or Update Gallery Application","description":"Creates a new Gallery Application - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/delete","displayName":"Delete - Gallery Application","description":"Deletes the Gallery Application","origin":"user,system","properties":null}]},{"name":"galleries/applications/versions","displayName":"GalleryApplicationVersions","operations":[{"name":"Microsoft.Compute/galleries/applications/versions/read","displayName":"Get - Gallery Application Version","description":"Gets the properties of Gallery - Application Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/write","displayName":"Create - or Update Gallery Application Version","description":"Creates a new Gallery - Application Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/delete","displayName":"Delete - Gallery Application Version","description":"Deletes the Gallery Application - Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions/roles","displayName":"VirtualMachineScaleSet - Extensions Role","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/read","displayName":"Get - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Gets the properties of a Role in - a Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/write","displayName":"Update - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Updates the properties of an existing - Role in a Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","origin":"user,system","properties":null}]},{"name":"sshPublicKeys","displayName":"SSH - Public Keys","operations":[{"name":"Microsoft.Compute/sshPublicKeys/read","displayName":"Get - SSH Public Key","description":"Get the properties of an SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/write","displayName":"Create - or Update SSH Public Key","description":"Creates a new SSH public key or updates - an existing SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/delete","displayName":"Delete - SSH Public Key","description":"Deletes the SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/generateKeyPair/action","displayName":"Generate - SSH Key Pair","description":"Generates a new SSH public/private key pair","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyAzureAsyncOperation","displayName":"PrivateEndpointConnectionProxy - AzureAsyncOperation","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyAzureAsyncOperation/read","displayName":"Get - PrivateEndpointConnectionProxy Operation","description":"Get the status of - asynchronous Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyOperationResults","displayName":"PrivateEndpointConnectionProxyOperation - Results","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyOperationResults/read","displayName":"Get - PrivateEndpointConnectionProxyOperationResults","description":"Get the results - of Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions","displayName":"SharedVMExtensions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/read","displayName":"Get - Shared VM Extension","description":"Gets the properties of Shared VM Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/write","displayName":"Create - or Update Shared VM Extension","description":"Creates a new Shared VM Extension - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/delete","displayName":"Delete - Shared VM Extension","description":"Deletes the Shared VM Extension","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions/versions","displayName":"SharedVMExtensionVersions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/versions/read","displayName":"Get - Shared VM Extension Version","description":"Gets the properties of Shared - VM Extension Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/write","displayName":"Create - or Update Shared VM Extension Version","description":"Creates a new Shared - VM Extension Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/delete","displayName":"Delete - Shared VM Extension Version","description":"Deletes the Shared VM Extension - Version","origin":"user,system","properties":null}]},{"name":"diskAccesses","displayName":"DiskAccesses","operations":[{"name":"Microsoft.Compute/diskAccesses/read","displayName":"Get - DiskAccess","description":"Get the properties of DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/write","displayName":"Create - or Update DiskAccess","description":"Create a new DiskAccess resource or update - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/delete","displayName":"Delete - DiskAccess","description":"Delete a DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionsApproval/action","displayName":"Auto - Approve PrivateEndpointConnections","description":"Auto Approve a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnections","displayName":"DiskAccess - PrivateEndpointConnections","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/delete","displayName":"Delete - PrivateEndpointConnection","description":"Delete a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/read","displayName":"Get - PrivateEndpointConnection","description":"Get a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/write","displayName":"Approve - or Reject PrivateEndpointConnection","description":"Approve or Reject a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnectionProxies","displayName":"DiskAccess - PrivateEndpointConnection proxies","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/read","displayName":"Get - PrivateEndpointConnectionProxy","description":"Get the properties of a private - endpoint connection proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/write","displayName":"Create - PrivateEndpointConnectionProxy","description":"Create a new Private Endpoint - Connection Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/delete","displayName":"Delete - PrivateEndpointConnectionProxy","description":"Delete a Private Endpoint Connection - Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/validate/action","displayName":"Validate - PrivateEndpointConnectionProxy","description":"Validate a Private Endpoint - Connection Proxy object","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/extensions","displayName":"Extensions - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/read","displayName":"Get - extension for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of an extension for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/write","displayName":"Create - or Update extension for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new extension for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/delete","displayName":"Delete - extension for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the extension for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"cloudServices","displayName":"Cloud - Service Resource","operations":[{"name":"Microsoft.Compute/cloudServices/read","displayName":"Get - CloudService.","description":"Get the properties of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/write","displayName":"Create - or Update CloudService.","description":"Created a new CloudService or Update - an existing one.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete","displayName":"Delete - the CloudService.","description":"Deletes the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/poweroff/action","displayName":"Power - off the CloudService.","description":"Power off the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/start/action","displayName":"Starts - the CloudService.","description":"Starts the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/restart/action","displayName":"Restarts - one or more role instances in a CloudService.","description":"Restarts one - or more role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/reimage/action","displayName":"Reimage - one or more role instances in a CloudService.","description":"Rebuilds all - the disks in the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/rebuild/action","displayName":"Rebuilds - all the disks in the role instances in a CloudService.","description":"Reimage - all the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete/action","displayName":"Deletes - role instances in a CloudService.","description":"Deletes role instances in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/instanceView","displayName":"Cloud - Service Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/instanceView/read","displayName":"Gets - the status of a CloudService.","description":"Gets the status of a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances","displayName":"Cloud - Service Role Instance","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/delete","displayName":"Deletes - a RoleInstance from CloudService.","description":"Deletes a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/read","displayName":"Gets - a RoleInstance from CloudService.","description":"Gets a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/restart/action","displayName":"Restart - a role instance of a CloudService","description":"Restart a role instance - of a CloudService","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/reimage/action","displayName":"Reimage - a role instance of a CloudService.","description":"Reimage a role instance - of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/rebuild/action","displayName":"Rebuild - all the disks in a CloudService.","description":"Rebuild all the disks in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/updateDomains","displayName":"Cloud - Service Update Domains.","operations":[{"name":"Microsoft.Compute/cloudServices/updateDomains/read","displayName":"Gets - a list of all update domains in a CloudService.","description":"Gets a list - of all update domains in a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances/instanceView","displayName":"Cloud - Service RoleInstance Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/instanceView/read","displayName":"Gets - the status of a role instance from a CloudService.","description":"Gets the - status of a role instance from a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/providers/Microsoft.Insights/metricDefinitions","displayName":"Cloud - Services Metric Defintion.","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService metrics definition","description":"Gets the CloudService - metrics definition","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/roles","displayName":"CloudService - Roles","operations":[{"name":"Microsoft.Compute/cloudServices/roles/read","displayName":"Gets - a role from a CloudService.","description":"Gets a role from a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/write","displayName":"Scale - instances in a Role","description":"Scale instances in a Role","origin":"user,system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/metricDefinitions","displayName":"CloudService - Roles Metric Definitions","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService Roles Metric Definitions","description":"Gets the CloudService - Roles Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudServices - Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService.","origin":"system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudService - Roles Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService Roles.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService Roles","origin":"system","properties":null}]},{"name":"virtualMachines/runCommands","displayName":"Virtual - Machine RunCommands","operations":[{"name":"Microsoft.Compute/virtualMachines/runCommands/read","displayName":"Get - Virtual Machine run command","description":"Get the properties of a virtual - machine run command","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/write","displayName":"Create - or Update Virtual Machine run command","description":"Creates a new virtual - machine run command or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/delete","displayName":"Delete - Virtual Machine run command","description":"Deletes the virtual machine run - command","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/runCommands","displayName":"RunCommands - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/read","displayName":"Get - run command for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of a run command for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/write","displayName":"Create - or Update run command for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new run command for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/delete","displayName":"Delete - run command for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the run command for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults","displayName":"Patch - Installation Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/read","displayName":"Summarizes - latest patch installation operation results","description":"Retrieves the - summary of the latest patch installation operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults/softwarePatches","displayName":"Patch - Installation Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/softwarePatches/read","displayName":"Lists - all patches considered in patch installation operation","description":"Retrieves - list of patches attempted to be installed during the last patch installation - operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest","displayName":"Patch - Assessment Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/read","displayName":"Summarizes - latest patch assessment operation results","description":"Retrieves the summary - of the latest patch assessment operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest/softwarePatches","displayName":"Patch - Assessment Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/softwarePatches/read","displayName":"Lists - all patches assessed in patch assessment operation","description":"Retrieves - list of patches assessed during the last patch assessment operation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups/capacityReservations","displayName":"Capacity - Reservations","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/read","displayName":"Get - Capacity Reservation","description":"Get the properties of a capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/write","displayName":"Create - or Update Capacity Reservation","description":"Creates a new capacity reservation - or updates an existing capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/delete","displayName":"Delete - Capacity Reservation","description":"Deletes the capacity reservation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups","displayName":"Capacity - Reservation Groups","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/read","displayName":"Get - Capacity Reservation Group","description":"Get the properties of a capacity - reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/write","displayName":"Create - or Update Capacity Reservation Group","description":"Creates a new capacity - reservation group or updates an existing capacity reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/delete","displayName":"Delete - Capacity Reservation Group","description":"Deletes the capacity reservation - group","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints/diskRestorePoints","displayName":"DiskRestorePoint","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/read","displayName":"Get - incremental DiskRestorePoint","description":"Get the properties of an incremental - DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/beginGetAccess/action","displayName":"Get - incremental DiskRestorePoint SAS URI","description":"Get the SAS URI of the - incremental DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/endGetAccess/action","displayName":"Revoke - incremental DiskRestorePoint SAS URI","description":"Revoke the SAS URI of - the incremental DiskRestorePoint","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsVersions","displayName":"CloudService - OS Versions","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsVersions/read","displayName":"Read - Cloud Service OS Version","description":"Read any guest OS Version that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsFamilies","displayName":"CloudService - OS Families","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsFamilies/read","displayName":"Read - Cloud Service OS Family","description":"Read any guest OS Family that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]}],"id":"/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute","type":"Microsoft.Authorization/providerOperations","name":"Microsoft.Compute"}' - headers: - cache-control: - - no-cache - content-length: - - '113662' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.compute?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: '{"displayName":"Microsoft Compute","operations":[{"name":"Microsoft.Compute/register/action","displayName":"Register - Subscription for Compute","description":"Registers Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null},{"name":"Microsoft.Compute/unregister/action","displayName":"Unregister - Subscription for Compute","description":"Unregisters Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null}],"resourceTypes":[{"name":"availabilitySets","displayName":"Availability - Sets","operations":[{"name":"Microsoft.Compute/availabilitySets/read","displayName":"Get - Availablity Set","description":"Get the properties of an availability set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/write","displayName":"Create - or Update Availability Set","description":"Creates a new availability set - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/delete","displayName":"Delete - Availability Set","description":"Deletes the availability set","origin":"user,system","properties":null}]},{"name":"availabilitySets/vmSizes","displayName":"Virtual - Machine Size for Availability set","operations":[{"name":"Microsoft.Compute/availabilitySets/vmSizes/read","displayName":"List - Virtual Machine Sizes for Availability Set","description":"List available - sizes for creating or updating a virtual machine in the availability set","origin":"user,system","properties":null}]},{"name":"virtualMachines","displayName":"Virtual - Machines","operations":[{"name":"Microsoft.Compute/virtualMachines/read","displayName":"Get - Virtual Machine","description":"Get the properties of a virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/write","displayName":"Create - or Update Virtual Machine","description":"Creates a new virtual machine or - updates an existing virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/delete","displayName":"Delete - Virtual Machine","description":"Deletes the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/start/action","displayName":"Start - Virtual Machine","description":"Starts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/powerOff/action","displayName":"Power - Off Virtual Machine","description":"Powers off the virtual machine. Note that - the virtual machine will continue to be billed.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reapply/action","displayName":"Reapply - a virtual machine''s current model","description":"Reapplies a virtual machine''s - current model","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine","description":"Redeploys virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/restart/action","displayName":"Restart - Virtual Machine","description":"Restarts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs","description":"Retrieves boot diagnostic logs - blob URIs","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine","description":"Powers off the virtual machine and releases - the compute resources","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/generalize/action","displayName":"Generalize - Virtual Machine","description":"Sets the virtual machine state to Generalized - and prepares the virtual machine for capture","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/capture/action","displayName":"Capture - Virtual Machine","description":"Captures the virtual machine by copying virtual - hard disks and generates a template that can be used to create similar virtual - machines","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommand/action","displayName":"Run - Command on Virtual Machine","description":"Executes a predefined script on - the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/convertToManagedDisks/action","displayName":"Convert - Virtual Machine disks to Managed Disks","description":"Converts the blob based - disks of the virtual machine to managed disks","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/performMaintenance/action","displayName":"Perform - Maintenance Redeploy","description":"Performs Maintenance Operation on the - VM.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine","description":"Reimages virtual machine which is using differencing - disk.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/login/action","displayName":"Log - in to Virtual Machine","description":"Log in to a virtual machine as a regular - user","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/loginAsAdmin/action","displayName":"Log - in to Virtual Machine as administrator","description":"Log in to a virtual - machine with Windows administrator or Linux root user privileges","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/installPatches/action","displayName":"Install - OS update patches on virtual machine","description":"Installs available OS - update patches on the virtual machine based on parameters provided by user. - Assessment results containing list of available patches will also get refreshed - as part of this.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/assessPatches/action","displayName":"Assess - virtual machine for available OS update patches","description":"Assesses the - virtual machine and finds list of available OS update patches for it.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/cancelPatchInstallation/action","displayName":"Cancel - install OS update patch operation on virtual machine","description":"Cancels - the ongoing install OS update patch operation on the virtual machine.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine","description":"Simulates the eviction of - spot Virtual Machine","origin":"user,system","properties":null}]},{"name":"virtualMachines/instanceView","displayName":"Virtual - Machine Instance View","operations":[{"name":"Microsoft.Compute/virtualMachines/instanceView/read","displayName":"Get - Virtual Machine Instance View","description":"Gets the detailed runtime status - of the virtual machine and its resources","origin":"user,system","properties":null}]},{"name":"virtualMachines/vmSizes","displayName":"Virtual - Machine Size","operations":[{"name":"Microsoft.Compute/virtualMachines/vmSizes/read","displayName":"Lists - Available Virtual Machine Sizes","description":"Lists available sizes the - virtual machine can be updated to","origin":"user,system","properties":null}]},{"name":"images","displayName":"Images","operations":[{"name":"Microsoft.Compute/images/read","displayName":"Get - Image","description":"Get the properties of the Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/write","displayName":"Create - or Update Image","description":"Creates a new Image or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/delete","displayName":"Delete - Image","description":"Deletes the image","origin":"user,system","properties":null}]},{"name":"restorePointCollections","displayName":"Restore - Point Collections","operations":[{"name":"Microsoft.Compute/restorePointCollections/read","displayName":"Get - Restore Point Collection","description":"Get the properties of a restore point - collection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/write","displayName":"Create - or Update Restore Point Collection","description":"Creates a new restore point - collection or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/delete","displayName":"Delete - Restore Point Collection","description":"Deletes the restore point collection - and contained restore points","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints","displayName":"Restore - Points","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/read","displayName":"Get - Restore Point","description":"Get the properties of a restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/write","displayName":"Create - Restore Point","description":"Creates a new restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/delete","displayName":"Delete - Restore Point","description":"Deletes the restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/retrieveSasUris/action","displayName":"Get - Restore Point along with blob SAS URIs","description":"Get the properties - of a restore point along with blob SAS URIs","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Metric Definitions","description":"Reads Virtual Machine Metric - Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"virtualMachines/extensions","displayName":"Virtual - Machine Extensions","operations":[{"name":"Microsoft.Compute/virtualMachines/extensions/read","displayName":"Get - Virtual Machine Extension","description":"Get the properties of a virtual - machine extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/write","displayName":"Create - or Update Virtual Machine Extension","description":"Creates a new virtual - machine extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/delete","displayName":"Delete - Virtual Machine Extension","description":"Deletes the virtual machine extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions","displayName":"Virtual - Machine Scale Set Extensions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/read","displayName":"Get - Virtual Machine Scale Set Extension","description":"Gets the properties of - a Virtual Machine Scale Set Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/write","displayName":"Create - or Update Virtual Machine Scale Set Extension","description":"Creates a new - Virtual Machine Scale Set Extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/delete","displayName":"Delete - Virtual Machine Scale Set Extension","description":"Deletes the Virtual Machine - Scale Set Extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets","displayName":"Virtual - Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/read","displayName":"Get - Virtual Machine Scale Set","description":"Get the properties of a Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/write","displayName":"Create - or Update Virtual Machine Scale Set","description":"Creates a new Virtual - Machine Scale Set or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete","displayName":"Delete - Virtual Machine Scale Set","description":"Deletes the Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete/action","displayName":"Delete - Virtual Machines in a Virtual Machine Scale Set","description":"Deletes the - instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/start/action","displayName":"Start - Virtual Machine Scale Set","description":"Starts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/powerOff/action","displayName":"Power - Off Virtual Machine Scale Set","description":"Powers off the instances of - the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/restart/action","displayName":"Restart - Virtual Machine Scale Set","description":"Restarts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/deallocate/action","displayName":"Deallocate - Virtual Machine Scale Set","description":"Powers off and releases the compute - resources for the instances of the Virtual Machine Scale Set ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/manualUpgrade/action","displayName":"Manual - Upgrade Virtual Machine Scale Set","description":"Manually updates instances - to latest model of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimage/action","displayName":"Reimage - Virtual Machine Scale Set","description":"Reimages the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine Scale Set","description":"Reimages all disks - (OS Disk and Data Disks) for the instances of a Virtual Machine Scale Set - ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/redeploy/action","displayName":"Redeploy - Virtual Machine Scale Set","description":"Redeploy the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine Scale Set","description":"Performs - planned maintenance on the instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/scale/action","displayName":"Verify - Scaling of Virtual Machine Scale Set","description":"Verify if an existing - Virtual Machine Scale Set can Scale In/Scale Out to specified instance count","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/forceRecoveryServiceFabricPlatformUpdateDomainWalk/action","displayName":"Manually - walk platform update domains in a service fabric Virtual Machine Scale Set","description":"Manually - walk the platform update domains of a service fabric Virtual Machine Scale - Set to finish a pending update that is stuck","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/osRollingUpgrade/action","displayName":"Upgrades - OS on Virtual Machine Scale Set instances to the latest available Platform - Image OS version.","description":"Starts a rolling upgrade to move all Virtual - Machine Scale Set instances to the latest available Platform Image OS version.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/setOrchestrationServiceState/action","displayName":"Sets - the state of an orchestration service in a Virtual Machine Scale Set.","description":"Sets - the state of an orchestration service based on the action provided in operation - input.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/action","displayName":"Cancel - Virtual Machine Scale Set Rolling Upgrade operation","description":"Cancels - the rolling upgrade of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/instanceView","displayName":"Virtual - Machine Scale Set Instance View","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/instanceView/read","displayName":"Get - Virtual Machine Scale Set Instance View","description":"Gets the instance - view of the Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/skus","displayName":"Virtual - Machine Scale Set SKU","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/skus/read","displayName":"List - SKUs for Virtual Machine Scale Set","description":"Lists the valid SKUs for - an existing Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Scalet Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Scalet Set Metric Definitions","description":"Reads Virtual - Machine Scalet Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of inbound flows (traffic - going into the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out Total","displayName":"Network Out Total","displayDescription":"The number - of bytes out on all network interfaces by the Virtual Machine(s) (Outgoing - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]}]}}}]},{"name":"virtualMachineScaleSets/rollingUpgrades","displayName":"Virtual - Machine Scale Sets Rolling Upgrades","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/read","displayName":"Gets - the latest Rolling Upgrade status for a Virtual Machine Scale Set","description":"Get - latest Rolling Upgrade status for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/osUpgradeHistory","displayName":"Virtual - Machine Scale Set OS Upgrade History","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/osUpgradeHistory/read","displayName":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","description":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines","displayName":"Virtual - Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read","displayName":"Gets - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write","displayName":"Updates - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Updates - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/delete","displayName":"Delete - Virtual Machine in a Virtual Machine Scale Set","description":"Delete a specific - Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/start/action","displayName":"Start - Virtual Machine in a Virtual Machine Scale Set","description":"Starts a Virtual - Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/powerOff/action","displayName":"Power - off Virtual Machine in a Virtual Machine Scale Set","description":"Powers - Off a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/restart/action","displayName":"Restart - Virtual Machine instance in a Virtual Machine Scale Set","description":"Restarts - a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine in a Virtual Machine Scale Set","description":"Powers off - and releases the compute resources for a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine in a Virtual Machine Scale Set","description":"Reimages a - Virtual Machine instance in a Virtual Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Reimages - all disks (OS Disk and Data Disks) for Virtual Machine instance in a Virtual - Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine instance in a Virtual Machine Scale Set","description":"Redeploys - a Virtual Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs of Virtual Machine instance in a Virtual Machine - Scale Set","description":"Retrieves boot diagnostic logs blob URIs of Virtual - Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine instance in a Virtual Machine Scale - Set","description":"Performs planned maintenance on a Virtual Machine instance - in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommand/action","displayName":"Run - Command on a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Executes - a predefined script on a Virtual Machine instance in a Virtual Machine Scale - Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine in Virtual Machine Scale Set","description":"Simulates - the eviction of spot Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/instanceView","displayName":"Instance - View of Virtual Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read","displayName":"Gets - Instance View of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the instance view of a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine in Scale Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine in Scale Set Metric Definitions","description":"Reads Virtual - Machine in Scale Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"locations/vmSizes","displayName":"Virtual - Machine Sizes","operations":[{"name":"Microsoft.Compute/locations/vmSizes/read","displayName":"List - Available Virtual Machine Sizes in Location","description":"Lists available - virtual machine sizes in a location","origin":"user,system","properties":null}]},{"name":"locations/operations","displayName":"Operation","operations":[{"name":"Microsoft.Compute/locations/operations/read","displayName":"Get - Operation","description":"Gets the status of an asynchronous operation","origin":"user,system","properties":null}]},{"name":"locations/usages","displayName":"Usage - Metrics","operations":[{"name":"Microsoft.Compute/locations/usages/read","displayName":"Get - Usage Metrics","description":"Gets service limits and current usage quantities - for the subscription''s compute resources in a location","origin":"user,system","properties":null}]},{"name":"locations/runCommands","displayName":"Run - Commands","operations":[{"name":"Microsoft.Compute/locations/runCommands/read","displayName":"Lists - Run Commands","description":"Lists available run commands in location","origin":"user,system","properties":null}]},{"name":"operations","displayName":"Available - Compute Operations","operations":[{"name":"Microsoft.Compute/operations/read","displayName":"List - Available Compute Operations","description":"Lists operations available on - Microsoft.Compute resource provider","origin":"user,system","properties":null}]},{"name":"skus","displayName":"Skus","operations":[{"name":"Microsoft.Compute/skus/read","displayName":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","description":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","origin":"user,system","properties":null}]},{"name":"disks","displayName":"Disks","operations":[{"name":"Microsoft.Compute/disks/read","displayName":"Get - Disk","description":"Get the properties of a Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/write","displayName":"Create - or Update Disk","description":"Creates a new Disk or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/delete","displayName":"Delete - Disk","description":"Deletes the Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/beginGetAccess/action","displayName":"Get - Disk SAS URI","description":"Get the SAS URI of the Disk for blob access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/endGetAccess/action","displayName":"Revoke - Disk SAS URI","description":"Revoke the SAS URI of the Disk","origin":"user,system","properties":null}]},{"name":"snapshots","displayName":"Snapshots","operations":[{"name":"Microsoft.Compute/snapshots/read","displayName":"Get - Snapshot","description":"Get the properties of a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/write","displayName":"Create - or Update Snapshot","description":"Create a new Snapshot or update an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/delete","displayName":"Delete - Snapshot","description":"Delete a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/beginGetAccess/action","displayName":"Get - Snapshot SAS URI","description":"Get the SAS URI of the Snapshot for blob - access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/endGetAccess/action","displayName":"Revoke - Snapshot SAS URI","description":"Revoke the SAS URI of the Snapshot","origin":"user,system","properties":null}]},{"name":"locations/diskOperations","displayName":"DiskOperation","operations":[{"name":"Microsoft.Compute/locations/diskOperations/read","displayName":"Get - Disk Operation","description":"Gets the status of an asynchronous Disk operation","origin":"user,system","properties":null}]},{"name":"sharedVMImages","displayName":"SharedVMImages","operations":[{"name":"Microsoft.Compute/sharedVMImages/read","displayName":"Get - SharedVMImage","description":"Get the properties of a SharedVMImage","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/write","displayName":"Create - or Update SharedVMImage","description":"Creates a new SharedVMImage or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/delete","displayName":"Delete - SharedVMImage","description":"Deletes the SharedVMImage","origin":"user,system","properties":null}]},{"name":"sharedVMImages/versions","displayName":"SharedVMImageVersions","operations":[{"name":"Microsoft.Compute/sharedVMImages/versions/read","displayName":"Get - SharedVMImageVersion","description":"Get the properties of a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/write","displayName":"Create - or Update SharedVMImageVersion","description":"Create a new SharedVMImageVersion - or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/delete","displayName":"Delete - SharedVMImageVersion","description":"Delete a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/replicate/action","displayName":"Replicate - SharedVMImageVersion","description":"Replicate a SharedVMImageVersion to target - regions","origin":"user,system","properties":null}]},{"name":"locations/capsOperations","displayName":"CapsOperation","operations":[{"name":"Microsoft.Compute/locations/capsOperations/read","displayName":"Get - Caps Operation","description":"Gets the status of an asynchronous Caps operation","origin":"user,system","properties":null}]},{"name":"locations/publishers","displayName":"Publishers","operations":[{"name":"Microsoft.Compute/locations/publishers/read","displayName":"Get - Publisher","description":"Get the properties of a Publisher","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers","displayName":"Platform - Image Offers","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/read","displayName":"Get - Platform Image Offer","description":"Get the properties of a Platform Image - Offer","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus","displayName":"Platform - Image Skus","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/read","displayName":"Get - Platform Image Sku","description":"Get the properties of a Platform Image - Sku","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus/versions","displayName":"Platform - Image Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/versions/read","displayName":"Get - Platform Image Version","description":"Get the properties of a Platform Image - Version","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types","displayName":"VMExtension - Types","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/read","displayName":"Get - VMExtension Type","description":"Get the properties of a VMExtension Type","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types/versions","displayName":"VMExtension - Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/versions/read","displayName":"Get - VMExtension Version","description":"Get the properties of a VMExtension Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/networkInterfaces","displayName":"Network - interfaces of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/networkInterfaces/read","displayName":"Get - all network interfaces of a Virtual Machine Scale Set","description":"Get - properties of all network interfaces of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/publicIPAddresses","displayName":"Public - IP addresses of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/publicIPAddresses/read","displayName":"Get - all public IP addresses of a Virtual Machine Scale Set","description":"Get - properties of all public IP addresses of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces","displayName":"Network - interfaces of a virtual machine created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read","displayName":"Get - one or all network interfaces of a virtual machine created using Virtual Machine - Scale Set","description":"Get properties of one or all network interfaces - of a virtual machine created using Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses","displayName":"IP - address created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read","displayName":"Get - public IP address created using Virtual Machine Scale Set. Virtual Machine - Scale Set can create at most one public IP per ipconfiguration (private IP)","description":"Get - properties of public IP address created using Virtual Machine Scale Set. Virtual - Machine Scale Set can create at most one public IP per ipconfiguration (private - IP)","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations","displayName":"IP - configurations of a network interface created using Virtual Machine Scale - Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read","displayName":"Get - one or all IP configurations of a network interface created using Virtual - Machine Scale Set. IP configurations represent private IPs","description":"Get - properties of one or all IP configurations of a network interface created - using Virtual Machine Scale Set. IP configurations represent private IPs","origin":"user,system","properties":null}]},{"name":"galleries","displayName":"Galleries","operations":[{"name":"Microsoft.Compute/galleries/read","displayName":"Get - Gallery","description":"Gets the properties of Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/write","displayName":"Create - or Update Gallery","description":"Creates a new Gallery or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/delete","displayName":"Delete - Gallery","description":"Deletes the Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/share/action","displayName":"Share - Gallery","description":"Shares a Gallery to different scopes","origin":"user,system","properties":null}]},{"name":"galleries/images","displayName":"GalleryImages","operations":[{"name":"Microsoft.Compute/galleries/images/read","displayName":"Get - Gallery Image","description":"Gets the properties of Gallery Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/write","displayName":"Create - or Update Gallery Image","description":"Creates a new Gallery Image or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/delete","displayName":"Delete - Gallery Image","description":"Deletes the Gallery Image","origin":"user,system","properties":null}]},{"name":"galleries/images/versions","displayName":"GalleryImageVersions","operations":[{"name":"Microsoft.Compute/galleries/images/versions/read","displayName":"Get - Gallery Image Version","description":"Gets the properties of Gallery Image - Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/write","displayName":"Create - or Update Gallery Image Version","description":"Creates a new Gallery Image - Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/delete","displayName":"Delete - Gallery Image Version","description":"Deletes the Gallery Image Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine Scale Set log definitions","description":"Gets the available - logs for Virtual Machine Scale Sets.","origin":"system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - Virtual Machine Scale Set.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine Scale set.","origin":"system","properties":null}]},{"name":"locations/logAnalytics","displayName":"Log - Analytics","operations":[{"name":"Microsoft.Compute/locations/logAnalytics/getRequestRateByInterval/action","displayName":"Create - logs to show total requests by time interval","description":"Create logs to - show total requests by time interval to aid throttling diagnostics.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/locations/logAnalytics/getThrottledRequests/action","displayName":"Create - logs to show aggregates of throttled requests","description":"Create logs - to show aggregates of throttled requests grouped by ResourceName, OperationName, - or the applied Throttle Policy.","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine log definitions","description":"Gets the available logs for - Virtual Machine.","origin":"system","properties":{"serviceSpecification":{"logSpecifications":[{"name":"SoftwareUpdates","displayName":"SoftwareUpdates"},{"name":"SoftwareUpdateProfile","displayName":"SoftwareUpdateProfile"}]}}}]},{"name":"virtualMachines/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - diagnostic setting","description":"Gets the diagnostic setting for the Virtual - Machine.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine.","origin":"system","properties":null}]},{"name":"hostGroups","displayName":"Host - Groups","operations":[{"name":"Microsoft.Compute/hostGroups/read","displayName":"Get - Host Group","description":"Get the properties of a host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/write","displayName":"Create - or Update Host Group","description":"Creates a new host group or updates an - existing host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/delete","displayName":"Delete - Host Group","description":"Deletes the host group","origin":"user,system","properties":null}]},{"name":"proximityPlacementGroups","displayName":"Proximity - Placement Groups","operations":[{"name":"Microsoft.Compute/proximityPlacementGroups/read","displayName":"Get - Proximity Placement Group","description":"Get the Properties of a Proximity - Placement Group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/write","displayName":"Create - or Update Proximity Placement Group","description":"Creates a new Proximity - Placement Group or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/delete","displayName":"Delete - Proximity Placement Group","description":"Deletes the Proximity Placement - Group","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/vmSizes","displayName":"Virtual - Machine Size for Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/vmSizes/read","displayName":"List - Virtual Machine Sizes for a Virtual Machine Scale Set","description":"List - available sizes for creating or updating a virtual machine in the Virtual - Machine Scale Set","origin":"user,system","properties":null}]},{"name":"hostGroups/hosts","displayName":"Hosts","operations":[{"name":"Microsoft.Compute/hostGroups/hosts/read","displayName":"Get - Host","description":"Get the properties of a host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/write","displayName":"Create - or Update Host","description":"Creates a new host or updates an existing host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/delete","displayName":"Delete - Host","description":"Deletes the host","origin":"user,system","properties":null}]},{"name":"diskEncryptionSets","displayName":"DiskEncryptionSets","operations":[{"name":"Microsoft.Compute/diskEncryptionSets/read","displayName":"Get - disk encryption set","description":"Get the properties of a disk encryption - set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/write","displayName":"Create - or update disk encryption set","description":"Create a new disk encryption - set or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/delete","displayName":"Delete - disk encryption set","description":"Delete a disk encryption set","origin":"user,system","properties":null}]},{"name":"locations/vsmOperations","displayName":"Operation - for Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","operations":[{"name":"Microsoft.Compute/locations/vsmOperations/read","displayName":"Get - Operation for Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","description":"Gets the status of an asynchronous operation for - Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null}]},{"name":"galleries/applications","displayName":"GalleryApplications","operations":[{"name":"Microsoft.Compute/galleries/applications/read","displayName":"Get - Gallery Application","description":"Gets the properties of Gallery Application","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/write","displayName":"Create - or Update Gallery Application","description":"Creates a new Gallery Application - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/delete","displayName":"Delete - Gallery Application","description":"Deletes the Gallery Application","origin":"user,system","properties":null}]},{"name":"galleries/applications/versions","displayName":"GalleryApplicationVersions","operations":[{"name":"Microsoft.Compute/galleries/applications/versions/read","displayName":"Get - Gallery Application Version","description":"Gets the properties of Gallery - Application Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/write","displayName":"Create - or Update Gallery Application Version","description":"Creates a new Gallery - Application Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/delete","displayName":"Delete - Gallery Application Version","description":"Deletes the Gallery Application - Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions/roles","displayName":"VirtualMachineScaleSet - Extensions Role","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/read","displayName":"Get - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Gets the properties of a Role in - a Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/write","displayName":"Update - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Updates the properties of an existing - Role in a Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","origin":"user,system","properties":null}]},{"name":"sshPublicKeys","displayName":"SSH - Public Keys","operations":[{"name":"Microsoft.Compute/sshPublicKeys/read","displayName":"Get - SSH Public Key","description":"Get the properties of an SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/write","displayName":"Create - or Update SSH Public Key","description":"Creates a new SSH public key or updates - an existing SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/delete","displayName":"Delete - SSH Public Key","description":"Deletes the SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/generateKeyPair/action","displayName":"Generate - SSH Key Pair","description":"Generates a new SSH public/private key pair","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyAzureAsyncOperation","displayName":"PrivateEndpointConnectionProxy - AzureAsyncOperation","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyAzureAsyncOperation/read","displayName":"Get - PrivateEndpointConnectionProxy Operation","description":"Get the status of - asynchronous Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyOperationResults","displayName":"PrivateEndpointConnectionProxyOperation - Results","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyOperationResults/read","displayName":"Get - PrivateEndpointConnectionProxyOperationResults","description":"Get the results - of Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions","displayName":"SharedVMExtensions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/read","displayName":"Get - Shared VM Extension","description":"Gets the properties of Shared VM Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/write","displayName":"Create - or Update Shared VM Extension","description":"Creates a new Shared VM Extension - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/delete","displayName":"Delete - Shared VM Extension","description":"Deletes the Shared VM Extension","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions/versions","displayName":"SharedVMExtensionVersions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/versions/read","displayName":"Get - Shared VM Extension Version","description":"Gets the properties of Shared - VM Extension Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/write","displayName":"Create - or Update Shared VM Extension Version","description":"Creates a new Shared - VM Extension Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/delete","displayName":"Delete - Shared VM Extension Version","description":"Deletes the Shared VM Extension - Version","origin":"user,system","properties":null}]},{"name":"diskAccesses","displayName":"DiskAccesses","operations":[{"name":"Microsoft.Compute/diskAccesses/read","displayName":"Get - DiskAccess","description":"Get the properties of DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/write","displayName":"Create - or Update DiskAccess","description":"Create a new DiskAccess resource or update - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/delete","displayName":"Delete - DiskAccess","description":"Delete a DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionsApproval/action","displayName":"Auto - Approve PrivateEndpointConnections","description":"Auto Approve a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnections","displayName":"DiskAccess - PrivateEndpointConnections","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/delete","displayName":"Delete - PrivateEndpointConnection","description":"Delete a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/read","displayName":"Get - PrivateEndpointConnection","description":"Get a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/write","displayName":"Approve - or Reject PrivateEndpointConnection","description":"Approve or Reject a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnectionProxies","displayName":"DiskAccess - PrivateEndpointConnection proxies","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/read","displayName":"Get - PrivateEndpointConnectionProxy","description":"Get the properties of a private - endpoint connection proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/write","displayName":"Create - PrivateEndpointConnectionProxy","description":"Create a new Private Endpoint - Connection Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/delete","displayName":"Delete - PrivateEndpointConnectionProxy","description":"Delete a Private Endpoint Connection - Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/validate/action","displayName":"Validate - PrivateEndpointConnectionProxy","description":"Validate a Private Endpoint - Connection Proxy object","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/extensions","displayName":"Extensions - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/read","displayName":"Get - extension for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of an extension for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/write","displayName":"Create - or Update extension for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new extension for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/delete","displayName":"Delete - extension for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the extension for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"cloudServices","displayName":"Cloud - Service Resource","operations":[{"name":"Microsoft.Compute/cloudServices/read","displayName":"Get - CloudService.","description":"Get the properties of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/write","displayName":"Create - or Update CloudService.","description":"Created a new CloudService or Update - an existing one.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete","displayName":"Delete - the CloudService.","description":"Deletes the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/poweroff/action","displayName":"Power - off the CloudService.","description":"Power off the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/start/action","displayName":"Starts - the CloudService.","description":"Starts the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/restart/action","displayName":"Restarts - one or more role instances in a CloudService.","description":"Restarts one - or more role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/reimage/action","displayName":"Reimage - one or more role instances in a CloudService.","description":"Rebuilds all - the disks in the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/rebuild/action","displayName":"Rebuilds - all the disks in the role instances in a CloudService.","description":"Reimage - all the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete/action","displayName":"Deletes - role instances in a CloudService.","description":"Deletes role instances in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/instanceView","displayName":"Cloud - Service Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/instanceView/read","displayName":"Gets - the status of a CloudService.","description":"Gets the status of a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances","displayName":"Cloud - Service Role Instance","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/delete","displayName":"Deletes - a RoleInstance from CloudService.","description":"Deletes a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/read","displayName":"Gets - a RoleInstance from CloudService.","description":"Gets a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/restart/action","displayName":"Restart - a role instance of a CloudService","description":"Restart a role instance - of a CloudService","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/reimage/action","displayName":"Reimage - a role instance of a CloudService.","description":"Reimage a role instance - of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/rebuild/action","displayName":"Rebuild - all the disks in a CloudService.","description":"Rebuild all the disks in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/updateDomains","displayName":"Cloud - Service Update Domains.","operations":[{"name":"Microsoft.Compute/cloudServices/updateDomains/read","displayName":"Gets - a list of all update domains in a CloudService.","description":"Gets a list - of all update domains in a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances/instanceView","displayName":"Cloud - Service RoleInstance Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/instanceView/read","displayName":"Gets - the status of a role instance from a CloudService.","description":"Gets the - status of a role instance from a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/providers/Microsoft.Insights/metricDefinitions","displayName":"Cloud - Services Metric Defintion.","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService metrics definition","description":"Gets the CloudService - metrics definition","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/roles","displayName":"CloudService - Roles","operations":[{"name":"Microsoft.Compute/cloudServices/roles/read","displayName":"Gets - a role from a CloudService.","description":"Gets a role from a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/write","displayName":"Scale - instances in a Role","description":"Scale instances in a Role","origin":"user,system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/metricDefinitions","displayName":"CloudService - Roles Metric Definitions","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService Roles Metric Definitions","description":"Gets the CloudService - Roles Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudServices - Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService.","origin":"system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudService - Roles Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService Roles.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService Roles","origin":"system","properties":null}]},{"name":"virtualMachines/runCommands","displayName":"Virtual - Machine RunCommands","operations":[{"name":"Microsoft.Compute/virtualMachines/runCommands/read","displayName":"Get - Virtual Machine run command","description":"Get the properties of a virtual - machine run command","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/write","displayName":"Create - or Update Virtual Machine run command","description":"Creates a new virtual - machine run command or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/delete","displayName":"Delete - Virtual Machine run command","description":"Deletes the virtual machine run - command","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/runCommands","displayName":"RunCommands - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/read","displayName":"Get - run command for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of a run command for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/write","displayName":"Create - or Update run command for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new run command for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/delete","displayName":"Delete - run command for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the run command for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults","displayName":"Patch - Installation Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/read","displayName":"Summarizes - latest patch installation operation results","description":"Retrieves the - summary of the latest patch installation operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults/softwarePatches","displayName":"Patch - Installation Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/softwarePatches/read","displayName":"Lists - all patches considered in patch installation operation","description":"Retrieves - list of patches attempted to be installed during the last patch installation - operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest","displayName":"Patch - Assessment Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/read","displayName":"Summarizes - latest patch assessment operation results","description":"Retrieves the summary - of the latest patch assessment operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest/softwarePatches","displayName":"Patch - Assessment Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/softwarePatches/read","displayName":"Lists - all patches assessed in patch assessment operation","description":"Retrieves - list of patches assessed during the last patch assessment operation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups/capacityReservations","displayName":"Capacity - Reservations","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/read","displayName":"Get - Capacity Reservation","description":"Get the properties of a capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/write","displayName":"Create - or Update Capacity Reservation","description":"Creates a new capacity reservation - or updates an existing capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/delete","displayName":"Delete - Capacity Reservation","description":"Deletes the capacity reservation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups","displayName":"Capacity - Reservation Groups","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/read","displayName":"Get - Capacity Reservation Group","description":"Get the properties of a capacity - reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/write","displayName":"Create - or Update Capacity Reservation Group","description":"Creates a new capacity - reservation group or updates an existing capacity reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/delete","displayName":"Delete - Capacity Reservation Group","description":"Deletes the capacity reservation - group","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints/diskRestorePoints","displayName":"DiskRestorePoint","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/read","displayName":"Get - incremental DiskRestorePoint","description":"Get the properties of an incremental - DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/beginGetAccess/action","displayName":"Get - incremental DiskRestorePoint SAS URI","description":"Get the SAS URI of the - incremental DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/endGetAccess/action","displayName":"Revoke - incremental DiskRestorePoint SAS URI","description":"Revoke the SAS URI of - the incremental DiskRestorePoint","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsVersions","displayName":"CloudService - OS Versions","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsVersions/read","displayName":"Read - Cloud Service OS Version","description":"Read any guest OS Version that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsFamilies","displayName":"CloudService - OS Families","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsFamilies/read","displayName":"Read - Cloud Service OS Family","description":"Read any guest OS Family that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]}],"id":"/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute","type":"Microsoft.Authorization/providerOperations","name":"Microsoft.Compute"}' - headers: - cache-control: - - no-cache - content-length: - - '113662' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.storage?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: "{\"displayName\":\"Microsoft Storage\",\"operations\":[{\"name\":\"Microsoft.Storage/register/action\",\"displayName\":\"Registers - the Storage Resource Provider\",\"description\":\"Registers the subscription - for the storage resource provider and enables the creation of storage accounts.\",\"origin\":null,\"properties\":null}],\"resourceTypes\":[{\"name\":\"locations\",\"displayName\":\"Location\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/deleteVirtualNetworkOrSubnets/action\",\"displayName\":\"Delete - virtual network or subnets notifications\",\"description\":\"Notifies Microsoft.Storage - that virtual network or subnet is being deleted\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices\",\"displayName\":\"Storage - Blob Services\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/read\",\"displayName\":\"List - Blob Services\",\"description\":\"List blob services\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\",\"displayName\":\"Generate - a user delegation key\",\"description\":\"Returns a user delegation key for - the blob service\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/write\",\"displayName\":\"Put - blob service properties\",\"description\":\"Returns the result of put blob - service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/read\",\"displayName\":\"Get - blob service properties or statistics\",\"description\":\"Returns blob service - properties or statistics\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs\",\"displayName\":\"Storage - Blob Service Blobs\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\"displayName\":\"Read - Blob\",\"description\":\"Returns a blob or a list of blobs\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\",\"displayName\":\"Write - Blob\",\"description\":\"Returns the result of writing a blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\"displayName\":\"Delete - blob\",\"description\":\"Returns the result of deleting a blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/deleteBlobVersion/action\",\"displayName\":\"Delete - blob versions\",\"description\":\"Returns the result of deleting a blob version\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/permanentDelete/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action\",\"displayName\":\"Add - blob content\",\"description\":\"Returns the result of adding blob content\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/filter/action\",\"displayName\":\"Filter - blobs\",\"description\":\"Returns the list of blobs under an account with - matching tags filter\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\"displayName\":\"Move - blobs\",\"description\":\"Moves the blob from one path to another\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/manageOwnership/action\",\"displayName\":\"Manage - blob ownership\",\"description\":\"Changes ownership of the blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/modifyPermissions/action\",\"displayName\":\"Modify - blob permissions\",\"description\":\"Modifies permissions of the blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action\",\"displayName\":\"Execute - the command as super user\",\"description\":\"Returns the result of the blob - command\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers\",\"displayName\":\"Storage - Blob Service Containers\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\"displayName\":\"Patch - blob container\",\"description\":\"Returns the result of patch blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\"displayName\":\"Delete - blob container\",\"description\":\"Returns the result of deleting a container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\"displayName\":\"Get - blob container\",\"description\":\"Returns a container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\"displayName\":\"List - of blob containers\",\"description\":\"Returns list of containers\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/lease/action\",\"displayName\":\"Lease - blob container\",\"description\":\"Returns the result of leasing blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\"displayName\":\"Put - blob container\",\"description\":\"Returns the result of put blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/clearLegalHold/action\",\"displayName\":\"Clear - blob container legal hold\",\"description\":\"Clear blob container legal hold\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/setLegalHold/action\",\"displayName\":\"Set - blob container legal hold\",\"description\":\"Set blob container legal hold\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/immutabilityPolicies\",\"displayName\":\"Storage - Blob Service Containers ImmutabilityPolicy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/extend/action\",\"displayName\":\"Extend - blob container immutability policy\",\"description\":\"Extend blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/delete\",\"displayName\":\"Delete - blob container immutability policy\",\"description\":\"Delete blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/write\",\"displayName\":\"Put - blob container immutability policy\",\"description\":\"Put blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/lock/action\",\"displayName\":\"Lock - blob container immutability policy\",\"description\":\"Lock blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/read\",\"displayName\":\"Get - blob container immutability policy\",\"description\":\"Get blob container - immutability policy\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices\",\"displayName\":\"Storage - Queue Services\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":\"Get - Queue service properties\",\"description\":\"Get Queue service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":\"Get - queue service properties or statistics\",\"description\":\"Returns queue service - properties or statistics.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/write\",\"displayName\":\"Set - queue service properties\",\"description\":\"Returns the result of setting - queue service properties\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/queues\",\"displayName\":\"Storage - Queue Service Queues\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":\"Read - a queue or list queues\",\"description\":\"Returns a queue or a list of queues.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/write\",\"displayName\":\"Write - queue\",\"description\":\"Returns the result of writing a queue\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\"displayName\":\"Delete - queue\",\"description\":\"Returns the result of deleting a queue\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/queues/messages\",\"displayName\":\"Storage - Queue Service Messages\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\"displayName\":\"Read - message\",\"description\":\"Returns a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\",\"displayName\":\"Write - message\",\"description\":\"Returns the result of writing a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\"displayName\":\"Delete - message\",\"description\":\"Returns the result of deleting a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\",\"displayName\":\"Add - message\",\"description\":\"Returns the result of adding a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\",\"displayName\":\"Process - message\",\"description\":\"Returns the result of processing a message\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/updateInternalProperties/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/hnsonmigration/action\",\"displayName\":\"Abort - Account HnsOn Migration\",\"description\":\"Customer is able to abort an ongoing - Hns migration on the storage account\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/hnsonmigration/action\",\"displayName\":\"Account - HnsOn Migration\",\"description\":\"Customer is able to migrate to hns account - type\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/restoreBlobRanges/action\",\"displayName\":\"Restore - blob ranges\",\"description\":\"Restore blob ranges to the state of the specified - time\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action\",\"displayName\":\"Approve - Private Endpoint Connections\",\"description\":\"Approve Private Endpoint - Connections\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/failover/action\",\"displayName\":\"Storage - Account Failover\",\"description\":\"Customer is able to control the failover - in case of availability issues\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listkeys/action\",\"displayName\":\"List - Storage Account Keys\",\"description\":\"Returns the access keys for the specified - storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/regeneratekey/action\",\"displayName\":\"Regenerate - Storage Account Keys\",\"description\":\"Regenerates the access keys for the - specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/revokeUserDelegationKeys/action\",\"displayName\":\"Revoke - Storage Account User Delegation Keys\",\"description\":\"Revokes all the user - delegation keys for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/delete\",\"displayName\":\"Delete - Storage Account\",\"description\":\"Deletes an existing storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/read\",\"displayName\":\"List/Get - Storage Account(s)\",\"description\":\"Returns the list of storage accounts - or gets the properties for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listAccountSas/action\",\"displayName\":\"Returns - Storage Account SAS Token\",\"description\":\"Returns the Account SAS token - for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listServiceSas/action\",\"displayName\":\"Returns - Storage Service SAS Token\",\"description\":\"Returns the Service SAS token - for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/write\",\"displayName\":\"Create/Update - Storage Account\",\"description\":\"Creates a storage account with the specified - parameters or update the properties or tags or adds custom domain for the - specified storage account.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/services/diagnosticSettings\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/services/diagnosticSettings/write\",\"displayName\":\"Create/Update - Diagnostic Settings\",\"description\":\"Create/Update storage account diagnostic - settings.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"UsedCapacity\",\"displayName\":\"Used - capacity\",\"displayDescription\":\"The amount of storage used by the storage - account. For standard storage accounts, it's the sum of capacity used by blob, - table, file, and queue. For premium storage accounts and Blob storage accounts, - it is the same as BlobCapacity or FileCapacity.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Blob - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"BlobCapacity\",\"displayName\":\"Blob - Capacity\",\"displayDescription\":\"The amount of storage used by the storage - account\u2019s Blob service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"BlobCount\",\"displayName\":\"Blob - Count\",\"displayDescription\":\"The number of blob objects stored in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"BlobProvisionedSize\",\"displayName\":\"Blob - Provisioned Size\",\"displayDescription\":\"The amount of storage provisioned - in the storage account\u2019s Blob service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"],\"metricFilterPattern\":\"Premium\"},{\"name\":\"ContainerCount\",\"displayName\":\"Blob - Container Count\",\"displayDescription\":\"The number of containers in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"IndexCapacity\",\"displayName\":\"Index - Capacity\",\"displayDescription\":\"The amount of storage used by Azure Data - Lake Storage Gen2 hierarchical index.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Blob - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Table - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"TableCapacity\",\"displayName\":\"Table - Capacity\",\"displayDescription\":\"The amount of Table storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"TableCount\",\"displayName\":\"Table - Count\",\"displayDescription\":\"The number of tables in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"TableEntityCount\",\"displayName\":\"Table - Entity Count\",\"displayDescription\":\"The number of table entities in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Table - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"File - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"FileCapacity\",\"displayName\":\"File - Capacity\",\"displayDescription\":\"The amount of File storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileCount\",\"displayName\":\"File - Count\",\"displayDescription\":\"The number of files in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareCount\",\"displayName\":\"File - Share Count\",\"displayDescription\":\"The number of file shares in the storage - account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareSnapshotCount\",\"displayName\":\"File - Share Snapshot Count\",\"displayDescription\":\"The number of snapshots present - on the share in storage account\u2019s Files Service.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareSnapshotSize\",\"displayName\":\"File - Share Snapshot Size\",\"displayDescription\":\"The amount of storage used - by the snapshots in storage account\u2019s File service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareCapacityQuota\",\"internalMetricName\":\"FileShareQuota\",\"displayName\":\"File - Share Capacity Quota\",\"displayDescription\":\"The upper limit on the amount - of storage that can be used by Azure Files Service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareProvisionedIOPS\",\"displayName\":\"File - Share Provisioned IOPS\",\"displayDescription\":\"The baseline number of provisioned - IOPS for the premium file share in the premium files storage account. This - number is calculated based on the provisioned size (quota) of the share capacity.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"],\"metricFilterPattern\":\"Premium\"},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"File - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Queue - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"QueueCapacity\",\"displayName\":\"Queue - Capacity\",\"displayDescription\":\"The amount of Queue storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"QueueCount\",\"displayName\":\"Queue - Count\",\"displayDescription\":\"The number of queues in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"QueueMessageCount\",\"displayName\":\"Queue - Message Count\",\"displayDescription\":\"The number of unexpired queue messages - in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Queue - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Table - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Table\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Blob - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Blob\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"File - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for File\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Queue - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Queue\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"skus\",\"displayName\":\"Sku\",\"operations\":[{\"name\":\"Microsoft.Storage/skus/read\",\"displayName\":\"List - Skus\",\"description\":\"Lists the Skus supported by Microsoft.Storage.\",\"origin\":null,\"properties\":null}]},{\"name\":\"operations\",\"displayName\":\"Operations\",\"operations\":[{\"name\":\"Microsoft.Storage/operations/read\",\"displayName\":\"Poll - Asynchronous Operation\",\"description\":\"Polls the status of an asynchronous - operation.\",\"origin\":null,\"properties\":null}]},{\"name\":\"checknameavailability\",\"displayName\":\"Name - Availability\",\"operations\":[{\"name\":\"Microsoft.Storage/checknameavailability/read\",\"displayName\":\"Check - Name Availability\",\"description\":\"Checks that account name is valid and - is not in use.\",\"origin\":null,\"properties\":null}]},{\"name\":\"locations/usages\",\"displayName\":\"Usage - Metrics\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/usages/read\",\"displayName\":\"Get - Subscription Usages\",\"description\":\"Returns the limit and the current - usage count for resources in the specified subscription\",\"origin\":null,\"properties\":null}]},{\"name\":\"usages\",\"displayName\":\"Usage - Metrics\",\"operations\":[{\"name\":\"Microsoft.Storage/usages/read\",\"displayName\":\"Get - Subscription Usages\",\"description\":\"Returns the limit and the current - usage count for resources in the specified subscription\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs/tags\",\"displayName\":\"Storage - Blob Service Blobs\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read\",\"displayName\":\"Read - blob tags\",\"description\":\"Returns the result of reading blob tags\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write\",\"displayName\":\"Write - blob tags\",\"description\":\"Returns the result of writing blob tags\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/managementPolicies\",\"displayName\":\"Storage - Account Management Policies\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/delete\",\"displayName\":\"Delete - storage account management policies\",\"description\":\"Delete storage account - management policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/read\",\"displayName\":\"Get - storage account management policies\",\"description\":\"Get storage management - account policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/write\",\"displayName\":\"Put - storage account management policies\",\"description\":\"Put storage account - management policies\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices\",\"displayName\":\"File - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/action\",\"displayName\":\"Restore - File Share\",\"description\":\"Restore file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/read\",\"displayName\":\"List - File Services\",\"description\":\"List file services\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/write\",\"displayName\":\"Put - File Service Properties\",\"description\":\"Put file service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/read\",\"displayName\":\"Get - file service properties\",\"description\":\"Get file service properties\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/tableServices\",\"displayName\":\"Storage - Table Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/read\",\"displayName\":\"Get - Table service properties\",\"description\":\"Get Table service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/fileshares/files\",\"displayName\":\"Storage - File Service Files\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\"displayName\":\"Read - Files\",\"description\":\"Returns a file/folder or a list of files/folders\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\"displayName\":\"Write - Files\",\"description\":\"Returns the result of writing a file or creating - a folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\"displayName\":\"Delete - Files\",\"description\":\"Returns the result of deleting a file/folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\",\"displayName\":\"Modify - File Acl\",\"description\":\"Returns the result of modifying permission on - a file/folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/actassuperuser/action\",\"displayName\":\"Get - File Admin Privileges\",\"description\":\"Get File Admin Privileges\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateEndpointConnectionProxies\",\"displayName\":\"Storage - Account Private Endpoint Connection Proxy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/read\",\"displayName\":\"Get - Private Endpoint Connection Proxy\",\"description\":\"Get Private Endpoint - Connection Proxy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/delete\",\"displayName\":\"Delete - Private Endpoint Connection Proxies\",\"description\":\"Delete Private Endpoint - Connection Proxies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/write\",\"displayName\":\"Put - Private Endpoint Connection Proxies\",\"description\":\"Put Private Endpoint - Connection Proxies\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateEndpointConnections\",\"displayName\":\"Storage - Account Private Endpoint Connection\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/read\",\"displayName\":\"List - Private Endpoint Connections\",\"description\":\"List Private Endpoint Connections\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/delete\",\"displayName\":\"Delete - Private Endpoint Connection\",\"description\":\"Delete Private Endpoint Connection\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/read\",\"displayName\":\"Get - Private Endpoint Connection\",\"description\":\"Get Private Endpoint Connection\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/write\",\"displayName\":\"Put - Private Endpoint Connection\",\"description\":\"Put Private Endpoint Connection\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateLinkResources\",\"displayName\":\"Storage - account groupids\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateLinkResources/read\",\"displayName\":\"Get - StorageAccount groupids\",\"description\":\"Get StorageAccount groupids\",\"origin\":null,\"properties\":null}]},{\"name\":\"locations/checknameavailability\",\"displayName\":\"Name - Availability\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/checknameavailability/read\",\"displayName\":\"Check - Name Availability\",\"description\":\"Checks that account name is valid and - is not in use.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/shares\",\"displayName\":\"File - Share\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/delete\",\"displayName\":\"Delete - File Share\",\"description\":\"Delete file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/read\",\"displayName\":\"Get - File Share\",\"description\":\"Get file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/lease/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/read\",\"displayName\":\"List - File Shares\",\"description\":\"List file shares\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/write\",\"displayName\":\"Put - File Share\",\"description\":\"Create or update file share\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/encryptionScopes\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/objectReplicationPolicies\",\"displayName\":\"Object - Replication Policy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/delete\",\"displayName\":\"Delete - Object Replication Policy\",\"description\":\"Delete object replication policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/read\",\"displayName\":\"Get - Object Replication Policy\",\"description\":\"Get object replication policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/read\",\"displayName\":\"List - Object Replication Policies\",\"description\":\"List object replication policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/write\",\"displayName\":\"Put - Object Replication Policy\",\"description\":\"Create or update object replication - policy\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/dataSharePolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/localUsers\",\"displayName\":\"Local - User\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/localUsers/delete\",\"displayName\":\"Delete - Local User\",\"description\":\"Delete local user\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/listKeys/action\",\"displayName\":\"List - Local User Keys\",\"description\":\"List local user keys\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/read\",\"displayName\":\"List - Local Users\",\"description\":\"List local users\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/read\",\"displayName\":\"Get - Local User\",\"description\":\"Get local user\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/write\",\"displayName\":\"Put - Local User\",\"description\":\"Create or update local user\",\"origin\":null,\"properties\":null}]},{\"name\":\"deletedAccounts\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/deletedAccounts/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/tables\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/inventoryPolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/accountLocks\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/consumerDataSharePolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/consumerDataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/consumerDataSharePolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"resilienciesProgressions\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/resilienciesProgressions/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs/worm\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/worm/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]}],\"id\":\"/providers/Microsoft.Authorization/providerOperations/Microsoft.Storage\",\"type\":\"Microsoft.Authorization/providerOperations\",\"name\":\"Microsoft.Storage\"}" - headers: - cache-control: - - no-cache - content-length: - - '66950' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:39 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_registration.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_registration.yaml deleted file mode 100644 index 555daa5045a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_provider_registration.yaml +++ /dev/null @@ -1,269 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistered"}' - headers: - cache-control: - - no-cache - content-length: - - '1097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:47:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider register - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate/register?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Registering"}' - headers: - cache-control: - - no-cache - content-length: - - '1096' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:47:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Registering"}' - headers: - cache-control: - - no-cache - content-length: - - '1096' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:47:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider unregister - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate/unregister?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistering"}' - headers: - cache-control: - - no-cache - content-length: - - '1098' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:47:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistering"}' - headers: - cache-control: - - no-cache - content-length: - - '1098' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:47:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_group_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_group_lock.yaml deleted file mode 100644 index f8251cf5b7a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_group_lock.yaml +++ /dev/null @@ -1,434 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "ReadOnly"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '37' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - -g --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete", "notes": "notes000003"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '74' - Content-Type: - - application/json - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '406' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1193' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notessd35nrovhkcyl4c\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lockicq7lvctkyt2ah7zsb5rzih62f2wtfinqdyatd3l4p3oyo2tjp7dru2n/providers/Microsoft.Authorization/locks/cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock7eubxd4dgsvyubetrskkqjkf4vsg5hko5wh\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"notes000003\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"noteskrmo65eme5wg7yn\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockaveqn6fmswh3cyoxxvgtey2fygochrleps/providers/Microsoft.Authorization/locks/cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock74t7aykbdpbdwzgsr2x3bx26yi7dth4owhi\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16186' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_lock.yaml deleted file mode 100644 index f3696c74d1b..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_readonly_resource_lock.yaml +++ /dev/null @@ -1,658 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001","name":"cli_test_readonly_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:39Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"d42e21a8-1cfb-4dba-b55e-4c5c88cbb313\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"fcf7fe62-feaa-44e3-9d15-9961a451d65f\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/5e1d4604-cc2c-44a3-8d58-631bcc755932?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a120eae4-31e6-45af-bbe2-f88a2e7c669c - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/5e1d4604-cc2c-44a3-8d58-631bcc755932?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 81fa97c8-fb9f-42e9-aff0-6092b597b93e - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"0e40ca15-0181-41a4-b41f-0640554f8464\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"fcf7fe62-feaa-44e3-9d15-9961a451d65f\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:48 GMT - etag: - - W/"0e40ca15-0181-41a4-b41f-0640554f8464" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a3af2312-0f98-48b7-a1be-a7a6648b52c2 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '37' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:53 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '74' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '533' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15507' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_create_and_show.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_create_and_show.yaml deleted file mode 100644 index 538ab741641..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_create_and_show.yaml +++ /dev/null @@ -1,2910 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --is-full-object --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.web?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"]},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '63657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "sku": {"name": "B1", "tier": "BASIC"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '62' - Content-Type: - - application/json - ParameterSetName: - - -g -n --resource-type --is-full-object --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001/providers/Microsoft.web/serverFarms/cli_res_create_plan?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/serverfarms/cli_res_create_plan","name":"cli_res_create_plan","type":"Microsoft.Web/serverfarms","kind":"app","location":"westus","properties":{"serverFarmId":50745,"name":"cli_res_create_plan","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"workerSize":"Default","workerSizeId":0,"workerTierName":null,"numberOfWorkers":1,"currentWorkerSize":"Default","currentWorkerSizeId":0,"currentNumberOfWorkers":1,"status":"Ready","webSpace":"cli_test_resource_create000001-WestUSwebspace","subscription":"0b1f6471-1bf0-4dda-aec3-cb9272f09590","adminSiteName":null,"hostingEnvironment":null,"hostingEnvironmentProfile":null,"maximumNumberOfWorkers":0,"planName":"VirtualDedicatedPlan","adminRuntimeSiteName":null,"computeMode":"Dedicated","siteMode":null,"geoRegion":"West - US","perSiteScaling":false,"maximumElasticWorkerCount":1,"numberOfSites":0,"hostingEnvironmentId":null,"isSpot":false,"spotExpirationTime":null,"freeOfferExpirationTime":null,"tags":null,"kind":"app","resourceGroup":"cli_test_resource_create000001","reserved":false,"isXenon":false,"hyperV":false,"mdmId":"waws-prod-bay-153_50745","targetWorkerCount":0,"targetWorkerSizeId":0,"provisioningState":"Succeeded","webSiteId":null,"existingServerFarmIds":null,"kubeEnvironmentProfile":null,"azBalancing":false},"sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1}}' - headers: - cache-control: - - no-cache - content-length: - - '1631' - content-type: - - application/json - date: - - Fri, 16 Apr 2021 09:02:32 GMT - etag: - - '"1D7329F3BADFF4B"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.web?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"]},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '63657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001","name":"cli_test_resource_create000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:18Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"serverFarmId": "cli_res_create_plan"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '77' - Content-Type: - - application/json - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001/providers/Microsoft.web/sites/clirescreateweb?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb","name":"clirescreateweb","type":"Microsoft.Web/sites","kind":"app","location":"westus","properties":{"name":"clirescreateweb","state":"Running","hostNames":["clirescreateweb.azurewebsites.net"],"webSpace":"cli_test_resource_create000001-WestUSwebspace","selfLink":"https://waws-prod-bay-153.api.azurewebsites.windows.net:454/subscriptions/00000000-0000-0000-0000-000000000000/webspaces/cli_test_resource_create000001-WestUSwebspace/sites/clirescreateweb","repositorySiteName":"clirescreateweb","owner":null,"usageState":"Normal","enabled":true,"adminEnabled":true,"enabledHostNames":["clirescreateweb.azurewebsites.net","clirescreateweb.scm.azurewebsites.net"],"siteProperties":{"metadata":null,"properties":[{"name":"LinuxFxVersion","value":""},{"name":"WindowsFxVersion","value":null}],"appSettings":null},"availabilityState":"Normal","sslCertificates":null,"csrs":[],"cers":null,"siteMode":null,"hostNameSslStates":[{"name":"clirescreateweb.azurewebsites.net","sslState":"Disabled","ipBasedSslResult":null,"virtualIP":null,"thumbprint":null,"toUpdate":null,"toUpdateIpBasedSsl":null,"ipBasedSslState":"NotConfigured","hostType":"Standard"},{"name":"clirescreateweb.scm.azurewebsites.net","sslState":"Disabled","ipBasedSslResult":null,"virtualIP":null,"thumbprint":null,"toUpdate":null,"toUpdateIpBasedSsl":null,"ipBasedSslState":"NotConfigured","hostType":"Repository"}],"computeMode":null,"serverFarm":null,"serverFarmId":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/serverfarms/cli_res_create_plan","reserved":false,"isXenon":false,"hyperV":false,"lastModifiedTimeUtc":"2021-04-16T09:02:41.1266667","storageRecoveryDefaultState":"Running","contentAvailabilityState":"Normal","runtimeAvailabilityState":"Normal","siteConfig":{"numberOfWorkers":null,"defaultDocuments":null,"netFrameworkVersion":null,"phpVersion":null,"pythonVersion":null,"nodeVersion":null,"powerShellVersion":null,"linuxFxVersion":null,"windowsFxVersion":null,"requestTracingEnabled":null,"remoteDebuggingEnabled":null,"remoteDebuggingVersion":null,"httpLoggingEnabled":null,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":null,"detailedErrorLoggingEnabled":null,"publishingUsername":null,"publishingPassword":null,"appSettings":null,"azureStorageAccounts":null,"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":null,"use32BitWorkerProcess":null,"webSocketsEnabled":null,"alwaysOn":null,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":null,"managedPipelineMode":null,"virtualApplications":null,"winAuthAdminState":null,"winAuthTenantState":null,"customAppPoolIdentityAdminState":null,"customAppPoolIdentityTenantState":null,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":null,"routingRules":null,"experiments":null,"limits":null,"autoHealEnabled":null,"autoHealRules":null,"tracingOptions":null,"vnetName":null,"vnetRouteAllEnabled":null,"vnetPrivatePortsCount":null,"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":null,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":null,"http20Enabled":null,"minTlsVersion":null,"scmMinTlsVersion":null,"ftpsState":null,"preWarmedInstanceCount":null,"functionAppScaleLimit":null,"healthCheckPath":null,"fileChangeAuditEnabled":null,"functionsRuntimeScaleMonitoringEnabled":null,"websiteTimeZone":null,"minimumElasticInstanceCount":0},"deploymentId":"clirescreateweb","slotName":null,"trafficManagerHostNames":null,"sku":"Basic","scmSiteAlsoStopped":false,"targetSwapSlot":null,"hostingEnvironment":null,"hostingEnvironmentProfile":null,"clientAffinityEnabled":true,"clientCertEnabled":false,"clientCertMode":"Required","clientCertExclusionPaths":null,"hostNamesDisabled":false,"domainVerificationIdentifiers":null,"customDomainVerificationId":"253001F2FCF5A7B1CD759EB861E9BB1596370BE27E47A991F72184277B3D12F2","kind":"app","inboundIpAddress":"40.82.255.131","possibleInboundIpAddresses":"40.82.255.131","ftpUsername":"clirescreateweb\\$clirescreateweb","ftpsHostName":"ftps://waws-prod-bay-153.ftp.azurewebsites.windows.net/site/wwwroot","outboundIpAddresses":"13.88.81.111,13.88.84.95,13.88.86.81,13.88.87.93,13.83.144.104,13.83.145.146,40.82.255.131","possibleOutboundIpAddresses":"13.88.81.111,13.88.84.95,13.88.86.81,13.88.87.93,13.83.144.104,13.83.145.146,13.83.146.9,13.83.147.43,13.83.148.114,13.83.151.29,13.86.136.96,13.86.136.123,13.86.136.181,13.86.136.217,13.86.137.151,13.86.137.203,13.86.138.71,13.86.138.178,13.86.138.221,13.86.141.7,13.86.141.166,13.86.142.62,13.86.142.66,13.86.142.87,13.86.143.76,13.86.143.112,13.86.143.182,13.86.137.194,13.86.138.2,13.86.138.238,40.82.255.131","containerSize":0,"dailyMemoryTimeQuota":0,"suspendedTill":null,"siteDisabledReason":0,"functionExecutionUnitsCache":null,"maxNumberOfWorkers":null,"homeStamp":"waws-prod-bay-153","cloningInfo":null,"hostingEnvironmentId":null,"tags":null,"resourceGroup":"cli_test_resource_create000001","defaultHostName":"clirescreateweb.azurewebsites.net","slotSwapStatus":null,"keyVaultReferenceIdentity":"SystemAssigned","httpsOnly":false,"redundancyMode":"None","inProgressOperationId":null,"geoDistributions":null,"privateEndpointConnections":null,"buildVersion":null,"targetBuildVersion":null,"migrationState":null,"eligibleLogCategories":"AppServiceAppLogs,AppServiceAuditLogs,AppServiceConsoleLogs,AppServiceHTTPLogs,AppServiceIPSecAuditLogs,AppServicePlatformLogs,ScanLogs","storageAccountRequired":false}}' - headers: - cache-control: - - no-cache - content-length: - - '6371' - content-type: - - application/json - date: - - Fri, 16 Apr 2021 09:02:57 GMT - etag: - - '"1D7329F41AD8A40"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-resource-requests: - - '499' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"]},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '63657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001","name":"cli_test_resource_create000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:18Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"key2": "value12"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '57' - Content-Type: - - application/json - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/appsettings?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/appsettings","name":"appsettings","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"key2":"value12"}}' - headers: - cache-control: - - no-cache - content-length: - - '326' - content-type: - - application/json - date: - - Fri, 16 Apr 2021 09:02:58 GMT - etag: - - '"1D7329F4C4FB540"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"]},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '63657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web","name":"clirescreateweb","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"numberOfWorkers":1,"defaultDocuments":["Default.htm","Default.html","Default.asp","index.htm","index.html","iisstart.htm","default.aspx","index.php","hostingstart.html"],"netFrameworkVersion":"v4.0","phpVersion":"5.6","pythonVersion":"","nodeVersion":"","powerShellVersion":"","linuxFxVersion":"","windowsFxVersion":null,"requestTracingEnabled":false,"remoteDebuggingEnabled":false,"remoteDebuggingVersion":null,"httpLoggingEnabled":false,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":35,"detailedErrorLoggingEnabled":false,"publishingUsername":"$clirescreateweb","publishingPassword":null,"appSettings":null,"azureStorageAccounts":{},"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":"None","use32BitWorkerProcess":true,"webSocketsEnabled":false,"alwaysOn":false,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":"","managedPipelineMode":"Integrated","virtualApplications":[{"virtualPath":"/","physicalPath":"site\\wwwroot","preloadEnabled":false,"virtualDirectories":null}],"winAuthAdminState":0,"winAuthTenantState":0,"customAppPoolIdentityAdminState":false,"customAppPoolIdentityTenantState":false,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":"LeastRequests","routingRules":[],"experiments":{"rampUpRules":[]},"limits":null,"autoHealEnabled":false,"autoHealRules":null,"tracingOptions":null,"vnetName":"","vnetRouteAllEnabled":false,"vnetPrivatePortsCount":0,"siteAuthEnabled":false,"siteAuthSettings":{"enabled":null,"configVersion":null,"unauthenticatedClientAction":null,"tokenStoreEnabled":null,"allowedExternalRedirectUrls":null,"defaultProvider":null,"clientId":null,"clientSecret":null,"clientSecretSettingName":null,"clientSecretCertificateThumbprint":null,"issuer":null,"allowedAudiences":null,"additionalLoginParams":null,"isAadAutoProvisioned":false,"aadClaimsAuthorization":null,"googleClientId":null,"googleClientSecret":null,"googleClientSecretSettingName":null,"googleOAuthScopes":null,"facebookAppId":null,"facebookAppSecret":null,"facebookAppSecretSettingName":null,"facebookOAuthScopes":null,"gitHubClientId":null,"gitHubClientSecret":null,"gitHubClientSecretSettingName":null,"gitHubOAuthScopes":null,"twitterConsumerKey":null,"twitterConsumerSecret":null,"twitterConsumerSecretSettingName":null,"microsoftAccountClientId":null,"microsoftAccountClientSecret":null,"microsoftAccountClientSecretSettingName":null,"microsoftAccountOAuthScopes":null},"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":false,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":false,"http20Enabled":false,"minTlsVersion":"1.2","scmMinTlsVersion":"1.0","ftpsState":"AllAllowed","preWarmedInstanceCount":0,"functionAppScaleLimit":0,"healthCheckPath":null,"fileChangeAuditEnabled":false,"functionsRuntimeScaleMonitoringEnabled":false,"websiteTimeZone":null,"minimumElasticInstanceCount":0}}' - headers: - cache-control: - - no-cache - content-length: - - '3698' - content-type: - - application/json - date: - - Fri, 16 Apr 2021 09:03:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id --include-response-body - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"]},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":[]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '63657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id --include-response-body - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web","name":"clirescreateweb","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"numberOfWorkers":1,"defaultDocuments":["Default.htm","Default.html","Default.asp","index.htm","index.html","iisstart.htm","default.aspx","index.php","hostingstart.html"],"netFrameworkVersion":"v4.0","phpVersion":"5.6","pythonVersion":"","nodeVersion":"","powerShellVersion":"","linuxFxVersion":"","windowsFxVersion":null,"requestTracingEnabled":false,"remoteDebuggingEnabled":false,"remoteDebuggingVersion":null,"httpLoggingEnabled":false,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":35,"detailedErrorLoggingEnabled":false,"publishingUsername":"$clirescreateweb","publishingPassword":null,"appSettings":null,"azureStorageAccounts":{},"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":"None","use32BitWorkerProcess":true,"webSocketsEnabled":false,"alwaysOn":false,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":"","managedPipelineMode":"Integrated","virtualApplications":[{"virtualPath":"/","physicalPath":"site\\wwwroot","preloadEnabled":false,"virtualDirectories":null}],"winAuthAdminState":0,"winAuthTenantState":0,"customAppPoolIdentityAdminState":false,"customAppPoolIdentityTenantState":false,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":"LeastRequests","routingRules":[],"experiments":{"rampUpRules":[]},"limits":null,"autoHealEnabled":false,"autoHealRules":null,"tracingOptions":null,"vnetName":"","vnetRouteAllEnabled":false,"vnetPrivatePortsCount":0,"siteAuthEnabled":false,"siteAuthSettings":{"enabled":null,"configVersion":null,"unauthenticatedClientAction":null,"tokenStoreEnabled":null,"allowedExternalRedirectUrls":null,"defaultProvider":null,"clientId":null,"clientSecret":null,"clientSecretSettingName":null,"clientSecretCertificateThumbprint":null,"issuer":null,"allowedAudiences":null,"additionalLoginParams":null,"isAadAutoProvisioned":false,"aadClaimsAuthorization":null,"googleClientId":null,"googleClientSecret":null,"googleClientSecretSettingName":null,"googleOAuthScopes":null,"facebookAppId":null,"facebookAppSecret":null,"facebookAppSecretSettingName":null,"facebookOAuthScopes":null,"gitHubClientId":null,"gitHubClientSecret":null,"gitHubClientSecretSettingName":null,"gitHubOAuthScopes":null,"twitterConsumerKey":null,"twitterConsumerSecret":null,"twitterConsumerSecretSettingName":null,"microsoftAccountClientId":null,"microsoftAccountClientSecret":null,"microsoftAccountClientSecretSettingName":null,"microsoftAccountOAuthScopes":null},"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":false,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":false,"http20Enabled":false,"minTlsVersion":"1.2","scmMinTlsVersion":"1.0","ftpsState":"AllAllowed","preWarmedInstanceCount":0,"functionAppScaleLimit":0,"healthCheckPath":null,"fileChangeAuditEnabled":false,"functionsRuntimeScaleMonitoringEnabled":false,"websiteTimeZone":null,"minimumElasticInstanceCount":0}}' - headers: - cache-control: - - no-cache - content-length: - - '3698' - content-type: - - application/json - date: - - Fri, 16 Apr 2021 09:03:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group.yaml deleted file mode 100644 index 70e62695e24..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group.yaml +++ /dev/null @@ -1,374 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:44 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:59 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:15 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJT09JVUhQTFZVQUFRQkpHVUc1SzJER3wxQTU0NTRFOTZCMDcxMjAyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: '{"location": "westus", "tags": {"a": "b", "c": ""}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group create - Connection: - - keep-alive - Content-Length: - - '51' - Content-Type: - - application/json - ParameterSetName: - - -n -l --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '327' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1191' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '327' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?$filter=tagname%20eq%20%27a%27%20and%20tagvalue%20eq%20%27b%27&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '339' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group_no_wait.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group_no_wait.yaml deleted file mode 100644 index e50d1632b87..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_group_no_wait.yaml +++ /dev/null @@ -1,341 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --no-wait --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZSRzo1Rk5PV0FJVDo1RlRFU1RXNUFSTlBKVDM1RVlGSUhaSUpFSElBTnw2NzU3OTMxNUVFM0IzMzM2LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:51Z"},"properties":{"provisioningState":"Deleting"}}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:51Z"},"properties":{"provisioningState":"Deleting"}}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '{"error":{"code":"ResourceGroupNotFound","message":"Resource group - ''cli_rg_nowait_test000001'' could not be found."}}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '303' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:04:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --exists -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '303' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_id_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_id_scenario.yaml deleted file mode 100644 index f5eb138f72d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_id_scenario.yaml +++ /dev/null @@ -1,6204 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_id000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001","name":"cli_test_resource_id000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:20Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": [{"name": "cli_test_resource_id_subnet", - "properties": {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '225' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"607101b6-3553-4d14-af8b-a6dd2ad54a4a\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"607101b6-3553-4d14-af8b-a6dd2ad54a4a\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/a3b08cb4-7f1b-4590-b9e6-1f8b3b6425b5?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1358' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 87fdac7c-6fc3-4ca8-b4c2-05177ef313db - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/a3b08cb4-7f1b-4590-b9e6-1f8b3b6425b5?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 4fecbb39-66e0-459d-9816-c849b9801c64 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"d269b55d-c727-4657-88a4-9b181ab18fbc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"d269b55d-c727-4657-88a4-9b181ab18fbc\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1360' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:33 GMT - etag: - - W/"d269b55d-c727-4657-88a4-9b181ab18fbc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c6411ee0-5de4-4dac-8805-24dba318d2ca - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"d269b55d-c727-4657-88a4-9b181ab18fbc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"d269b55d-c727-4657-88a4-9b181ab18fbc\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1505' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:34 GMT - etag: - - W/"d269b55d-c727-4657-88a4-9b181ab18fbc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 70a524f7-5de2-4e47-967e-c61c083f2b47 - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {"tag-vnet": ""}, "properties": {"provisioningState": - "Succeeded", "resourceGuid": "6add034b-445a-43e3-ba1a-f99c0596b5b7", "addressSpace": - {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {"dnsServers": []}, "subnets": - [{"name": "cli_test_resource_id_subnet", "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet", - "etag": "W/\"d269b55d-c727-4657-88a4-9b181ab18fbc\"", "properties": {"provisioningState": - "Succeeded", "addressPrefix": "10.0.0.0/24", "delegations": [], "privateEndpointNetworkPolicies": - "Enabled", "privateLinkServiceNetworkPolicies": "Enabled"}, "type": "Microsoft.Network/virtualNetworks/subnets"}], - "virtualNetworkPeerings": [], "enableDdosProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - Content-Length: - - '917' - Content-Type: - - application/json - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/efd364ea-6960-46ac-8fee-8d80056765f3?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 23131933-6c26-4043-b9fc-7bbf17f786f8 - x-ms-ratelimit-remaining-subscription-writes: - - '1187' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/efd364ea-6960-46ac-8fee-8d80056765f3?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e439b900-3002-4dec-9b8d-3595319cb4c1 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:08 GMT - etag: - - W/"1e233021-aa0e-4769-b817-85d31f5d6a40" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - aad21556-c34c-4f5b-a8ac-b11b275c588c - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"6add034b-445a-43e3-ba1a-f99c0596b5b7\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:10 GMT - etag: - - W/"1e233021-aa0e-4769-b817-85d31f5d6a40" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 82c4bf12-a417-494c-b5a7-c1dabed54ac7 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:11 GMT - etag: - - W/"1e233021-aa0e-4769-b817-85d31f5d6a40" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 701ac01c-a60b-4cde-b03c-309b91d40439 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"1e233021-aa0e-4769-b817-85d31f5d6a40\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:13 GMT - etag: - - W/"1e233021-aa0e-4769-b817-85d31f5d6a40" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 3ffe6325-e40f-4d55-95ae-3140856e3972 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"provisioningState": "Succeeded", "addressPrefix": "10.0.0.0/22", - "delegations": [], "privateEndpointNetworkPolicies": "Enabled", "privateLinkServiceNetworkPolicies": - "Enabled"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - Content-Length: - - '194' - Content-Type: - - application/json - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"61bce8cb-d93e-4280-a594-453cb3867959\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Updating\",\r\n \"addressPrefix\": \"10.0.0.0/22\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/f3c97234-d870-4d11-ab65-073c9c4f11c4?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '645' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f4e678d5-4972-497d-89ed-329a72e666d0 - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/f3c97234-d870-4d11-ab65-073c9c4f11c4?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c23257a1-14be-4d3a-bd7f-c49254d96c27 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"fc83c790-e251-4921-b7fc-dc1afd65fea4\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/22\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:19 GMT - etag: - - W/"fc83c790-e251-4921-b7fc-dc1afd65fea4" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 757a4a18-bd15-436c-a76b-5ec1f30cf59b - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/40e80a55-8069-4823-9cc4-371836fa0d52?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:22 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operationResults/40e80a55-8069-4823-9cc4-371836fa0d52?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 47ba48a7-daca-4922-af22-63adb7bf44ce - x-ms-ratelimit-remaining-subscription-deletes: - - '14996' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/40e80a55-8069-4823-9cc4-371836fa0d52?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 31dc327f-3931-4655-ad6b-26d8861dc9d6 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/16045c55-ac88-4d73-bab8-ed52e727a4d0?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:33 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operationResults/16045c55-ac88-4d73-bab8-ed52e727a4d0?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e70bed9a-2acc-4a27-aa5a-91ecd78bd14c - x-ms-ratelimit-remaining-subscription-deletes: - - '14995' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/16045c55-ac88-4d73-bab8-ed52e727a4d0?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a2ecf2ad-7be1-431e-bab1-74ee68fe3c26 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_lock_commands.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_lock_commands.yaml deleted file mode 100644 index 0fe260f3096..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_lock_commands.yaml +++ /dev/null @@ -1,648 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001","name":"cli_test_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:02:48Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"7ec76eb2-189c-4059-af43-78cf4031ff76\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"f81f4755-3834-4a61-86ae-4aa3ed14bb16\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/ac4c8a7c-f674-4b35-ac89-834b315880c4?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 42d1b453-3852-4ffd-a6d0-3b7304497c5a - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/ac4c8a7c-f674-4b35-ac89-834b315880c4?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 646338b9-afb0-4b46-aca5-dbff0ef76ed5 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"8e28f226-25be-4cd9-baa0-3f63fc128755\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"f81f4755-3834-4a61-86ae-4aa3ed14bb16\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:59 GMT - etag: - - W/"8e28f226-25be-4cd9-baa0-3f63fc128755" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 2d16aa52-0f79-4ddf-8b23-a36b261208dd - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:02:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock list - Connection: - - keep-alive - ParameterSetName: - - -g --resource-type --resource-name --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}' - headers: - cache-control: - - no-cache - content-length: - - '514' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '529' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15503' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:03:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_move.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_move.yaml deleted file mode 100644 index b3c48a8c311..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_move.yaml +++ /dev/null @@ -1,1558 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_move_source000002?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002","name":"cli_test_resource_move_source000002","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:04:06Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": - \"eaf35800-42de-4c35-8cb9-8f6b64c7e1a4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"4ec4b52d-2b47-4775-b33a-f51253340d48\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/06fd64c7-9f9a-4a8a-84e7-280b917e378a?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '7053' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 6dae3f67-b206-49f9-bbfd-fd273780fae2 - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/06fd64c7-9f9a-4a8a-84e7-280b917e378a?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 7f67a936-e14b-41a3-b68d-7d0a69e749a1 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"eaf35800-42de-4c35-8cb9-8f6b64c7e1a4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"5bc1cffe-b9df-47df-af8f-720dbb454eab\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:17 GMT - etag: - - W/"5bc1cffe-b9df-47df-af8f-720dbb454eab" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 7adb1d5a-9a77-46f9-90e3-5be85ffbe524 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_move_source000002?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002","name":"cli_test_resource_move_source000002","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:04:06Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:17 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": - \"05d197f9-a7f4-406b-9f54-1211125ac30d\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"a7a7e6ca-ffb6-4e2b-8ada-2327dcf1dec2\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/fa73cd16-4948-4751-9496-2806e27665de?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '7053' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - b8076cfd-eaea-4daa-a491-14fcde5f2950 - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/fa73cd16-4948-4751-9496-2806e27665de?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 636c0415-aa38-4dda-9860-79a349267a50 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"05d197f9-a7f4-406b-9f54-1211125ac30d\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"df017712-e2ac-40a3-9abb-a65add9dc677\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:26 GMT - etag: - - W/"df017712-e2ac-40a3-9abb-a65add9dc677" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 77be3fd6-22da-42a0-83a3-6f9d5da379c7 - status: - code: 200 - message: OK -- request: - body: '{"resources": ["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003", - "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004"], - "targetResourceGroup": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001"}' - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - Content-Length: - - '618' - Content-Type: - - application/json - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/moveResources?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:04:31 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:04:47 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:05:02 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:05:17 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:05:33 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:05:49 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:06:04 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:06:19 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:06:35 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:06:50 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:07:05 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:07:22 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:07:37 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:07:52 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VHS1pRUzdXMlU1fEUxNEU4QjIyOTIzMzYyQjctV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - date: - - Fri, 16 Apr 2021 09:08:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"eaf35800-42de-4c35-8cb9-8f6b64c7e1a4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"beb9a1ce-b256-46ae-98f0-45b42c08465c\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:08:09 GMT - etag: - - W/"beb9a1ce-b256-46ae-98f0-45b42c08465c" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 775aec11-5946-4f78-b619-a0f54a6895c9 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"05d197f9-a7f4-406b-9f54-1211125ac30d\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"5c1b0456-68cc-49e9-911a-226275f7b09b\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:08:10 GMT - etag: - - W/"5c1b0456-68cc-49e9-911a-226275f7b09b" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - adbfc6ae-a8e9-4688-9787-15d5f8920d20 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml deleted file mode 100644 index f5fa5716c16..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_policy.yaml +++ /dev/null @@ -1,23430 +0,0 @@ -interactions: -- request: - body: '{"properties": {"mode": "Indexed", "displayName": "test_policy000003", - "description": "desc_for_test_policy_123", "policyRule": {"if": {"not": {"field": - "location", "in": "[parameters(''allowedLocations'')]"}}, "then": {"effect": - "deny"}}, "parameters": {"allowedLocations": {"type": "array", "metadata": {"description": - "The list of locations that can be specified when deploying resources", "strongType": - "location", "displayName": "Allowed locations"}}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition create - Connection: - - keep-alive - Content-Length: - - '459' - Content-Type: - - application/json - ParameterSetName: - - -n --rules --params --display-name --description --mode - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '828' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition update - Connection: - - keep-alive - ParameterSetName: - - -n --description - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '828' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_policy000003", "description": "desc_for_test_policy_123_new", - "policyRule": {"if": {"not": {"field": "location", "in": "[parameters(''allowedLocations'')]"}}, - "then": {"effect": "deny"}}, "metadata": {"createdBy": "9ac534f1-d577-4034-a32d-48de400dacbf", - "createdOn": "2021-04-19T08:50:45.6176005Z", "updatedBy": null, "updatedOn": - null}, "parameters": {"allowedLocations": {"type": "array", "metadata": {"description": - "The list of locations that can be specified when deploying resources", "strongType": - "location", "displayName": "Allowed locations"}}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition update - Connection: - - keep-alive - Content-Length: - - '594' - Content-Type: - - application/json - ParameterSetName: - - -n --description - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T08:50:46.2416875Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control - 1599 - Developer Configuration Management | Software / Firmware Integrity - Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\":{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your Synapse workspaces\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0049a6b3-a662-4f3e-8635-39cf44ace45a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"},{\"properties\":{\"displayName\":\"SQL - Server Integration Services integration runtimes on Azure Data Factory should - be joined to a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0088bc63-6dee-4a9c-9d29-91cfdc848952\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure - Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - protection of your Azure Virtual Machines by enabling Azure Backup. Azure - Backup is a secure and cost effective data protection solution for Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1099 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1709 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1052 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1034 - Least Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1623 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1515 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1361 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"},{\"properties\":{\"displayName\":\"Azure - Kubernetes Service Private Clusters should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"040732e8-d947-40b8-95d6-854c95024bf8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1594 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB allowed locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying Azure Cosmos DB resources.\",\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\",\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))), - ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\":\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"}]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"},{\"properties\":{\"displayName\":\"SQL - managed instances should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Linux VMs - monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"},{\"properties\":{\"displayName\":\"Shared - dashboards should not have markdown tiles with inline content\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that's hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Portal\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Portal/dashboards\"},{\"anyof\":[{\"not\":{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2020-09-01-alpha\"}},{\"count\":{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type\",\"equals\":\"Extension/HubsExtension/PartType/MarkdownPart\"},{\"anyOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"equals\":\"1\"}]}]}},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c655fe-0ac7-48ae-9a32-3a2e208c7624\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1572 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use a customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Azure Front Door Service - service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"},{\"properties\":{\"displayName\":\"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send scan reports to' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\",\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"},\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Data Lake Store should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1223 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1420 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1688 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - access the private endpoint(s) for Storage Sync Service resource interfaces - from a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint's private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateDnsZoneId\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"Private - DNS Zone Identifier\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"afs\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-afs\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06695360-db88-47f6-b976-7500d4297475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1455 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit SQL DB Level Audit Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - DB level audit setting for SQL databases\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Audit - VMs that do not use managed disks\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\",\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\",\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that Cognitive Services - account isn't exposed on the public internet. Creating private endpoints can - limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - \",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1583 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the DSC configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure - Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"},{\"properties\":{\"displayName\":\"Adaptive - network hardening recommendations should be applied on internet facing virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"},{\"properties\":{\"displayName\":\"There - should be more than one owner assigned to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1159 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"},{\"properties\":{\"displayName\":\"Disk - encryption should be applied on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"},{\"properties\":{\"displayName\":\"Configure - backup on virtual machines without a given tag to an existing recovery services - vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location - (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.\",\"strongType\":\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Backup - Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding VMs from - the scope of this policy. This should be used along with the Exclusion Tag - Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exclusion - Tag Values\",\"description\":\"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"value\":\"[empty(parameters('exclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('exclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"},{\"properties\":{\"displayName\":\"Azure - Policy Add-on for Kubernetes service (AKS) should be installed and enabled - on your clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1654 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1428 - Media Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"},{\"properties\":{\"displayName\":\"Audit - resource location matches resource group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that the resource location matches its resource group location\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[resourcegroup().location]\"},{\"field\":\"location\",\"notEquals\":\"global\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Management'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl\",\"exists\":false},{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0aa61e00-0a01-4a3c-9945-e93cffedf0e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"},{\"properties\":{\"displayName\":\"Email - notification to subscription owner for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"not\":{\"allOf\":[{\"field\":\"Microsoft.Security/securityContacts/alertsToAdmins\",\"equals\":\"Off\"},{\"field\":\"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity\",\"equals\":\"High\"}]}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"},{\"properties\":{\"displayName\":\"Key - vaults should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB throughput should be limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max - RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned - to a container via the Resource Provider during create or update.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"},{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\",\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\",\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1239 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"},{\"properties\":{\"displayName\":\"Ensure - API app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Automation Accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"},{\"properties\":{\"displayName\":\"SQL - servers should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for IoT Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d40b058-9f95-4a19-93e3-9b0330baa2a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1518 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1466 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"},{\"properties\":{\"displayName\":\"Deploy - a flow log resource with target network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG - Region\",\"description\":\"This Policy will review NSGs only in the selected - region. You can create other assignments to include other regions.\",\"strongType\":\"location\"}},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - id\",\"description\":\"A string with the storage id for the flowlogs to be - sent to. It will be used for deployment purposes only. Make sure this storage - account is located in the same region as the NSG. The format must be: '/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watchers RG\",\"description\":\"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.\",\"strongType\":\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watcher name\",\"description\":\"The name of the network watcher under which - the flowLog resources will be created. Make sure it belongs to the same region - as the NSG.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\",\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))), - 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\",\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\":{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\":{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-', - uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\",\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\":\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'), - '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\",\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\":{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\":{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\":{\"value\":\"[concat(resourceGroup().id, - '/providers/Microsoft.Network/networkSecurityGroups/', field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure File Sync to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Azure File Sync's internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"value\":\"AllowVirtualNetworksOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e07b2e9-6cd9-4c40-9ccb-52817b95133b\"},{\"properties\":{\"displayName\":\"Authorized - IP ranges should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\",\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Key Vault provides an additional layer of protection and security - intelligence by detecting unusual and potentially harmful attempts to access - or exploit key vault accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"},{\"properties\":{\"displayName\":\"Configure - Batch accounts with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"App - Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\",\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1476 - Fire Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1430 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1574 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1164 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"count\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fda3595-9f2b-4592-8675-4231d6fa82fe\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Container registries\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fdf0491-d080-4575-b627-ad0e843cba0f\"},{\"properties\":{\"displayName\":\"CORS - should not allow every domain to access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\",\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not contain the specified - certificates in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints\",\"description\":\"A semicolon-separated list of - certificate thumbprints that should exist under the Trusted Root certificate - store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"},\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"},{\"properties\":{\"displayName\":\"Custom - subscription owner roles should not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that no custom subscription owner roles exist.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\",\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"/\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1230 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1432 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure IoT Hubs to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"114eec6e-5e59-4bad-999d-6eceeb39d582\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System settings' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies\",\"description\":\"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1655 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Security' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LAN Manager authentication level\",\"description\":\"Specify which - challenge-response authentication protocol is used for network logons. This - choice affects the level of authentication protocol used by clients, the level - of session security negotiated, and the level of authentication accepted by - servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LDAP client signing requirements\",\"description\":\"Specify the - level of data signing that is requested on behalf of clients that issue LDAP - BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients\",\"description\":\"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers\",\"description\":\"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"},{\"properties\":{\"displayName\":\"Allowlist - rules in your adaptive application control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center's adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use Key Vault for storing secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"exists\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"PWD=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"Password=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"CredString=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"pwd=\"}]}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type\",\"equals\":\"SecureString\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type\",\"equals\":\"SecureString\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"MongoDbAtlas\",\"MongoDbV2\"]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type\",\"equals\":\"SecureString\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"127ef6d7-242f-43b3-9eef-947faf1725d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1240 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System objects'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"},\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1450 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1184 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure machines to receive the Qualys vulnerability assessment agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don't need a Qualys license or even a Qualys account - everything's handled - seamlessly inside Security Center. Machines which don't have the Qualys vulnerability - assessment agent deployed automatically receive the agent if this policy is - enabled.\",\"metadata\":{\"category\":\"Security Center\",\"preview\":true,\"version\":\"2.0.0-preview\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]},\"deployment\":{\"properties\":{\"mode\":\"Incremental\",\"template\":{\"contentVersion\":\"1.0.0.0\",\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"parameters\":{\"vmName\":{\"type\":\"String\"},\"resourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.compute/virtualmachines'))]\",\"type\":\"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"},{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.hybridcompute/machines'))]\",\"type\":\"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"resourceType\":{\"value\":\"[field('type')]\"}}}},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13ce0167-8ca6-4048-8e6b-f996402e3c1b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1085 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1404 - Maintenance Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that contain certificates expiring within the specified number - of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - store path\",\"description\":\"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is 'Cert:' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher', - 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Expiration - limit in days\",\"description\":\"An integer indicating the number of days - within which to check for certificates that are expiring. For example, if - this value is 30, any certificate expiring within the next 30 days will cause - this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to include\",\"description\":\"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to exclude\",\"description\":\"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - expired certificates\",\"description\":\"Must be 'true' or 'false'. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group contains - any of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to exclude\",\"description\":\"A semicolon-separated list of members - that should be excluded in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"},\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityWindowsAgent\":\"[concat('deployAzureSecurityWindowsAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityWindowsAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityWindowsAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1537496a-b1e8-482b-a06a-1cc2415cdc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1157 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1564 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a minimum password - age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1662 - Fail In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1684 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1103 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1007 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"},{\"properties\":{\"displayName\":\"Deploy - associations for a managed application\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"},\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Managed - application ID\",\"description\":\"Resource ID of the managed application - to which resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the managed application.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetManagedApplicationId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\":{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"},{\"properties\":{\"displayName\":\"[ASC - Private Preview] Deploy - Configure system-assigned managed identity to enable - Azure Monitor assignments on VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.2.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[if(contains(field('identity.type'), - 'UserAssigned'), concat(field('identity.type'), ',SystemAssigned'), 'SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17b3de92-f710-4cf4-aa55-0e7859f1ed7b\"},{\"properties\":{\"displayName\":\"Transparent - Data Encryption on SQL databases should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1325 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1480 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1369 - Incident Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Logon-Logoff' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\":\"Audit - Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Group Membership\",\"description\":\"Specifies whether audit events are generated - when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"},{\"properties\":{\"displayName\":\"Azure - Monitor log profile should collect logs for categories 'write,' 'delete,' - and 'action'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that a log profile collects logs for categories 'write,' 'delete,' - and 'action'\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Access to App Services should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1adadefe-5f21-44f7-b931-a59b54ccdb45\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance which doesn't have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"},{\"properties\":{\"displayName\":\"Public - network access on Azure SQL Database should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"},{\"properties\":{\"displayName\":\"Azure - Service Bus namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"},{\"properties\":{\"displayName\":\"Public - network access on Azure Data Factory should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"},{\"properties\":{\"displayName\":\"Azure - File Sync should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization's network, rather than through the internet-accessible - public endpoint. Creating a private endpoint by itself does not disable the - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d320205-c6a1-4ac6-873d-46224024e8e2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using no secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires no secrets. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1538 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"},{\"properties\":{\"displayName\":\"Virtual - machines should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1595 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - a required tag and its value. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Target sub resource the private endpoint - connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('targetSubResource')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"synapse-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\"},{\"properties\":{\"displayName\":\"Key - vaults should have soft delete enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - API for FHIR should have at least one approved private endpoint connection. - Clients in a virtual network can securely access resources that have private - endpoint connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"count\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ee56206-5dd1-42ab-b02d-8aae8b1634ce\"},{\"properties\":{\"displayName\":\"An - Azure Active Directory administrator should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be encrypted with customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Shutdown'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Clear virtual memory pagefile\",\"description\":\"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\":false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"},{\"properties\":{\"displayName\":\"Logic - Apps Integration Service Environment should be encrypted with customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/integrationServiceEnvironments\"},{\"field\":\"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption at host to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure security - center has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"},{\"properties\":{\"displayName\":\"VM - Image Builder templates should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM - Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization's - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a8cd35-125e-4d13-b82d-2e19b7208bb7\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a9766a-82a5-4747-abb5-650b6dbba6d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1111 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1596 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Audit'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1399 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Management'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"},{\"properties\":{\"displayName\":\"Management - ports should be closed on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1493 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"},{\"properties\":{\"displayName\":\"Only - secure connections to your Azure Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not restrict the minimum - password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"},{\"properties\":{\"displayName\":\"Service - Bus should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Automation account so that it isn't accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Automation\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"value\":false}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1268 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1231 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a maximum password age - of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1372 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"},{\"properties\":{\"displayName\":\"Endpoint - protection solution should be installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1649 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"},{\"properties\":{\"displayName\":\"Metric - alert rules should be configured on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - configuration of metric alert rules on Batch account to enable the required - metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Metric - name\",\"description\":\"The metric name that an alert rule must be enabled - on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\":\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\",\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\",\"equals\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourcegroups/', resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', - field('name'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"},{\"properties\":{\"displayName\":\"Configure - virtual machines to be onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1396 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"},{\"properties\":{\"displayName\":\"Flow - logs should be enabled for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkWatchers/flowLogs\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27960feb-a23c-4577-8d36-ef8b5f35e0be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1074 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1527 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"},{\"properties\":{\"displayName\":\"Deploy - default Microsoft IaaSAntimalware extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file extensions to exclude from scanning\"}},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of process names to exclude from scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\":\"true\",\"metadata\":{\"description\":\"Indicates - whether or not real time protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\":{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\":\"Indicates - whether or not custom scheduled scan settings are enabled (default is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)\"}},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\",\"metadata\":{\"description\":\"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\",\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\",\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\",\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\",\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\":{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\",\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\":{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1436 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"},{\"properties\":{\"displayName\":\"Azure - Defender for App Service should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for App Service leverages the scale of the cloud, and the visibility - that Azure has as a cloud provider, to monitor for common web app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"},{\"properties\":{\"displayName\":\"Service - Bus Premium namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"},{\"not\":{\"field\":\"Microsoft.ServiceBus/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"295fc8b1-dc9f-4f53-9c61-3f313ceab40a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - User Account Control'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"},\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Policy Change' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\":\"Audit - Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\":\"Audit - Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authentication Policy Change\",\"description\":\"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authorization Policy Change\",\"description\":\"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1274 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"},{\"properties\":{\"displayName\":\"Synapse - workspace auditing settings should have action groups configured to capture - critical activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b18f286-371e-4b80-9887-04759970c0d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1434 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1388 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1344 - Authenticator Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"},{\"properties\":{\"displayName\":\"SSH - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows SSH access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"},{\"properties\":{\"displayName\":\"Unattached - disks should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any unattached disk without encryption enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1546 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1414 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1679 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1068 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"},{\"properties\":{\"displayName\":\"App - Service should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any App Service not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not store passwords using reversible - encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that allow remote connections from accounts - without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"},{\"properties\":{\"displayName\":\"Public - network access on Azure IoT Hub should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure IoT Hub should use customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"lessOrEquals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\"},{\"properties\":{\"displayName\":\"Managed - workspace virtual network on Azure Synapse workspaces should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetwork\",\"notEquals\":\"default\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d9dbfa3-927b-4cf0-9d0f-08747f971650\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1077 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1000 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1519 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System objects' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Windows - VMs monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1144 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1090 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Access'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Storage should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Storage provides detections of unusual and potentially harmful - attempts to access or exploit storage accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cache for Redis resource so that it's - not accessible over the public internet. This helps protect the cache against - data leakage risks.\",\"metadata\":{\"category\":\"Cache\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30b3dfa5-a70d-4c8e-bed6-0083858f663d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines missing any of specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to include\",\"description\":\"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not joined to the specified - domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Domain Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"},\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics Agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"},{\"properties\":{\"displayName\":\"API - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"324c7761-08db-4474-9661-d1039abc92ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1587 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the specified services - are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and 'Running'. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Service names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the services that should be installed and 'Running'. - e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"},\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"},{\"properties\":{\"displayName\":\"Azure - SQL Database should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"},{\"properties\":{\"displayName\":\"Deploy - the Linux Guest Configuration extension to enable Guest Configuration assignments - on Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"},{\"properties\":{\"displayName\":\"MySQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Audit' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: - Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to an existing recovery - services vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally include - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Location (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral\",\"strongType\":\"location\"}},\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"345fa903-145c-4fe1-8bcd-93ec2adccde8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1151 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should allow outbound data traffic only to approved targets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3484ce98-c0c5-4c83-994b-c5ac24785218\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1412 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1475 - Emergency Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1060 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premises clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"},{\"properties\":{\"displayName\":\"Resource - logs in Logic Apps should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1210 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a maximum password - age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Object Access' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit - Detailed File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\",\"AuditFileSystem\":\"Audit - File System;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File Share\",\"description\":\"Specifies whether to audit events related to - file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Firewall Properties' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\",\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPrivateUseProfileSettings\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPublicUseProfileSettings\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Private: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"},{\"properties\":{\"displayName\":\"Gateway - subnets should not be configured with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection on Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection on Storage Accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('storageAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1313 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"},{\"properties\":{\"displayName\":\"Automation - account variables should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is important to enable encryption of Automation account variable assets when - storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"},{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1685 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"},{\"properties\":{\"displayName\":\"Deploy - Threat Detection on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Security'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LAN Manager authentication level\",\"description\":\"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LDAP client signing requirements\",\"description\":\"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients\",\"description\":\"Specifies which behaviors are allowed by - clients for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services. - See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers\",\"description\":\"Specifies which behaviors are allowed by - servers for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid topics to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36ea4b4b-0f7f-4a54-89fa-ab18f555a172\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/domains/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"domain\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36f4658a-848a-467b-881c-e6fa20cf75fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Interactive Logon'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1624 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"},{\"properties\":{\"displayName\":\"Storage - accounts should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\",\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"},{\"properties\":{\"displayName\":\"Resource - logs in IoT Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"3.0.1\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"},{\"properties\":{\"displayName\":\"Deploy - the Windows Guest Configuration extension to enable Guest Configuration assignments - on Windows VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1081 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1522 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1397 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address for security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1232 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1246 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"},{\"properties\":{\"displayName\":\"Synapse - managed private endpoints should only connect to resources in approved Azure - Active Directory tenants\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"allowedTenantIds\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List - of Allowed Tenant Ids for private endpoint creation\",\"description\":\"This - parameter defines the list of Allowed Tenant Ids that are allowed to create - managed private endpoints in the workspaces\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"notIn\":\"[parameters('allowedTenantIds')]\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a003702-13d2-4679-941b-937e58c443f0\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1648 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Control - Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Control Panel' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1315 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1548 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto - approved by policy assignment\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b3b0c27-08d2-4b32-879d-19930bee3266\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1003 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Security operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Security Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\",\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"},{\"properties\":{\"displayName\":\"PostgreSQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1621 - Resource Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1127 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on virtual machines with no identities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have extra accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\":\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\":\"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Search Services in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Devices'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Log Analytics workspace\",\"description\":\"Select Log Analytics workspace - from dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\",\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - monitoring for Linux VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"},{\"properties\":{\"displayName\":\"App - Configuration should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d9f5e4c-9947-4579-9539-2a7695fbc187\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1385 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell modules - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn't available - in a location specified by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\":\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Modules\",\"description\":\"A semicolon-separated list of the names of the - PowerShell modules that should be installed. You may also specify a specific - version of a module that should be installed by including a comma after the - module name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"},{\"properties\":{\"displayName\":\"Azure - Monitor solution 'Security and Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that Security and Audit is deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1160 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1545 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Access' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths\",\"description\":\"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1561 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"},{\"properties\":{\"displayName\":\"Secure - transfer to storage accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always use classic logon\",\"description\":\"Specifies whether to force the - user to log on to the computer using the classic logon screen. This setting - only works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Boot-Start Driver Initialization Policy\",\"description\":\"Specifies which - boot-start drivers are initialized based on a classification determined by - an Early Launch Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable Windows NTP Client\",\"description\":\"Specifies whether the Windows - NTP Client is enabled. Enabling the Windows NTP Client allows your computer - to synchronize its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\":{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\":{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\":{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\":{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\":{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1202 - Access Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1438 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"},{\"properties\":{\"displayName\":\"Azure - Monitor should collect activity logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"},{\"properties\":{\"displayName\":\"Temp - disks and cache for agent node pools in Azure Kubernetes Service clusters - should be encrypted at host\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"count\":{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"false\"}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41425d9f-d1a5-499a-9932-f8ed8453932c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1263 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"},{\"properties\":{\"displayName\":\"Audit - Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Azure Front Door - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"},{\"properties\":{\"displayName\":\"Resource - logs in Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Detailed Tracking'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Process Termination\",\"description\":\"Specifies whether audit events - are generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"},\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1137 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System settings'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies\",\"description\":\"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Logon' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit - Credential Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Credential Validation\",\"description\":\"Specifies whether audit events are - generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1544 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1398 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor permissive network access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1720 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1310 - Device Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1565 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use a Private Link enabled SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"field\":\"Microsoft.SignalRService/SignalR/sku.tier\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464a1620-21b5-448d-8ce6-d4ac6d1bc49a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require SQL Server version 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"},{\"properties\":{\"displayName\":\"Require - automatic OS image patching on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\",\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\",\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedStorage\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"},{\"properties\":{\"displayName\":\"[Preview]: - IoT Hub device provisioning service data should be encrypted using customer-managed - keys (CMK)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47031206-ce96-41f8-861b-6a915f3de284\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn't exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage - accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB key based metadata write access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"},{\"properties\":{\"displayName\":\"Auto - provisioning of the Log Analytics agent should be enabled on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"},{\"properties\":{\"displayName\":\"Adaptive - application controls for defining safe applications should be enabled on your - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"},{\"properties\":{\"displayName\":\"Configure - Cognitive Services accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Cognitive Services resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Disabled\",\"Modify\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2017-04-18')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1165 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"},{\"properties\":{\"displayName\":\"Private - endpoints for Guest Configuration assignments should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"},{\"field\":\"id\",\"contains\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyof\":[{\"field\":\"[concat('tags[', - 'EnablePrivateNeworkGC', ']')]\",\"equals\":\"TRUE\"},{\"field\":\"[concat('tags[', - 'EnablePrivateNetworkGC', ']')]\",\"equals\":\"TRUE\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"480d0f91-30af-4a76-9afb-f5710ac52b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1048 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1033 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1669 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - User Account Control' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"UACRunAllAdministratorsInAdminApprovalMode\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of the elevation prompt for administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for Data factories\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"groupId\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - group Id that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - group Id\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupId\":[\"[parameters('groupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496ca26b-f669-4322-a1ad-06b7b5e41882\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on VMs with a user-assigned identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[concat(field('identity.type'), - ',SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Audit'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - 'modify' effect policies are available that support remediation of tags on - existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1677 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1094 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid topic instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"count\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"},{\"properties\":{\"displayName\":\"Function - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d0bc837-6eff-477e-9ecd-33bf8d4212a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"},{\"properties\":{\"displayName\":\"FTPS - should be required in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1156 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1312 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"},{\"properties\":{\"displayName\":\"Azure - Defender for servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for servers provides real-time threat protection for server workloads - and generates hardening recommendations as well as alerts about suspicious - activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1001 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1083 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1247 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1267 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints that connect to Batch - accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"batchAccount\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"batchAccount-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec38ebc-381f-45ee-81a4-acbc4be878f8\"},{\"properties\":{\"displayName\":\"Azure - data factories should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/encryption.vaultBaseUrl\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec52d6d-beb7-40c4-9a9e-fe753254690e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1139 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"},{\"properties\":{\"displayName\":\"A - maximum of 3 owners should be designated for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"},{\"properties\":{\"displayName\":\"Subscriptions - should have a contact email address for security issues\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"},{\"properties\":{\"displayName\":\"Add - a tag to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"},{\"properties\":{\"displayName\":\"[Preview]: - Storage account public access should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.\",\"metadata\":{\"version\":\"2.0.1-preview\",\"category\":\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The effect determines what happens when the policy - rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\",\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"},{\"properties\":{\"displayName\":\"A - vulnerability assessment solution should be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center's - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1485 - Delivery And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center regulatory compliance\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\",\"preview - \":true},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"regulatoryComplianceStandards\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - standards names\",\"description\":\"For all compliance standards, leave it - empty. For specific compliance standards, enter a list of standards names - separated by semicolons (';'). Compliance standards names are available through - the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center regulatory compliance assessment is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center regulatory compliance - assessment is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets\",\"exists\":false},{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"less\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceControlStates')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\",\"name\":\"regulatoryComplianceControlState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.state\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceControlState')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceControlStates'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceStandards')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\",\"name\":\"regulatoryComplianceStandard\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"id\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceStandard')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceStandards'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"notEquals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('regulatoryComplianceStandards'),parameters('regulatoryComplianceControlStates'))]\"},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\"},\"equals\":\"[mul(2,mul(length(parameters('regulatoryComplianceStandards')),length(parameters('regulatoryComplianceControlStates'))))]\"}]}]}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"regulatoryComplianceStandards\":{\"type\":\"array\"},\"regulatoryComplianceControlStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"regulatoryComplianceStandardsLength\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"regulatoryComplianceControlStatesLength\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"regulatoryComplianceStandardsLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsLength'), - 0), 1, variables('regulatoryComplianceStandardsLength'))]\",\"regulatoryComplianceControlStatesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceControlStatesLength'), - 0), 1, variables('regulatoryComplianceControlStatesLength'))]\",\"stateMap\":{\"Failed\":\"failed\",\"Passed\":\"passed\",\"Skipped\":\"skipped\",\"Unsupported\":\"unsupported\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center regulatory - compliance assessment is created or triggered\":\"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered\"},\"doesAllStatesSelected\":\"[if(equals(length(parameters('regulatoryComplianceControlStates')),length(variables('stateMap'))),bool('true'),bool('false'))]\",\"doesAllStandardsSelected\":\"[if(equals(variables('regulatoryComplianceStandardsLength'),0),bool('true'),bool('false'))]\",\"allRegulatoryComplianceRuleSets\":[],\"customStandardsOrCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsOrCustomStateRuleSetsArr\",\"count\":\"[if(not(variables('doesAllStandardsSelected')),variables('regulatoryComplianceStandardsLength'),if(not(variables('doesAllStatesSelected')),variables('regulatoryComplianceControlStatesLength'),1))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(not(variables('doesAllStandardsSelected')),'id',if(not(variables('doesAllStatesSelected')),'properties.state',json('null')))]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],json('null')))]\",\"operator\":\"[if(not(variables('doesAllStandardsSelected')),'Contains',if(not(variables('doesAllStatesSelected')),'Equals',json('null')))]\"}]}}]},\"customStandardsAndCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsAndCustomStateRuleSetsArr\",\"count\":\"[if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),mul(variables('regulatoryComplianceStandardsLength'),variables('regulatoryComplianceControlStatesLength')),1)]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[mod(div(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength')), variables('regulatoryComplianceStandardsLength'))],json('null'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.state\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[mod(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength'))],json('null'))]\",\"operator\":\"Equals\"}]}}]},\"sourceRuleSets\":\"[if(and(variables('doesAllStandardsSelected'),variables('doesAllStatesSelected')),variables('allRegulatoryComplianceRuleSets'),if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),variables('customStandardsAndCustomStateRuleSets').customStandardsAndCustomStateRuleSetsArr,variables('customStandardsOrCustomStateRuleSets').customStandardsOrCustomStateRuleSetsArr))]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"RegulatoryComplianceAssessment\",\"ruleSets\":\"[variables('sourceRuleSets')]\"}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"regulatoryComplianceStandards\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\"},\"regulatoryComplianceControlStates\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"509122b9-ddd9-47ba-a5f1-d0dac20be63c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1566 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"},{\"properties\":{\"displayName\":\"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"IPsecEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Encryption\",\"description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Integrity\",\"description\":\"IPsec Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Integrity\",\"description\":\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"DH - Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"PFS - Group\",\"description\":\"PFS Group\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\",\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\",\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\",\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\",\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\",\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\",\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1248 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1386 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"},{\"properties\":{\"displayName\":\"Bot - Service should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"},{\"properties\":{\"displayName\":\"Azure - Defender for Kubernetes should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Kubernetes provides real-time threat protection for containerized - environments and generates alerts for suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"},{\"properties\":{\"displayName\":\"Synapse - workspaces with SQL auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your Synapse workspace' SQL auditing to storage account destination to at - least 90 days. Confirm that you are meeting the necessary retention rules - for the regions in which you are operating. This is sometimes required for - compliance with regulatory standards.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"529ea018-6afc-4ed4-95bd-7c9ee47b00bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1642 - Network Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"},{\"properties\":{\"displayName\":\"Connection - throttling should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Azure SignalR Service - resource instead of the entire service, you'll reduce your data leakage risks. - Learn more about private links at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1467 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"},{\"properties\":{\"displayName\":\"[Preview]: - Firewall should be enabled on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Key - vault's firewall prevents unauthorized traffic from reaching your key vault - and provides an additional layer of protection for your secrets. Enable the - firewall to make sure that only traffic from allowed networks can access your - key vault.\",\"metadata\":{\"version\":\"1.0.2-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"},{\"properties\":{\"displayName\":\"Azure - Automation accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.Keyvault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56a5ee18-2ae6-4810-86f7-18e39ce5629b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"},{\"properties\":{\"displayName\":\"IP - firewall rules on Azure Synapse workspaces should be removed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces/firewallrules\"},{\"field\":\"name\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56fd377d-098c-4f02-8406-81eb055902b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"},{\"properties\":{\"displayName\":\"Windows - web servers should be configured to use secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\",\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"[SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - TLS version\",\"description\":\"The minimum TLS protocol version that should - be enabled. Windows web servers with lower TLS versions will be marked as - non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1162 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1054 - Session Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"},{\"properties\":{\"displayName\":\"Configure - disk access resources with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disk access resources in this region are validated and private endpoints are - created in this region.\"}},\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[concat('pe','-',field('name'))]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[parameters('name')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"disks\"]}}],\"manualPrivateLinkServiceConnections\":[]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Detailed Tracking' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit - Process Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Process Termination\",\"description\":\"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"},{\"properties\":{\"displayName\":\"CosmosDB - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your CosmosDB account, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1547 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which Windows Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Port Number\",\"description\":\"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Baud Rate\",\"description\":\"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1573 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1463 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1425 - Timely Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"},{\"properties\":{\"displayName\":\"Operating - system version should be the most current version for your cloud service roles\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a minimum password age - of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1032 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not restrict the minimum password - length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1005 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1105 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1433 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"},{\"properties\":{\"displayName\":\"Container - registries should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.2\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\",\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"},{\"properties\":{\"displayName\":\"Ensure - WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Remote Host Name\",\"description\":\"Specifies the Domain Name System (DNS) - name or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Port\",\"description\":\"The TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Should connect to remote host\",\"description\":\"Must be 'True' or 'False'. - 'True' indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. 'False' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"},\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"},\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Security'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be enabled in virtual machine scale sets for listed - virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1671 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1067 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"},{\"properties\":{\"displayName\":\"External - accounts with write permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1483 - Water Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1362 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1665 - Process Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Function App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"},{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1208 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: West India, South India, - Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\",\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"},{\"properties\":{\"displayName\":\"[Preview]: - Private endpoint should be configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use user-assigned managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers' security posture and protect them from attacks.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"},{\"properties\":{\"displayName\":\"External - accounts with read permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityLinuxAgent\":\"[concat('deployAzureSecurityLinuxAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityLinuxAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityLinuxAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityLinuxAgent\",\"typeHandlerVersion\":\"2.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f8eb305-9c9f-4abe-9bb0-df220d9faba2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Windows virtual machines on which the Windows Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"2.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1663 - Protection Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Object Access'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"},{\"properties\":{\"displayName\":\"Storage - Accounts should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows web servers that are not using secure communication - protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Data Security on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\":\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - variables('serverResourceGroupName'), parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', - variables('uniqueStorage')))]\"},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\":\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\":{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\":[\"[concat('Microsoft.Storage/storageAccounts/', - variables('storageName'))]\",\"[concat('Microsoft.Sql/servers/', parameters('serverName'), - '/securityAlertPolicies/Default')]\"]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"},{\"properties\":{\"displayName\":\"Configure - time zone on Windows machines.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"configurationStores\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"614ffa75-862c-456e-ad8b-eaa1b0844b07\"},{\"properties\":{\"displayName\":\"Bot - Service endpoint should be a valid HTTPS URI\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service - Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\":\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\",\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\",\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1110 - Audit Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1415 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a4d60b-7326-440e-8051-9f94394d4dd1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1153 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System objects'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the Log Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected - workspace IDs\",\"description\":\"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"},{\"properties\":{\"displayName\":\"Modify - Azure SignalR Service resources to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"Audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"value\":\"Deny\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"value\":[]}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62a3ae95-8169-403e-a2d2-b82141448092\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1660 - Session Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"},{\"properties\":{\"displayName\":\"Audit - Windows machines network connectivity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote - Host Name\",\"description\":\"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Port\",\"description\":\"The - TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Should - connect to remote host\",\"description\":\"The machine will be non-compliant - if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"},{\"properties\":{\"displayName\":\"Authentication - to Linux machines should require SSH keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1002 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1498 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1185 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Devices'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Devices: Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"64d314f6-6062-4780-a861-c23e8951bee5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit missing blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"},{\"properties\":{\"displayName\":\"Azure - Defender for SQL servers on machines should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1261 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"},{\"properties\":{\"displayName\":\"Service - principals should be used to protect your subscriptions instead of management - certificates\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1319 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedKey\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Network' for guest logons, simultaneous connections, network bridge, - ICS, and multicast name resolution. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable - insecure guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn - off multicast name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - insecure guest logons\",\"description\":\"Specifies whether the SMB client - will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked service resource type should be in allow list\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"allowedLinkedServiceResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed linked service resource types\",\"description\":\"The list of allowed - linked service resource types.\"},\"allowedValues\":[\"AdlsGen2CosmosStructuredStream\",\"AdobeExperiencePlatform\",\"AdobeIntegration\",\"AmazonRedshift\",\"AmazonS3\",\"AzureBlobFS\",\"AzureBlobStorage\",\"AzureDataExplorer\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureDataShare\",\"AzureFileStorage\",\"AzureKeyVault\",\"AzureMariaDB\",\"AzureMySql\",\"AzurePostgreSql\",\"AzureSearch\",\"AzureSqlDatabase\",\"AzureSqlDW\",\"AzureSqlMI\",\"AzureTableStorage\",\"Cassandra\",\"CommonDataServiceForApps\",\"CosmosDb\",\"CosmosDbMongoDbApi\",\"Db2\",\"DynamicsCrm\",\"FileServer\",\"FtpServer\",\"GitHub\",\"GoogleCloudStorage\",\"Hdfs\",\"Hive\",\"HttpServer\",\"Informix\",\"Kusto\",\"MicrosoftAccess\",\"MySql\",\"Netezza\",\"Odata\",\"Odbc\",\"Office365\",\"Oracle\",\"PostgreSql\",\"Salesforce\",\"SalesforceServiceCloud\",\"SapBw\",\"SapHana\",\"SapOpenHub\",\"SapTable\",\"Sftp\",\"SharePointOnlineList\",\"Snowflake\",\"SqlServer\",\"Sybase\",\"Teradata\",\"HDInsightOnDemand\",\"HDInsight\",\"AzureDataLakeAnalytics\",\"AzureBatch\",\"AzureFunction\",\"AzureML\",\"AzureMLService\",\"MongoDb\",\"GoogleBigQuery\",\"Impala\",\"ServiceNow\",\"Dynamics\",\"AzureDatabricks\",\"AmazonMWS\",\"SapCloudForCustomer\",\"SapEcc\",\"Web\",\"MongoDbAtlas\",\"HBase\",\"Spark\",\"Phoenix\",\"PayPal\",\"Marketo\",\"Responsys\",\"SalesforceMarketingCloud\",\"Presto\",\"Square\",\"Xero\",\"Jira\",\"Magento\",\"Shopify\",\"Concur\",\"Hubspot\",\"Zoho\",\"Eloqua\",\"QuickBooks\",\"Couchbase\",\"Drill\",\"Greenplum\",\"MariaDB\",\"Vertica\",\"MongoDbV2\",\"OracleServiceCloud\",\"GoogleAdWords\",\"RestService\",\"DynamicsAX\",\"AzureDataCatalog\",\"AzureDatabricksDeltaLake\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"notIn\":\"[parameters('allowedLinkedServiceResourceTypes')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6809a3d0-d354-42fb-b955-783d207c62a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the Log Analytics agent - is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Connected workspace IDs\",\"description\":\"A semicolon-separated list of - the workspace IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"},\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1597 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1588 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1727 - Memory Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1652 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to exclude\",\"description\":\"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1244 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available\",\"description\":\"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to 'Non-Compliant' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to 'Compliant' will make these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"},\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1211 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1653 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"},{\"properties\":{\"displayName\":\"Deprecated - accounts should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Service Bus in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1031 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL servers on machine should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f97aa83c-9b63-4f9a-99f6-b22c4398f936\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\"},{\"properties\":{\"displayName\":\"Not - allowed resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that cannot be deployed.\",\"displayName\":\"Not allowed - resource types\",\"strongType\":\"resourceTypes\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},{\"value\":\"[field('type')]\",\"exists\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Azure Kubernetes Service should be connected to\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AllMetrics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-apiserver\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-apiserver - - Enabled\",\"description\":\"Whether to stream kube-apiserver logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit - - Enabled\",\"description\":\"Whether to stream kube-audit logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-controller-manager\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-controller-manager - - Enabled\",\"description\":\"Whether to stream kube-controller-manager logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-scheduler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-scheduler - - Enabled\",\"description\":\"Whether to stream kube-scheduler logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"cluster-autoscaler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"cluster-autoscaler - - Enabled\",\"description\":\"Whether to stream cluster-autoscaler logs to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit-admin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit-admin - - Enabled\",\"description\":\"Whether to stream kube-audit-admin logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"guard\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"guard - - Enabled\",\"description\":\"Whether to stream guard logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AllMetrics\":{\"type\":\"string\"},\"kube-apiserver\":{\"type\":\"string\"},\"kube-audit\":{\"type\":\"string\"},\"kube-controller-manager\":{\"type\":\"string\"},\"kube-scheduler\":{\"type\":\"string\"},\"cluster-autoscaler\":{\"type\":\"string\"},\"kube-audit-admin\":{\"type\":\"string\"},\"guard\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetrics')]\"}],\"logs\":[{\"category\":\"kube-apiserver\",\"enabled\":\"[parameters('kube-apiserver')]\"},{\"category\":\"kube-audit\",\"enabled\":\"[parameters('kube-audit')]\"},{\"category\":\"kube-controller-manager\",\"enabled\":\"[parameters('kube-controller-manager')]\"},{\"category\":\"kube-scheduler\",\"enabled\":\"[parameters('kube-scheduler')]\"},{\"category\":\"cluster-autoscaler\",\"enabled\":\"[parameters('cluster-autoscaler')]\"},{\"category\":\"kube-audit-admin\",\"enabled\":\"[parameters('kube-audit-admin')]\"},{\"category\":\"guard\",\"enabled\":\"[parameters('guard')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"guard\":{\"value\":\"[parameters('guard')]\"},\"AllMetrics\":{\"value\":\"[parameters('AllMetrics')]\"},\"kube-apiserver\":{\"value\":\"[parameters('kube-apiserver')]\"},\"kube-audit\":{\"value\":\"[parameters('kube-audit')]\"},\"kube-scheduler\":{\"value\":\"[parameters('kube-scheduler')]\"},\"kube-controller-manager\":{\"value\":\"[parameters('kube-controller-manager')]\"},\"cluster-autoscaler\":{\"value\":\"[parameters('cluster-autoscaler')]\"},\"kube-audit-admin\":{\"value\":\"[parameters('kube-audit-admin')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c66c325-74c8-42fd-a286-a74b0e2939d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"},{\"properties\":{\"displayName\":\"Function - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1651 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts with private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint group id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"automationAccounts-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dd01e4f-1be1-4e80-9d0b-d109e04cb064\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"},{\"properties\":{\"displayName\":\"Email - notification for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\",\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1586 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1530 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"},{\"properties\":{\"displayName\":\"Storage - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1460 - Access Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1320 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"},{\"properties\":{\"displayName\":\"Configure - diagnostic settings for storage accounts to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"category\":\"Storage\",\"version\":\"1.3.0\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the storage account should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"servicesToDeploy\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Storage - services to deploy\",\"description\":\"List of Storage services to deploy\"},\"allowedValues\":[\"storageAccounts\",\"blobServices\",\"fileServices\",\"tableServices\",\"queueServices\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"StorageDelete\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageDelete - - Enabled\",\"description\":\"Whether to stream StorageDelete logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageWrite\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageWrite - - Enabled\",\"description\":\"Whether to stream StorageWrite logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageRead\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageRead - - Enabled\",\"description\":\"Whether to stream StorageRead logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Transaction\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Transaction - - Enabled\",\"description\":\"Whether to stream Transaction logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"servicesToDeploy\":{\"type\":\"array\"},\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Transaction\":{\"type\":\"string\"},\"StorageRead\":{\"type\":\"string\"},\"StorageWrite\":{\"type\":\"string\"},\"StorageDelete\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'blobServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'fileServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'tableServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'queueServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'storageAccounts')]\",\"type\":\"Microsoft.Storage/storageAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"Transaction\":{\"value\":\"[parameters('Transaction')]\"},\"StorageDelete\":{\"value\":\"[parameters('StorageDelete')]\"},\"StorageWrite\":{\"value\":\"[parameters('StorageWrite')]\"},\"StorageRead\":{\"value\":\"[parameters('StorageRead')]\"},\"servicesToDeploy\":{\"value\":\"[parameters('servicesToDeploy')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f8f98a4-f108-47cb-8e98-91a0d85cd474\"},{\"properties\":{\"displayName\":\"Storage - accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"},{\"properties\":{\"displayName\":\"Workbooks - should be saved to storage accounts that you control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Audit, - Deny, or Disable the execution of this policy\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"microsoft.insights/workbooks\"},{\"field\":\"microsoft.insights/workbooks/storageUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fc8115b-2008-441f-8c61-9b722c1e537f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/topics/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"topic\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Server'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"OS - and data disks should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"value\":\"[length(field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"true\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]'))]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"anyOf\":[{\"count\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]\",\"where\":{\"value\":\"[length(current('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"exists\":\"true\"}}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"702dd420-7fcc-42c5-afe8-4026edd20fe0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Components'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Send file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow Telemetry\",\"description\":\"Specifies configuration of the amount - of diagnostic and usage data reported to Microsoft. The data is transmitted - securely and sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow unencrypted traffic\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) service sends and receives unencrypted messages - over the network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always install with elevated privileges\",\"description\":\"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Automatically send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Default consent\",\"description\":\"Specifies setting of the default - consent handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Windows SmartScreen\",\"description\":\"Specifies how to manage - the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow Digest authentication\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow WinRM from storing RunAs credentials\",\"description\":\"Specifies - whether the Windows Remote Management (WinRM) service will not allow RunAs - credentials to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Do not allow passwords to be saved\",\"description\":\"Specifies whether to - prevent Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Security: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set client connection encryption level\",\"description\":\"Specifies whether - to require the use of a specific encryption level to secure communications - between client computers and RD Session Host servers during Remote Desktop - Protocol (RDP) connections. This policy only applies when you are using native - RDP encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Setup: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off Data Execution Prevention for Explorer\",\"description\":\"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Specify the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\":{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\":{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\":{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"},\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"},\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\":{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1509 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1541 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1481 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the DSC configuration is not - compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Network'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"},{\"properties\":{\"displayName\":\"[Preview]: - Windows machines should meet requirements of the Azure Security Center baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureWindowsBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureWindowsBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that allow re-use of the previous - 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"},{\"properties\":{\"displayName\":\"Add - a tag to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Synapse workspace, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"},{\"properties\":{\"displayName\":\"Configure - App Configuration to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for App Configuration so that it isn't accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73290fa2-dfa7-4bbb-945d-a5e23b75df2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1456 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"For all recommendations, leave empty. For specific - recommendations, enter a list of recommendation IDs separated by semicolons - (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Determines recommendation severities. Example: - High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - states\",\"description\":\"Determines recommendation states. Recommendations - with unhealthy state require your attention to resolve. When a recommendation - state is healthy, it no longer applies to the resource as Security Center - detects it as healthy. A recommendation is not-applicable if, for example, - it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"},\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not - Applicable\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Recommendation is - created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(if(equals(length(parameters('recommendationNames')),0),array('Microsoft.Security/assessments'),parameters('recommendationNames')),parameters('recommendationSeverities'),if(contains(parameters('recommendationStates'),'Not - Applicable'),union(parameters('recommendationStates'), array('notapplicable')),parameters('recommendationStates')))]\"},{\"count\":{\"value\":\"[parameters('recommendationSeverities')]\",\"name\":\"recommendationSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.metadata.severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationSeverity')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationSeverities'))]\"},{\"count\":{\"value\":\"[parameters('recommendationStates')]\",\"name\":\"recommendationState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.status.code\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[replace(current('recommendationState'), - ' ','')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationSeverities')))]\"}},\"equals\":\"[length(parameters('recommendationStates'))]\"},{\"count\":{\"value\":\"[parameters('recommendationNames')]\",\"name\":\"recommendationName\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"name\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationName')]\"}]}},\"equals\":\"[mul(length(parameters('recommendationSeverities')),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationNames'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\":\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\":\"[if(equals(variables('recommendationStatesLength'), - 0), 1, variables('recommendationStatesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\",\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\":\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not - Applicable\":\"notapplicable\"},\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When - an Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), - mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'Microsoft.Security/assessments', parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationName')), variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\",\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"},{\"properties\":{\"displayName\":\"API - Management service should use a SKU that supports virtual networks\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for Azure API Management service.\",\"displayName\":\"Allowed - SKUs\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Isolated\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"not\":{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73ef9241-5d81-4cd4-b483-8443d1730fe5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1581 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"},{\"properties\":{\"displayName\":\"Storage - accounts should be limited by allowed SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Restrict - the set of storage account SKUs that your organization can deploy.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for storage accounts.\",\"displayName\":\"Allowed - SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public - IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Diagnostic - setting name\",\"description\":\"Profile name for the Azure diagnostic settings - resource\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The target Log Analytics workspace - for the diagnostic settings\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Logs\",\"description\":\"Enable Logs - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Metrics\",\"description\":\"Enable Metrics - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/publicIPAddresses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('LogsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('MetricsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('name'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"DDoSProtectionNotifications\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationFlowLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationReports\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('name'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"name\":{\"value\":\"[field('name')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752154a7-1e0f-45c6-a880-ac75a7e4f648\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit enabling of diagnostic logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"},{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"},{\"properties\":{\"displayName\":\"Configure - Azure Migrate resources to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Migrate\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"Default\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/assessmentProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/migrateProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.OffAzure/masterSites\"}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"default-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7590a335-57cf-4c95-babd-ecbc8fafeb1f\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1459 - Access Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Vulnerabilities should be remediated by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Azure SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"},{\"properties\":{\"displayName\":\"Audit - delegation of scopes to a managing tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"},{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1508 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"},{\"properties\":{\"displayName\":\"Azure - subscriptions should have a log profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory should use a Git repository for source control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"exists\":\"false\"},{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77d40665-3120-4348-b539-3192ec808307\"},{\"properties\":{\"displayName\":\"Virtual - network firewall rule on Azure SQL Database should be enabled to allow traffic - from the specified subnet\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\",\"description\":\"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your Azure Cache for Redis instances, data leakage risks are reduced. Learn - more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"amlworkspace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7838fd83-5cbb-4b5d-888c-bfa240972597\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1010 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1647 - Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your CosmosDB account - isn't exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1384 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Port Number\",\"description\":\"An integer indicating the COM port to - be used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Baud Rate\",\"description\":\"An integer indicating the baud rate to be - used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"},\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\":{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1093 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1708 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1289 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints connected to App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"configurationStores\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-azconfig-io\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a860e27-9ca2-4fc6-822d-c2d248c300df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1687 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"},{\"properties\":{\"displayName\":\"Allow - managing tenant ids to onboard through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\":{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - tenants\",\"description\":\"List of the tenants IDs that can be onboarded - through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"},{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\",\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1492 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"},{\"properties\":{\"displayName\":\"Azure - Attestation providers should use private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Attestation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Attestation/attestationProviders\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b256a2d-058b-41f8-bed9-3f870541c40a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"},{\"properties\":{\"displayName\":\"Resource - logs in Virtual Machine Scale Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - AKS Clusters\",\"description\":\"Whether to include AKS Clusters to resource - logs extension - True or False\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1051 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1279 - Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should reside within a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"},{\"properties\":{\"displayName\":\"Both - operating systems and data disks in Azure Kubernetes Service clusters should - be encrypted by customer-managed keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encrypting - OS and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d7be79c-23ba-4033-84dd-45e2a5ccdd67\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d890f7f-100c-473d-baa1-2777e2266535\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1471 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1011 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have not restarted within the specified - number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure SQL Database server to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the server should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"logAnalyticsWorkspaceId\":{\"type\":\"string\"}},\"variables\":{\"diagnosticSettingsName\":\"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1\"},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"name\":\"[concat(parameters('serverName'),'/master/microsoft.insights/',variables('diagnosticSettingsName'))]\",\"apiVersion\":\"2017-05-01-preview\",\"properties\":{\"name\":\"[variables('diagnosticSettingsName')]\",\"workspaceId\":\"[parameters('logAnalyticsWorkspaceId')]\",\"logs\":[{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":true,\"retentionPolicy\":{\"days\":0,\"enabled\":false}}]}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[concat('Microsoft.Sql/servers/', - parameters('serverName'),'/databases/master/providers/microsoft.insights/diagnosticSettings/', - variables('diagnosticSettingsName'))]\"],\"properties\":{\"state\":\"Enabled\",\"isAzureMonitorTargetEnabled\":true}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"logAnalyticsWorkspaceId\":{\"value\":\"[parameters('logAnalyticsWorkspaceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ea8a143-05e3-4553-abfe-f56bef8b0b70\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1520 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Privilege Use'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"},{\"properties\":{\"displayName\":\"Audit - diagnostic setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - diagnostic setting for selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - Types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"},{\"properties\":{\"displayName\":\"Azure - Defender for Azure SQL Database servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"},{\"properties\":{\"displayName\":\"SQL - Auditing settings should have Action-Groups configured to capture critical - activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"},{\"properties\":{\"displayName\":\"Deploy - - Configure suppression rules for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0\"},\"parameters\":{\"alertType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - Type\",\"description\":\"Enter the alert type field of the alert you would - like to suppress. Alert type could be queried via alerts api or PowerShell, - learn more at https://aka.ms/asc-alertsPwoershell\"}},\"suppressionRuleName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Rule - name\",\"description\":\"Rule names must begin with a letter or a number, - be between 2 and 50 characters, and contain no symbols other than dashes ( - - ) or underscores ( _ )\"}},\"state\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"State\"},\"allowedValues\":[\"Enabled\",\"Disabled\"]},\"reason\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Reason\"},\"allowedValues\":[\"The - severity of the alert should be lower\",\"The alert detecting too many normal - activities\",\"The alert is too noisy - hitting on the same resources too - many times\",\"The resource isn't relevant for me to monitor\",\"The alert - detecting normal activity on specific entity\",\"The alert isn't actionable - - not clear how to investigate the threat\",\"Other\"]},\"comment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Comment\"}},\"expirationDate\":{\"type\":\"DateTime\",\"metadata\":{\"displayName\":\"Expiration - date\"}},\"entityOneType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entityOneOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entityOneValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}},\"entitySecondType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entitySecondOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entitySecondValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"name\":\"[parameters('suppressionRuleName')]\",\"existenceScope\":\"subscription\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"location\":\"centralus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"alertType\":{\"type\":\"String\"},\"suppressionRuleName\":{\"type\":\"String\"},\"state\":{\"type\":\"String\"},\"reason\":{\"type\":\"String\"},\"comment\":{\"type\":\"String\"},\"expirationDate\":{\"type\":\"String\"},\"entityOneType\":{\"type\":\"String\"},\"entityOneOp\":{\"type\":\"String\"},\"entityOneValue\":{\"type\":\"String\"},\"entitySecondType\":{\"type\":\"String\"},\"entitySecondOp\":{\"type\":\"String\"},\"entitySecondValue\":{\"type\":\"String\"}},\"variables\":{\"reasonToEnum\":{\"The - severity of the alert should be lower\":\"AlertSeverityTooHigh\",\"The alert - detecting too many normal activities\":\"FalsePositive\",\"The alert is too - noisy - hitting on the same resources too many times\":\"Noise\",\"The resource - isn't relevant for me to monitor\":\"NotRelevant\",\"The alert detecting normal - activity on specific entity\":\"SpecificEntityFalsePositive\",\"The alert - isn't actionable - not clear how to investigate the threat\":\"Unclear\",\"Other\":\"Other\"},\"entityNameToType\":{\"User - account - name\":\"entities.account.name\",\"User account - AAD user ID\":\"entities.account.aaduserid\",\"User - account - UPN suffix\":\"entities.account.upnsuffix\",\"Azure resource ID\":\"entities.azureresource.resourceid\",\"File - - name\":\"entities.file.name\",\"File - directory\":\"entities.file.directory\",\"File - hash\":\"entities.filehash.value\",\"Host - name\":\"entities.host.hostname\",\"Host - - Azure ID\":\"entities.host.azureid\",\"Host - DNS Domain\":\"entities.host.dnsdomain\",\"Host - - OMS agent ID\":\"entities.host.omsagentid\",\"IP address\":\"entities.ip.address\",\"Malware - - name\":\"entities.malware.name\",\"Malware - category\":\"entities.malware.category\",\"Process - - command line: \":\"entities.process.commandline\"},\"entityOperationNameToOperation\":{\"Equals\":\"in\",\"Contains\":\"contains\"}},\"resources\":[{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"apiVersion\":\"2019-01-01-preview\",\"name\":\"[parameters('suppressionRuleName')]\",\"location\":\"centralus\",\"properties\":{\"alertType\":\"[parameters('alertType')]\",\"state\":\"[parameters('state')]\",\"reason\":\"[variables('reasonToEnum')[parameters('reason')]]\",\"comment\":\"[parameters('comment')]\",\"expirationDateUtc\":\"[parameters('expirationDate')]\",\"suppressionAlertsScope\":\"[if(and(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue')))), - null(), json(concat('{ \\\"allOf\\\": [', if(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), '', - concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entityOneType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entityOneOp')], - '\\\":', if(equals(parameters('entityOneOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entityOneValue'), '\\\"', if(equals(parameters('entityOneOp'), - 'Equals'), ']', ''), ' }', if(or(empty(parameters('entitySecondType')), empty(parameters('entitySecondOp')), - empty(parameters('entitySecondValue'))), '', ', '))), if(or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue'))), - '', concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entitySecondType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entitySecondOp')], - '\\\":', if(equals(parameters('entitySecondOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entitySecondValue'), '\\\"', if(equals(parameters('entitySecondOp'), - 'Equals'), ']', ''), ' } ')), '] }')))]\"}}]},\"parameters\":{\"alertType\":{\"value\":\"[parameters('alertType')]\"},\"suppressionRuleName\":{\"value\":\"[parameters('suppressionRuleName')]\"},\"state\":{\"value\":\"[parameters('state')]\"},\"reason\":{\"value\":\"[parameters('reason')]\"},\"comment\":{\"value\":\"[parameters('comment')]\"},\"expirationDate\":{\"value\":\"[parameters('expirationDate')]\"},\"entityOneType\":{\"value\":\"[parameters('entityOneType')]\"},\"entityOneOp\":{\"value\":\"[parameters('entityOneOp')]\"},\"entityOneValue\":{\"value\":\"[parameters('entityOneValue')]\"},\"entitySecondType\":{\"value\":\"[parameters('entitySecondType')]\"},\"entitySecondOp\":{\"value\":\"[parameters('entitySecondOp')]\"},\"entitySecondValue\":{\"value\":\"[parameters('entitySecondValue')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80e94a21-c6cd-4c95-a2c7-beb5704e61c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1505 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1614 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'User Rights Assignment'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on locally\",\"description\":\"Specifies which - users or groups can interactively log on to the computer. Users who attempt - to log on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the system time\",\"description\":\"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the time zone\",\"description\":\"Specifies - which users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may create a token object\",\"description\":\"Specifies - which users and groups are permitted to create an access token, which may - provide elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied local logon\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - User and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may shut down the system\",\"description\":\"Specifies - which users and groups who are logged on locally to the computers in your - environment are permitted to shut down the operating system with the Shut - Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1287 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"},{\"properties\":{\"displayName\":\"Azure - Data Explorer encryption at rest should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyName\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81e74cea-30fd-40d5-802f-d72103c2aaaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1448 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1452 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - System' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\":\"Audit - Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Other System Events\",\"description\":\"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1262 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1008 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to a new recovery services - vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally include virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"value\":\"[empty(parameters('inclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('inclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83644c87-93dd-49fe-bf9f-6aff8fd0834e\"},{\"properties\":{\"displayName\":\"Resource - logs in Event Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"},{\"properties\":{\"displayName\":\"Network - interfaces should not have public IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\",\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"},{\"properties\":{\"displayName\":\"Managed - disks should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that a managed disk isn't - exposed on the public internet. Creating private endpoints can limit exposure - of managed disks. Learn more at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"DenyAll\",\"AllowPrivate\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8405fdab-1faf-48aa-b702-999c9c172094\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1382 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"},{\"properties\":{\"displayName\":\"Configure - managed disks to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your managed disk resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disks in this region are validated and disk access resource would be associated - with them.\"}},\"diskAccessId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked\",\"strongType\":\"Microsoft.Compute/diskAccesses\",\"description\":\"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"AllowPrivate\",\"DenyAll\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/diskAccessId\",\"value\":\"[parameters('diskAccessId')]\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"value\":\"AllowPrivate\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8426280e-b5be-43d9-979e-653d12a08638\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1098 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\":\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain - Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) that - the Windows machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Components' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send - file samples when further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\":\"Allow - indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow - unencrypted traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always - install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\":\"Always - prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\":\"Configure - Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\":\"Configure - Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\":\"Disallow - Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\":\"Do - not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\":\"Set - client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\":\"Specify - the interval to check for definition updates;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send - file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - install with elevated privileges\",\"description\":\"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically - send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Default consent\",\"description\":\"Specifies setting of the default consent - handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Windows SmartScreen\",\"description\":\"Specifies how to manage the behavior - of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning - users before running unrecognized programs downloaded from the Internet. Some - information is sent to Microsoft about files and programs run on PCs with - this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - Digest authentication\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - WinRM from storing RunAs credentials\",\"description\":\"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Do - not allow passwords to be saved\",\"description\":\"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - client connection encryption level\",\"description\":\"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off Data Execution Prevention for Explorer\",\"description\":\"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Specify - the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1580 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your IoT Hub device provisioning instance so that - it's not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"859dfc91-ea35-43a6-8256-31271c363794\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory integration runtime should have a limit for number of cores\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - manage your resources and costs, limit the number of cores for an integration - runtime.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"maxCores\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed max number of cores\",\"description\":\"The max number of cores allowed - for dataflow.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"greater\":\"[parameters('maxCores')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85bb39b5-2f66-49f8-9306-77da3ac5130f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1326 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should have firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"},\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Server'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"},{\"properties\":{\"displayName\":\"Deploy - SQL DB transparent data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables - transparent data encryption on SQL databases\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), - '/current')]\",\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"},{\"properties\":{\"displayName\":\"System - updates should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints that connect to Azure Data Factory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"listOfGroupIds\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of Group Ids that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - Group Ids\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"in\":\"[parameters('listOfGroupIds')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"dataFactory-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86cd96e1-1745-420d-94d4-d3f2fe415aa4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should use a customer-managed key to encrypt the device unlock - password\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support customer-managed key - encryption key\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType\",\"notEquals\":\"CustomerManaged\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86efb160-8de7-451d-bc08-5d475b0aadae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"},{\"properties\":{\"displayName\":\"Require - a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - existence of a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Privilege Use' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Devices' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: - Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Control Panel'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"},{\"properties\":{\"displayName\":\"Azure - Stream Analytics jobs should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy\",\"equals\":\"SystemAccount\"},{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87ba29ef-1ab3-4d82-b763-87fcd4f531f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1317 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1501 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"},{\"properties\":{\"displayName\":\"Network - interfaces should disable IP forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure's check of the source and destination for - a network interface. This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1215 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"},{\"properties\":{\"displayName\":\"SQL - servers with auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Sql/servers/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1411 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid domains to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898e9824-104c-4965-8e0e-5197588fa5d4\"},{\"properties\":{\"displayName\":\"App - Configuration should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you'll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/sku.name\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89c8a434-18f0-402c-8147-630a8dea54e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System settings'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should deploy into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"field\":\"Microsoft.ContainerInstance/containerGroups/networkProfile.id\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8af8f826-edcb-4178-b35f-851ea6fea615\"},{\"properties\":{\"displayName\":\"Azure - Data Factory should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Data Factory, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1534 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1170 - Penetration Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Firewall Properties'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1683 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - a required tag and its value on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1324 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1288 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1250 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Arc enabled Kubernetes clusters should have Azure Defender's extension - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender's extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Object Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File Share\",\"description\":\"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"},\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"},\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\":{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\",\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to enable private endpoint connections\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - to use for Private Endpoints\",\"description\":\"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].id\",\"exists\":\"false\"}},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/privateEndpointConnections\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"subnetlocation\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"name\":\"[variables('privateEndpointName')]\",\"location\":\"[parameters('subnetlocation')]\",\"properties\":{\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"sqlServer\"],\"privateLinkServiceConnectionState\":{\"status\":\"Approved\",\"description\":\"Auto-approved\",\"actionsRequired\":\"None\"}}}],\"manualPrivateLinkServiceConnections\":[],\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"customDnsConfigs\":[]}}]},\"parameters\":{\"name\":{\"value\":\"[parameters('name')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"subnetlocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e8ca470-d980-4831-99e6-dc70d9f6af87\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1517 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1668 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1147 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not store passwords using - reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1550 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Firewall - Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Firewall Properties'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Domain: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Private: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Public: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Modules\",\"description\":\"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"},\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1355 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91678b7c-d721-4fc5-b179-3cdf74e96b1c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Components'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"},{\"properties\":{\"displayName\":\"Resource - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91a78b24-f231-4a8a-8da9-02c35b2b6510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"},{\"properties\":{\"displayName\":\"Configure - Dependency agent to be enabled on Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"resources\":[{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"apiVersion\":\"2020-03-11-preview\",\"name\":\"[concat(parameters('vmName'), - '/', variables('DaExtensionName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"},{\"properties\":{\"displayName\":\"MFA - should be enabled accounts with write permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1290 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that contain certificates expiring within - the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not contain the specified certificates in Trusted - Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\\\LocalMachine\\\\Root) does not contain one - or more of the certificates listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints\",\"description\":\"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain all the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to include\",\"description\":\"A semicolon-separated list of members - that should be included in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"},\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1379 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1371 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Management' for auditing application, security, and - user group management, and other management events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"},{\"properties\":{\"displayName\":\"Virtual - networks should be protected by Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Audit\",\"Disabled\"]},\"ddosPlan\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DDoS - Protection Plan\",\"description\":\"DDoS Protection Plan resource to be associated - to the virtual networks\",\"strongType\":\"Microsoft.Network/ddosProtectionPlans\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"notEquals\":true},{\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"value\":true},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id\",\"value\":\"[parameters('ddosPlan')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Key Vault should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AuditEventEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AuditEvent - - Enabled\",\"description\":\"Whether to stream AuditEvent logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AllMetricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AuditEventEnabled\":{\"type\":\"string\"},\"AllMetricsEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetricsEnabled')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('AuditEventEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"AuditEventEnabled\":{\"value\":\"[parameters('AllMetricsEnabled')]\"},\"AllMetricsEnabled\":{\"value\":\"[parameters('AuditEventEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"951af2fa-529b-416e-ab6e-066fd85ac459\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1526 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"},{\"properties\":{\"displayName\":\"Automation - accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1163 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"},{\"properties\":{\"displayName\":\"Require - a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - existence of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"},{\"properties\":{\"displayName\":\"App - Configuration should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - System' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always - use classic logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\":\"Enable - Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\":\"Turn on - convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - use classic logon\",\"description\":\"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start - Driver Initialization Policy\",\"description\":\"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1453 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"},{\"properties\":{\"displayName\":\"Add - a tag to subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96d9a89c-0d67-41fc-899d-2b9599f76a24\"},{\"properties\":{\"displayName\":\"HPC - Cache accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageCache/caches\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"970f84d8-71b6-4091-9979-ace7e3fb6dbb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - MSS (Legacy)'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Policy Change'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authentication Policy Change\",\"description\":\"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authorization Policy Change\",\"description\":\"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\":{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\":{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"},\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1136 - Audit Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1378 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid domain instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\",\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Network'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable insecure guest logons\",\"description\":\"Specifies whether the SMB - client will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\":{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1076 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines without a given tag to a new recovery - services vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally exclude virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Name\",\"description\":\"Name of the tag to use for excluding - VMs from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Values\",\"description\":\"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1102 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"},{\"properties\":{\"displayName\":\"Azure - Batch account should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Batch account's - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"},{\"properties\":{\"displayName\":\"Virtual - network injection should be enabled for Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1049 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1563 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1462 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"},{\"properties\":{\"displayName\":\"Microsoft - IaaSAntimalware extension should be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/provisioningServices\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"greaterOrEquals\":1},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotDps\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b75ea5b-c796-4c99-aaaf-21c204daac43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1236 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1525 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1138 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1135 - Non-Repudiation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9cee519f-d9c1-4fd9-9f79-24ec3449ed30\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1489 - Location Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1322 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1233 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1259 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"},{\"properties\":{\"displayName\":\"All - network ports should be restricted on network security groups associated to - your virtual machine\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified some of your network security groups' inbound - rules to be too permissive. Inbound rules should not allow access from 'Any' - or 'Internet' ranges. This can potentially enable attackers to target your - resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"},{\"properties\":{\"displayName\":\"Application - definition for Managed Application should use customer provided storage account\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed - Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\":\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1500 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1504 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1494 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1187 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not set to the specified time - zone\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"},{\"properties\":{\"displayName\":\"Configure - Storage account to use a private link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"The subnetId that private endpoint - connections should link to\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access\"},\"allowedValues\":[\"blob\",\"blob_secondary\",\"table\",\"table_secondary\",\"queue\",\"queue_secondary\",\"file\",\"web\",\"web_secondary\",\"dfs\",\"dfs_secondary\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"in\":[\"StorageV2\",\"BlobStorage\",\"BlockBlobStorage\",\"FileStorage\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":\"[array(parameters('targetSubResource'))]\",\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f766f00-8d11-464e-80e1-4091d7874074\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1354 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the Log Analytics agent is not - connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search service should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or Deny the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"equals\":\"free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a049bf77-880b-470f-ba6d-9f21c530cf83\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1145 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"},{\"properties\":{\"displayName\":\"Allowed - resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support 'tags' and 'location' will be affected - by this policy. To restrict all resources please duplicate this policy and - change the 'mode' to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that can be deployed.\",\"displayName\":\"Allowed resource - types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1245 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"},{\"properties\":{\"displayName\":\"Security - Center standard pricing tier should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"field\":\"Microsoft.EventHub/namespaces/clusterArmId\",\"exists\":\"true\"},{\"not\":{\"field\":\"Microsoft.EventHub/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Logic Apps in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1612 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1059 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2a5b911-5617-447e-a49e-59dbe0e0434b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1532 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not restrict the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1238 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"},{\"properties\":{\"displayName\":\"Configure - Container registries to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Container Registry resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3701552-92ea-433e-9d17-33b7f1208fc9\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine scale sets for - Azure Security Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux Azure Monitor agent to enable Azure Monitor assignments - on Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorLinuxAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorLinuxAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorLinuxAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4034bc6-ae50-406d-bf76-50f4ee5a7811\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"},{\"properties\":{\"displayName\":\"Audit - usage of custom RBAC rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - built-in roles such as 'Owner, Contributer, Reader' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"},{\"properties\":{\"displayName\":\"Web - Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine for Azure Security - Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1617 - Application Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to CosmosDB account. - Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Dns Zone Id\",\"description\":\"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Group Id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"cosmosDB-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a63cc0bd-cda4-4178-b705-37dc439d3e0f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to an Event Hub to be enabled on Azure Key - Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Azure Key Vault Managed HSMs in this location will be linked to this Event - Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"hsmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('hsmName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('hsmName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"hsmName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6d2c800-5230-4a40-bff3-8268b4987d42\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using HTTPS secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires HTTPS user and key secrets stored in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"httpsUserKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - user name Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name.\"}},\"httpsKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - key Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"httpsUser\":{\"type\":\"securestring\"},\"httpsKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"httpsUser\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsUserKeyVaultSecretName')]\"}},\"httpsKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6f560f4-f582-4b67-b123-a37dcd1bf7ea\"},{\"properties\":{\"displayName\":\"Auditing - on SQL server should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1431 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1027 - Access Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"},{\"properties\":{\"displayName\":\"Azure - DDoS Protection Standard should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1570 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"},{\"properties\":{\"displayName\":\"Require - encryption on Data Lake Store accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures encryption is enabled on all Data Lake Store accounts\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Lake\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"SQL - Managed Instance should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"},{\"properties\":{\"displayName\":\"Deploy - Azure Policy Add-on to Azure Kubernetes Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\":\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\":{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', - parameters('clusterName'))]\",\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', - parameters('clusterName'))]\"},\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\":{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'), - 'Microsoft.ContainerService/managedClusters', parameters('clusterName')), - '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\":\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\",\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'), - 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\":\"[if(contains(parameters('aksClusterContent'), - 'identity'), parameters('aksClusterContent').identity, json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\",\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\",\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties, - 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles, - json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile, - json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile, - json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile, - json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\",\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties, - 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\",\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties, - 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy, - json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'networkProfile'), parameters('aksClusterContent').properties.networkProfile, - json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\",\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile, - json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile, - json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties, - 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID, - json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'identityProfile'), parameters('aksClusterContent').properties.identityProfile, - json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\":\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"}}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1400 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"},{\"properties\":{\"displayName\":\"SQL - Managed Instances should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Detailed Tracking'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"},{\"properties\":{\"displayName\":\"Deploy - network watcher when virtual networks are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\":\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\",\"name\":\"[concat('networkWatcher_', - parameters('location'))]\",\"location\":\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1511 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning instances to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotDps\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices-provisioning.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1539 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1006 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1461 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1073 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that 'PHP version' is the latest, if used as a part of the Function - app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP - cannot be used with Function apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Latest PHP version\",\"description\":\"Latest supported PHP version for App - Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Automatic provisioning of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1323 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - SQL servers without Advanced Data Security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance without advanced data security.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"},{\"properties\":{\"displayName\":\"Enable - Azure Security Center on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\\r\\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\\r\\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\\r\\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\\r\\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\":{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"},{\"properties\":{\"displayName\":\"Configure - disaster recovery on virtual machines by enabling replication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Compute\"},\"parameters\":{\"sourceRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Source - Region\",\"description\":\"Region in which the virtual machine is originally - deployed\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Region\",\"description\":\"Region to be used to deploy the virtual machine - in case of a natural disaster\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Resource Group\",\"description\":\"Resource group to be used to create the - virtual machine in the target region\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Vault - Resource Group\",\"description\":\"The resource group containing the recovery - services vault used for disaster recovery configurations\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Services Vault\",\"description\":\"ID of the recovery services vault to be - used for disaster recovery configurations\",\"strongType\":\"Microsoft.RecoveryServices/vaults\",\"serviceName\":\"ASR\"}},\"recoveryNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Virtual Network\",\"description\":\"Existing Recovery Virtual Network ID or - name of the Virtual Network to be created in Target Region\",\"strongType\":\"Microsoft.Network/virtualNetworks\",\"serviceName\":\"ASR\"}},\"targetZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Availability Zone\",\"description\":\"Availability zone in the designated - target region to be used by virtual machines during disaster\",\"strongType\":\"zone\",\"serviceName\":\"ASR\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('sourceRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings\",\"exists\":\"false\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"location\",\"equals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones[*]\",\"notEquals\":\"[parameters('targetZone')]\"}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"value\":\"[length(parameters('targetZone'))]\",\"greater\":0}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"name\",\"like\":\"ASR-Protect-*\"},{\"field\":\"Microsoft.Resources/links/targetId\",\"contains\":\"/replicationProtectedItems/\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"apiVersion\":{\"type\":\"String\"},\"avSetId\":{\"type\":\"String\"},\"dataDiskIds\":{\"type\":\"object\"},\"osDiskId\":{\"type\":\"String\"},\"ppgId\":{\"type\":\"String\"},\"recoveryNetworkId\":{\"type\":\"String\"},\"recoverySubscriptionId\":{\"type\":\"String\"},\"sourceRegion\":{\"type\":\"String\"},\"sourceResourceGroupName\":{\"type\":\"String\"},\"targetRegion\":{\"type\":\"String\"},\"targetResourceGroupName\":{\"type\":\"String\"},\"targetZone\":{\"type\":\"String\"},\"vaultName\":{\"type\":\"String\"},\"vaultResourceGroupName\":{\"type\":\"String\"},\"vmId\":{\"type\":\"String\"},\"vmZones\":{\"type\":\"Object\"}},\"variables\":{\"avSetApiVersion\":\"2019-03-01\",\"deploymentApiVersion\":\"2017-05-10\",\"vmApiVersion\":\"2019-07-01\",\"ppgApiVersion\":\"2019-12-01\",\"portalLinkPrefix\":\"https://portal.azure.com/aaa@foo.com\",\"schemaLink\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"defaultAvSet\":\"defaultAvSet-asr\",\"defaultPPG\":\"defaultPPG-asr\",\"eligibilityResultsDefault\":\"default\",\"protectedItemSuffix\":\"-policy\",\"recoveryAvSetPrefix\":\"RecoveryAvSet-\",\"recoveryPPGPrefix\":\"RecoveryPPG-\",\"avSetType\":\"Microsoft.Compute/availabilitySets\",\"deploymentType\":\"Microsoft.Resources/deployments\",\"networkType\":\"Microsoft.Network/virtualNetworks\",\"ppgType\":\"Microsoft.Compute/proximityPlacementGroups\",\"replicationEligibilityResultsType\":\"Microsoft.RecoveryServices/replicationEligibilityResults\",\"storageType\":\"Microsoft.Storage/storageAccounts\",\"vaultType\":\"Microsoft.RecoveryServices/vaults\",\"avSetTemplateName\":\"[concat(variables('recoveryAvSetPrefix'), - last(split(parameters('vmId'), '/')))]\",\"avSetTemplateName64\":\"[if(greater(length(variables('avSetTemplateName')), - 64), substring(variables('avSetTemplateName'), 0, 64), variables('avSetTemplateName'))]\",\"ppgTemplateName\":\"[concat(variables('recoveryPPGPrefix'), - last(split(parameters('vmId'), '/')))]\",\"ppgTemplateName64\":\"[if(greater(length(variables('ppgTemplateName')), - 64), substring(variables('ppgTemplateName'), 0, 64), variables('ppgTemplateName'))]\",\"replicationProtectedIntentTemplateName\":\"[concat('ASR-', - parameters('sourceResourceGroupName'), '-', last(split(parameters('vmId'), - '/')))]\",\"replicationProtectedIntentTemplateName64\":\"[if(greater(length(variables('replicationProtectedIntentTemplateName')), - 64), substring(variables('replicationProtectedIntentTemplateName'), 0, 64), - variables('replicationProtectedIntentTemplateName'))]\",\"vmDataDiskIds\":\"[array(parameters('dataDiskIds').rawValue)]\",\"vmDiskCount\":\"[add(length(variables('vmDataDiskIds')), - int(1))]\",\"diskIds\":\"[concat(array(parameters('osDiskId')), array(parameters('dataDiskIds').rawValue))]\",\"vaultId\":\"[resourceId(parameters('vaultResourceGroupName'), - variables('vaultType'), parameters('vaultName'))]\",\"eligibilityResultsId\":\"[extensionResourceId(parameters('vmId'), - variables('replicationEligibilityResultsType'), variables('eligibilityResultsDefault'))]\",\"protectedIntentName\":\"[concat(parameters('vaultName'), - '/', guid(resourceGroup().id, last(split(parameters('vmId'), '/'))), variables('protectedItemSuffix'))]\",\"recoveryAvSetName\":\"[if(empty(parameters('avSetId')), - variables('defaultAvSet'), concat(last(split(parameters('avSetId'), '/')), - '-asr'))]\",\"recoveryAvSetId\":\"[if(empty(parameters('avSetId')), '', resourceId(parameters('targetResourceGroupName'), - variables('avSetType'), variables('recoveryAvSetName')))]\",\"recoveryAvType\":\"[if(not(empty(parameters('avSetId'))), - 'AvailabilitySet', if(greater(length(parameters('vmZones').rawValue), 0), - 'AvailabilityZone', 'Single'))]\",\"recoveryAvZone\":\"[if(greater(length(parameters('vmZones').rawValue), - 0), parameters('targetZone'), '')]\",\"recoveryPPGName\":\"[if(empty(parameters('ppgId')), - variables('defaultPPG'), concat(last(split(parameters('ppgId'), '/')), '-asr'))]\",\"recoveryPPGId\":\"[if(empty(parameters('ppgId')), - '', resourceId(parameters('targetResourceGroupName'), variables('ppgType'), - variables('recoveryPPGName')))]\",\"targetResourceGroupId\":\"[concat('/subscriptions/', - parameters('recoverySubscriptionId'), '/resourceGroups/', parameters('targetResourceGroupName'))]\"},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('ppgTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"type\":\"[variables('ppgType')]\",\"name\":\"[variables('recoveryPPGName')]\",\"apiVersion\":\"[variables('ppgApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"properties\":{\"proximityPlacementGroupType\":\"[if(empty(parameters('ppgId')), - 'Standard', reference(parameters('ppgId'), variables('ppgApiVersion')).proximityPlacementGroupType)]\"}}]},\"parameters\":{}}},{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('avSetTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"type\":\"[variables('avSetType')]\",\"sku\":{\"name\":\"[if(empty(parameters('avSetId')), - 'Aligned', reference(parameters('avSetId'), variables('avSetApiVersion'), - 'Full').sku.name)]\"},\"name\":\"[variables('recoveryAvSetName')]\",\"apiVersion\":\"[variables('avSetApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"tags\":{},\"properties\":{\"platformUpdateDomainCount\":\"[if(empty(parameters('avSetId')), - '5', reference(parameters('avSetId'), variables('avSetApiVersion')).platformUpdateDomainCount)]\",\"platformFaultDomainCount\":\"[if(empty(parameters('avSetId')), - '2', reference(parameters('avSetId'), variables('avSetApiVersion')).platformFaultDomainCount)]\",\"proximityPlacementGroup\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"id\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\"}}]},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\"]},{\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('replicationProtectedIntentTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('vaultResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/replicationProtectionIntents\",\"name\":\"[variables('protectedIntentName')]\",\"apiVersion\":\"[parameters('apiVersion')]\",\"properties\":{\"providerSpecificDetails\":{\"instanceType\":\"A2A\",\"fabricObjectId\":\"[parameters('vmId')]\",\"primaryLocation\":\"[parameters('sourceRegion')]\",\"recoveryLocation\":\"[parameters('targetRegion')]\",\"recoverySubscriptionId\":\"[parameters('recoverySubscriptionId')]\",\"recoveryAvailabilityType\":\"[variables('recoveryAvType')]\",\"recoveryAvailabilityZone\":\"[variables('recoveryAvZone')]\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\",\"recoveryAvailabilitySetCustomInput\":\"[if(empty(parameters('avSetId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryAvailabilitySetId\\\"', ':', '\\\"', variables('recoveryAvSetId'), - '\\\"', '}')))]\",\"recoveryProximityPlacementGroupCustomInput\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryProximityPlacementGroupId\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\",\"recoveryVirtualNetworkCustomInput\":\"[if(contains(parameters('recoveryNetworkId'), - '/'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryVirtualNetworkId\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"New\\\",', - '\\\"recoveryVirtualNetworkName\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')))]\",\"vmDisks\":[],\"copy\":[{\"name\":\"vmManagedDisks\",\"count\":\"[variables('vmDiskCount')]\",\"input\":{\"diskId\":\"[if(equals(copyIndex('vmManagedDisks'), - int(0)), reference(parameters('vmId'), variables('vmApiVersion')).storageProfile.osDisk.managedDisk.Id, - variables('vmDataDiskIds')[sub(copyIndex('vmManagedDisks'), int(1))])]\",\"recoveryResourceGroupCustomInput\":{\"resourceType\":\"Existing\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\"}}}]}}}],\"outputs\":{\"vmName\":{\"value\":\"[last(split(parameters('vmId'), - '/'))]\",\"type\":\"string\"},\"availabilitySetUrl\":{\"value\":\"[if(empty(parameters('avSetId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryAvSetId')))]\",\"type\":\"string\"},\"proximityPlacementGroupUrl\":{\"value\":\"[if(empty(parameters('ppgId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryPPGId')))]\",\"type\":\"string\"},\"replicationEligibilityResults\":{\"value\":\"[reference(variables('eligibilityResultsId'), - parameters('apiVersion'))]\",\"type\":\"Object\"}}},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\",\"[variables('avSetTemplateName64')]\"]}],\"outputs\":{}},\"parameters\":{\"apiVersion\":{\"value\":\"2018-07-10\"},\"avSetId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/availabilitySet.id')]\"},\"dataDiskIds\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id')]\",\"emptyArray\":[]}},\"osDiskId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id')]\"},\"ppgId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/proximityPlacementGroup.id')]\"},\"recoveryNetworkId\":{\"value\":\"[parameters('recoveryNetworkId')]\"},\"recoverySubscriptionId\":{\"value\":\"[subscription().subscriptionId]\"},\"sourceRegion\":{\"value\":\"[parameters('sourceRegion')]\"},\"sourceResourceGroupName\":{\"value\":\"[resourcegroup().Name]\"},\"targetRegion\":{\"value\":\"[parameters('targetRegion')]\"},\"targetResourceGroupName\":{\"value\":\"[last(split(parameters('targetResourceGroupId'), - '/'))]\"},\"targetZone\":{\"value\":\"[parameters('targetZone')]\"},\"vaultName\":{\"value\":\"[last(split(parameters('vaultId'), - '/'))]\"},\"vaultResourceGroupName\":{\"value\":\"[last(split(parameters('vaultResourceGroupId'), - '/'))]\"},\"vmId\":{\"value\":\"[field('id')]\"},\"vmZones\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/zones')]\",\"emptyArray\":[]}}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac34a73f-9fa5-4067-9247-a3ecae514468\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"},{\"properties\":{\"displayName\":\"Role-Based - Access Control (RBAC) should be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"},{\"properties\":{\"displayName\":\"Configure - Synapse workspaces to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"Integer\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a Synapse workspace is created that will be - shared by all Synapse workspaces in that region). Important - for proper operation - of Auditing do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"workspaceName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"int\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[parameters('auditRetentionDays')]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('workspaceaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('workspaceAuditingStorageAccount-', - uniqueString(variables('locationCode'), deployment().name))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure Synapse workspaces to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('workspaceName'), - '/Default')]\",\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"workspaceName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation if the 'environment' tag is set to one of the following - values: production, dev, test, staging\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\",\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1569 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1454 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1272 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"},{\"properties\":{\"displayName\":\"SQL - Server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1598 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"},{\"properties\":{\"displayName\":\"Guest - Configuration extension should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as 'Windows Exploit guard should be enabled'. Learn more - at https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\",\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae89ebca-1c92-4898-ac2c-9f63decb045c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL Managed Instance advanced - data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1413 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1710 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"},{\"properties\":{\"displayName\":\"Azure - Spring Cloud should use network injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Spring Cloud instances should use virtual network injection for the following - purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring - Cloud to interact with systems in either on premises data centers or Azure - service in other virtual networks. 3. Empower customers to control inbound - and outbound network communications for Azure Spring Cloud.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Platform\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure - Spring Cloud SKU Names\",\"description\":\"List of Azure Spring Cloud SKUs - against which this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"},{\"properties\":{\"displayName\":\"Monitor - missing Endpoint Protection in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"SQL - servers which don't have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: 'Auditing should be enabled on advanced data security - settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1725 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"},{\"properties\":{\"displayName\":\"Activity - log should be retained for at least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1429 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1711 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"count\":{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet\",\"exists\":false}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0ab5b05-1c98-40f7-bb9e-dc568e41b501\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints connect to Azure SignalR - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"description\":\"Private DNS zone to integrate with private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"signalr\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-service-signalr-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0e86710-7fb7-4a6c-a064-32e9b829509e\"},{\"properties\":{\"displayName\":\"Management - ports of virtual machines should be protected with just-in-time network access - control\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1571 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"},{\"properties\":{\"displayName\":\"SQL - Database should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1091 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1009 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1234 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1107 - Content Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows web servers that are not using secure - communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum TLS version\",\"description\":\"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\":\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\":{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is deployed for the indicated Storage Sync Service resource. - This enables you to address your Storage Sync Service resource from within - the private IP address space of your organization's network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet with private endpoint network policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"afs\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b35dddd9-daf7-423b-8375-5a5b86806d5a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Logon-Logoff'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to a Log Analytics workspace to be enabled - on Azure Key Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - to send log to. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3884c81-31aa-473d-a9bb-9466fe0ec2a0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1380 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"},{\"properties\":{\"displayName\":\"Resource - logs in Search services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1172 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1131 - Protection Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Shutdown' for allowing shutdown without logon and clearing the virtual - memory pagefile. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Clear virtual memory pagefile\",\"description\":\"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"},{\"properties\":{\"displayName\":\"Azure - Stack Edge devices should use double-encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - secure the data at rest on the device, ensure it's double-encrypted, the access - to data is controlled, and once the device is deactivated, the data is securely - erased off the data disks. Double encryption is the use of two layers of encryption: - BitLocker XTS-AES 256-bit encryption on the data volumes and built-in encryption - of the hard drives. Learn more in the security overview documentation for - the specific Stack Edge device.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Stack Edge\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBoxEdge/DataBoxEdgeDevices\"},{\"field\":\"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name\",\"notIn\":[\"TEA_1Node\",\"TEA_1Node_UPS\",\"TEA_1Node_Heater\",\"TEA_1Node_UPS_Heater\",\"TEA_4Node_Heater\",\"TEA_4Node_UPS_Heater\",\"TMA\",\"EdgePR_Base\",\"EdgePR_Base_UPS\",\"EdgeMR_Mini\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4ac1030-89c5-4697-8e00-28b5ba6a8811\"},{\"properties\":{\"displayName\":\"[Deprecated]: - A security contact phone number should be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should only use Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection for Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection across Cosmos DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('cosmosDbAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"},{\"properties\":{\"displayName\":\"Diagnostic - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts with private endpoints \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A - group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"privateEndpointGroupId\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"String\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"[parameters('privateEndpointGroupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b609e813-3156-4079-91fa-a8494c1471c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"notEquals\":\"free\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Search/searchServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"searchService\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b698b005-b660-4837-b833-a7aaab26ddba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1568 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"},{\"properties\":{\"displayName\":\"Network - Watcher should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"listOfLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\":\"Audit - if Network Watcher is not enabled for region(s).\",\"strongType\":\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NetworkWatcher - resource group name\",\"description\":\"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1608 - Supply Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1401 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for SQL Databases to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select the Log Analytics workspace - from dropdown list\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreRuntimeStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreRuntimeStatistics - logs to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreWaitStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"ErrorsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Errors - - Enabled\",\"description\":\"Whether to stream Errors logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DatabaseWaitStatistics - - Enabled\",\"description\":\"Whether to stream DatabaseWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"BlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Blocks - - Enabled\",\"description\":\"Whether to stream Blocks logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLInsightsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLInsights - - Enabled\",\"description\":\"Whether to stream SQLInsights logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLSecurityAuditEvents - - Enabled\",\"description\":\"Whether to stream SQLSecurityAuditEvents logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"TimeoutsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Timeouts - - Enabled\",\"description\":\"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AutomaticTuningEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AutomaticTuning - - Enabled\",\"description\":\"Whether to stream AutomaticTuning logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DeadlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Deadlocks - - Enabled\",\"description\":\"Whether to stream Deadlocks logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Basic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Basic - (metric) - Enabled\",\"description\":\"Whether to stream Basic metrics to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"InstanceAndAppAdvanced\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"InstanceAndAppAdvanced - (metric) - Enabled\",\"description\":\"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"WorkloadManagement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"WorkloadManagement - (metric) - Enabled\",\"description\":\"Whether to stream WorkloadManagement - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"matchInsensitively\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Basic\":{\"type\":\"string\"},\"InstanceAndAppAdvanced\":{\"type\":\"string\"},\"WorkloadManagement\":{\"type\":\"string\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"string\"},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"string\"},\"ErrorsEnabled\":{\"type\":\"string\"},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"string\"},\"BlocksEnabled\":{\"type\":\"string\"},\"SQLInsightsEnabled\":{\"type\":\"string\"},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"string\"},\"TimeoutsEnabled\":{\"type\":\"string\"},\"AutomaticTuningEnabled\":{\"type\":\"string\"},\"DeadlocksEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Basic\",\"enabled\":\"[parameters('Basic')]\"},{\"category\":\"InstanceAndAppAdvanced\",\"enabled\":\"[parameters('InstanceAndAppAdvanced')]\"},{\"category\":\"WorkloadManagement\",\"enabled\":\"[parameters('WorkloadManagement')]\"}],\"logs\":[{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('SQLInsightsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('AutomaticTuningEnabled')]\"},{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('ErrorsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('TimeoutsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('BlocksEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('DeadlocksEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"Basic\":{\"value\":\"[parameters('Basic')]\"},\"InstanceAndAppAdvanced\":{\"value\":\"[parameters('InstanceAndAppAdvanced')]\"},\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"WorkloadManagement\":{\"value\":\"[parameters('WorkloadManagement')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('fullName')]\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},\"QueryStoreWaitStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},\"ErrorsEnabled\":{\"value\":\"[parameters('ErrorsEnabled')]\"},\"DatabaseWaitStatisticsEnabled\":{\"value\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},\"BlocksEnabled\":{\"value\":\"[parameters('BlocksEnabled')]\"},\"SQLInsightsEnabled\":{\"value\":\"[parameters('SQLInsightsEnabled')]\"},\"SQLSecurityAuditEventsEnabled\":{\"value\":\"[parameters('SQLSecurityAuditEventsEnabled')]\"},\"TimeoutsEnabled\":{\"value\":\"[parameters('TimeoutsEnabled')]\"},\"AutomaticTuningEnabled\":{\"value\":\"[parameters('AutomaticTuningEnabled')]\"},\"DeadlocksEnabled\":{\"value\":\"[parameters('DeadlocksEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b79fa14e-238a-4c2d-b376-442ce508fc84\"},{\"properties\":{\"displayName\":\"API - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members\",\"description\":\"A semicolon-separated list of all the expected - members of the Administrators local group. Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\":{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Event Hub namespaces, data - leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Accounts'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Administrative operations with no activity log alerts - configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Administrative Operation name for which activity - log alert should be configured\"},\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\",\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\",\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1257 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1186 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1447 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1625 - Boundary Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Recovery console'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\",\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"topic\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"topic-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baf19753-7502-405f-8745-370519b20483\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1726 - Information Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1166 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1188 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"},{\"properties\":{\"displayName\":\"Non-internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1533 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Client'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1095 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1050 - Concurrent Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"},{\"properties\":{\"displayName\":\"IP - Forwarding on your virtual machine should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling - IP forwarding on a virtual machine's NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"},{\"properties\":{\"displayName\":\"Container - registries should have SKUs that support Private Links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"notEquals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL Managed Instance - advanced data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It's - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for DNS should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for DNS provides an additional layer of protection for your cloud - resources by continuously monitoring all DNS queries from your Azure resources. - Azure Defender alerts you about suspicious activity at the DNS layer. Learn - more about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Dns\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bdc59948-5574-49b3-bb91-76b7c986428d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group contains any - of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1360 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be enabled for Azure Front Door Service or - Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have not restarted within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\",\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number - of days\",\"description\":\"The number of days without restart until the machine - is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"},{\"properties\":{\"displayName\":\"Windows - Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.1.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\",\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status - if Windows Defender is not available on machine\",\"description\":\"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to 'Non-Compliant' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' - shows these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1152 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"},{\"properties\":{\"displayName\":\"Geo-redundant - storage should be enabled for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - geo-redundancy to create highly available applications\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub's - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotHub\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf684997-3909-404e-929c-d4a38ed23b2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Logon-Logoff'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Group Membership\",\"description\":\"Specifies whether audit events - are generated when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"},\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using SSH secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires a SSH private key secret in Key Vault. - For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"sshKnownHostsContents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Base64-encoded - known hosts content\",\"description\":\"The base64-encoded known hosts content.\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"sshPrivateKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SSH - private key Key Vault secret\",\"description\":\"The name of the Key Vault - secret that holds the base64-encoded SSH private key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents\",\"equals\":\"[parameters('sshKnownHostsContents')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"sshKnownHostsContents\":{\"type\":\"string\"},\"sshPrivateKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":{\"value\":\"[parameters('sshKnownHostsContents')]\"},\"sshPrivateKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('sshPrivateKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c050047b-b21b-4822-8a2d-c1e37c3c0c6a\"},{\"properties\":{\"displayName\":\"Configure - private endpoint connections on Azure Automation accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only - approved VM extensions should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy governs the virtual machine extensions that are not approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"approvedExtensions\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of approved extension types that can be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved - extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1676 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1719 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"},{\"properties\":{\"displayName\":\"Deploy - associations for a custom provider\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom - Provider\"},\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Custom - provider ID\",\"description\":\"Resource ID of the Custom provider to which - resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the custom provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetCustomProviderId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\":{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1004 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Logon'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Credential Validation\",\"description\":\"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"},\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1503 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not set to the specified - time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Time zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"},{\"properties\":{\"displayName\":\"Flow - logs should be configured for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"},{\"properties\":{\"displayName\":\"Azure - Defender for container registries should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the specified services are not - installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and 'Running'. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1176 - Baseline Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should enable double encryption for data at rest on the device\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support software-based double - encryption\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c349d81b-9985-44ae-a8da-ff98d108ede8\"},{\"properties\":{\"displayName\":\"Azure - Key Vault Managed HSM should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHsms/enableSoftDelete\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.KeyVault/managedHsms/enablePurgeProtection\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39ba22d-4428-4149-b981-70acb31fc383\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1389 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for Resource Manager should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Arm\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3d20c29-b36d-48fe-808b-99a87530ad99\"},{\"properties\":{\"displayName\":\"System - updates on virtual machine scale sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"},{\"properties\":{\"displayName\":\"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"},{\"properties\":{\"displayName\":\"[Preview]: - Container Registry should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1235 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1173 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Policy operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Policy Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that contain certificates expiring - within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate store path\",\"description\":\"The path to the certificate store - containing the certificates to check the expiration dates of. Default value - is 'Cert:' which is the root certificate store path, so all certificates on - the machine will be checked. Other example paths: 'Cert:\\\\LocalMachine', - 'Cert:\\\\LocalMachine\\\\TrustedPublisher', 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Expiration limit in days\",\"description\":\"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to include\",\"description\":\"A semicolon-separated - list of certificate thumbprints to check under the specified path. If a value - is not specified, all certificates under the certificate store path will be - checked. If a value is specified, no certificates other than those with the - thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to exclude\",\"description\":\"A semicolon-separated - list of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Include expired certificates\",\"description\":\"Must be 'true' or 'false'. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"},\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"},\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"},\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\":{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"},\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1670 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not set to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\",\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell execution - policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\":{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Execution Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1190 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter.\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Value\",\"description\":\"Value of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Name parameter.\"}}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"not\":{\"field\":\"[concat('tags[',parameters('tagName'), - ']')]\",\"equals\":\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\",\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\",\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\",\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\":\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/', - parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1619 - Information In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1353 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL server advanced data - security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - API App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1470 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Interactive Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"},{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"},{\"properties\":{\"displayName\":\"Resource - logs in Data Lake Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'User Rights Assignment'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotHub\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Network Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name '{storagePrefixParameter}{NSGLocation}' will be - automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - Account Prefix for Regional Storage Account\",\"description\":\"This prefix - will be combined with the network security group location to form the created - storage account name.\"}},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Group Name for Storage Account (must exist)\",\"description\":\"The resource - group that the storage account will be created in. This resource group must - already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\":\"[concat('policyStorage_', - uniqueString(parameters('location'), parameters('nsgName')))]\"},\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\",\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\",\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\",\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\":\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\",\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[concat(parameters('storageprefix'), - parameters('location'))]\",\"sku\":{\"name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\":\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\":null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\":\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\":\"[resourceId(parameters('rgName'), - 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'), parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"},\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"},{\"properties\":{\"displayName\":\"Storage - accounts should allow access from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Some - Microsoft services that interact with storage accounts operate from networks - that can't be granted access through network rules. To help this type of service - work as intended, allow the set of trusted Microsoft services to bypass the - network rules. These services will then use strong authentication to access - the storage account.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"},{\"properties\":{\"displayName\":\"App - Configuration should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your app configuration instances - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows Azure Monitor agent to enable Azure Monitor assignments - on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorWindowsAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorWindowsAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca817e41-e85a-4783-bc7f-dc532d36235e\"},{\"properties\":{\"displayName\":\"Managed - disks should be double encrypted with both platform-managed and customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskEncryptionSets\"},{\"field\":\"Microsoft.Compute/diskEncryptionSets/encryptionType\",\"notEquals\":\"EncryptionAtRestWithPlatformAndCustomerKeys\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca91455f-eace-4f96-be59-e6e2c35b4816\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Server' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1486 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1167 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1374 - Incident Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"},{\"properties\":{\"displayName\":\"[Preview]: - Sensitive data in your SQL databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Security - Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"},{\"properties\":{\"displayName\":\"Allowed - virtual machine size SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"},\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of size SKUs that can be specified for virtual machines.\",\"displayName\":\"Allowed - Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1443 - Media Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation only if the 'department' tag is set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1582 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1104 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"},{\"properties\":{\"displayName\":\"Deploy - export to Event Hub for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Event Hub configuration is created. If you enter a name for a resource group - that doesn't exist, it'll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Event Hub configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub details\",\"description\":\"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with 'Send' claim.\",\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\":\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Event Hub via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', - variables('SeperatedEventHubDetails')[1], '/', variables('SeperatedEventHubDetails')[2], - '/', variables('SeperatedEventHubDetails')[3], '/', variables('SeperatedEventHubDetails')[4], - '/', variables('SeperatedEventHubDetails')[5], '/', variables('SeperatedEventHubDetails')[6], - '/', variables('SeperatedEventHubDetails')[7], '/', variables('SeperatedEventHubDetails')[8], - '/', variables('SeperatedEventHubDetails')[9], '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\":\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"eventHubDetails\":{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Privilege Use'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1209 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"},{\"properties\":{\"displayName\":\"Resource - logs in Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1724 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"},{\"properties\":{\"displayName\":\"Container - registries should not allow unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn't have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1084 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against 'man in the middle' attacks by encrypting the data stream - between the server and your application. This configuration enforces that - SSL is always enabled for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1620 - Denial Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Function Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1721 - Spam Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"},{\"properties\":{\"displayName\":\"Virtual - machines' Guest Configuration extension should be deployed with system-assigned - managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines\",\"name\":\"[first(split(field('fullName'), - '/'))]\",\"existenceCondition\":{\"field\":\"identity.type\",\"contains\":\"SystemAssigned\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d26f7642-7545-4e18-9b75-8c9bbdee3a9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"domain\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"domain-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d389df0a-e0d7-4607-833c-75a6fdac2c2d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the DSC configuration is - not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"},{\"properties\":{\"displayName\":\"Long-term - geo-redundant backup should be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\",\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1249 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1562 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"},{\"properties\":{\"displayName\":\"Virtual - machines should be connected to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual machine connected to a virtual network that is not - approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network Id\",\"description\":\"Resource Id of the virtual network. Example: - /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\",\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1383 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"},{\"properties\":{\"displayName\":\"Managed - disks should use a specific set of disk encryption sets for the customer-managed - key encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"allowedEncryptionSets\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - disk encryption set\",\"description\":\"The list of allowed disk encryption - sets for managed disks.\",\"strongType\":\"Microsoft.Compute/diskEncryptionSets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d461a302-a187-421a-89ac-84acdb4edc04\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1112 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs for Application Insights should be linked to a Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that's enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1585 - Security Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"},{\"properties\":{\"displayName\":\"Log - Analytics agent health issues should be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1150 - Security Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"},{\"properties\":{\"displayName\":\"Event - Hub should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1549 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Client' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1473 - Emergency Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1529 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn't exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d82101f3-f3ce-4fc5-8708-4c09f4009546\"},{\"properties\":{\"displayName\":\"Configure - Container registries with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"registry\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d85c6833-7d33-4cf5-a915-aaa2de84405f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1488 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption in transit to encrypt communication - between Azure HDInsight cluster nodes\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9da03a1-f3c3-412a-9709-947156872263\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not store passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1516 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your CosmosDB resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Batch Accounts in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"},{\"properties\":{\"displayName\":\"Logic - Apps should be deployed into Integration Service Environment\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"field\":\"Microsoft.Logic/workflows/integrationServiceEnvironment\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc595cb1-1cde-45f6-8faf-f88874e1c0e1\"},{\"properties\":{\"displayName\":\"Web - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dcbc65aa-59f3-4239-8978-3bb869d82604\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1439 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Policy Change'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1678 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1391 - Information Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1146 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Settings - Account Policies'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Recovery console'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1689 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1528 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Recovery Services vaults should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"count\":{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState\",\"equals\":\"Succeeded\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deeddb44-9f94-4903-9fa0-081d524406e3\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df39c015-56a4-45de-b4a3-efe77bed320d\"},{\"properties\":{\"displayName\":\"MariaDB - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - resource id of the private DNS zone\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"redisCache\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-redis-cache-windows-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e016b22b-e0eb-436d-8fd7-160c4eaed6e2\"},{\"properties\":{\"displayName\":\"Auditing - on Synapse workspace should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e04e5000-cd89-451d-bb21-a14d24ff9c73\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'User - Rights Assignment' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access - this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"Allow - log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":\"Deny - access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":\"Manage - auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":\"Back - up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\":\"Change - the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\":\"Change - the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\":\"Create - a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":\"Deny - log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":\"Deny - log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\":\"Deny - log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":\"Force - shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":\"Restore - files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\":\"Shut - down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":\"Take - ownership of files or other objects;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on locally\",\"description\":\"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the system time\",\"description\":\"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the time zone\",\"description\":\"Specifies which - users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may create a token object\",\"description\":\"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied local logon\",\"description\":\"Specifies which - users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"User - and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may shut down the system\",\"description\":\"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"},{\"properties\":{\"displayName\":\"Cosmos - DB should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - MSS (Legacy)' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Execution Policy\",\"description\":\"The expected PowerShell execution - policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"},\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1686 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1047 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled in virtual machine scale sets for listed virtual machine - images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1161 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1387 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"},{\"properties\":{\"displayName\":\"Azure - VPN gateways should not use 'basic' SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\":\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\",\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"},{\"properties\":{\"displayName\":\"RDP - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows RDP access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Shutdown'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Settings - - Account Policies'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enforce password history\",\"description\":\"Specifies limits on password - reuse - how many times a new password must be created for a user account before - the password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Maximum password age\",\"description\":\"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password age\",\"description\":\"Specifies the minimum number of days - that must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password length\",\"description\":\"Specifies the minimum number of - characters that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Password must meet complexity requirements\",\"description\":\"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\":{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\":{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\":{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\":{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\":{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1451 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - User Account Control'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode\",\"description\":\"Specifies the behavior of the elevation prompt for - administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1381 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1421 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1023 - Account Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"},{\"properties\":{\"displayName\":\"Allowed - locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\":\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1499 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Accounts'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Accounts: Guest account status\",\"description\":\"Specifies whether the local - Guest account is disabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"},\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that do not have the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the specified services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the services that should be installed and 'Running'. e.g. - 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"},{\"properties\":{\"displayName\":\"Subnets - should be associated with a Network Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1567 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1311 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL server Advanced - Data Security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"},{\"properties\":{\"displayName\":\"Allowed - locations for resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that resource groups can be created in.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1273 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - 'man in the middle' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in container security configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Storage in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"},{\"properties\":{\"displayName\":\"Container - registries should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network.By mapping private endpoints to your container registries - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1723 - Information Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"},{\"properties\":{\"displayName\":\"Configure - Container registries to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint's associated VNET.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"registry\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"containerRegistry-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1200 - Security Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1487 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be created with infrastructure-encryption enabled - (double encryption)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"},{\"properties\":{\"displayName\":\"Key - Vault should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that allow remote connections from accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1422 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1542 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"},{\"properties\":{\"displayName\":\"Function - apps should have 'Client Certificates (Incoming client certificates)' enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1321 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"},{\"properties\":{\"displayName\":\"Log - checkpoints should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"},{\"properties\":{\"displayName\":\"Log - connections should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"},{\"properties\":{\"displayName\":\"Disconnections - should be logged for PostgreSQL database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"},{\"properties\":{\"displayName\":\"Log - duration should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"},{\"properties\":{\"displayName\":\"Deprecated - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts with owner permissions should be removed from your subscription. - \ Deprecated accounts are accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\":{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"},{\"properties\":{\"displayName\":\"Double - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that allow remote connections from - accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Control Panel'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1622 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed66d4f5-8220-45dc-ab4a-20d1749c74e6\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Key Vaults in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Stream Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"amlworkspace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"amlworkspace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee40564d-486e-4f68-a5ca-7a621edae0fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1189 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee980b6d-0eca-4501-8d54-f6290fd512c3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Accounts' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: - Guest account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Accounts: - Guest account status\",\"description\":\"Specifies whether the local Guest - account is disabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1089 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1314 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1128 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints to Azure SignalR Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"signalr\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef45854f-b33f-49a3-8041-9057e915d88f\"},{\"properties\":{\"displayName\":\"API - Management services should use a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API - Management SKU Names\",\"description\":\"List of API Management SKUs against - which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Destination Location\",\"description\":\"The location the Event Hub that - will get diagnostic data resides in. Only source Event Hubs in this location - will be linked to this destination Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1472 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1012 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1358 - Incident Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1531 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0fcf93c-c063-4071-9668-c47474bd3564\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - name contains\",\"description\":\"String included in the required alert name. - For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Alert is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Alert is created - or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('alertSeverities'),if(equals(parameters('alertName'), - ''), array('3.'), array(parameters('alertName'))))]\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"in\":\"[union(array('Severity'),if(equals(parameters('alertName'), - ''), array('Version'), array('AlertDisplayName')))]\"},{\"count\":{\"value\":\"[parameters('alertSeverities')]\",\"name\":\"alertSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"Severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('alertSeverity')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('alertSeverities'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert - is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'), - ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(parameters('alertName'), - ''), '3.', parameters('alertName'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'), - variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1028 - Information Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"},{\"properties\":{\"displayName\":\"Virtual - networks should use specified virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network gateway Id\",\"description\":\"Resource Id of the virtual network - gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\",\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), - '/')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - MSS (Legacy)'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Settings - Account Policies' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\":\"Enforce - password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum password - age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\",\"MinimumPasswordLength\":\"Minimum - password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\":\"Password - must meet complexity requirements;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce - password history\",\"description\":\"Specifies limits on password reuse - - how many times a new password must be created for a user account before the - password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Maximum - password age\",\"description\":\"Specifies the maximum number of days that - may elapse before a user account password must be changed. The format of the - value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password age\",\"description\":\"Specifies the minimum number of days that - must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password length\",\"description\":\"Specifies the minimum number of characters - that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password - must meet complexity requirements\",\"description\":\"Specifies whether a - user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1457 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"},{\"properties\":{\"displayName\":\"Disk - access resources should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to diskAccesses, data leakage - risks are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f39f5f49-4abf-44de-8c70-0756997bfb51\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - all of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not contain the specified certificates - in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"},{\"properties\":{\"displayName\":\"Audit - Log Analytics workspace for VM - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - VMs as non-compliant if they aren't logging to the Log Analytics workspace - specified in the policy/initiative assignment.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics Workspace Id that VMs should be configured for\",\"description\":\"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"},{\"properties\":{\"displayName\":\"Authorization - rules on the Event Hub instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1495 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have not restarted within the - specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Number of days\",\"description\":\"The number of days without restart until - the machine is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"},\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"},{\"properties\":{\"displayName\":\"Disk - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b53539-8df9-40e4-86c6-6b607703bd4e\"},{\"properties\":{\"displayName\":\"Configure - SQL servers to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, SQL - servers should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a SQL Server is created that will be shared - by all servers in that region). Important - for proper operation of Auditing - do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('sqlaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-', - uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure SQL servers to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1469 - Power Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1618 - Security Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths\",\"description\":\"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be a set mode for Application Gateway and - Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Mode Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"},{\"properties\":{\"displayName\":\"Internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1214 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Recovery console' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1540 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1449 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use system-assigned managed identity - authentication when it is supported\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Using - system-assigned managed identity when communicating with data stores via linked - services avoids the use of less secured credentials such as passwords or connection - strings.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"AzureSqlDatabase\",\"AzureSqlMI\",\"AzureSqlDW\",\"AzureBlobFS\",\"AdlsGen2CosmosStructuredStream\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureBlobStorage\",\"AzureDatabricks\"]},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"User - ID=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f78ccdb4-7bf4-4106-8647-270491d2978a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/encryption.cmk.key.name\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d52b2d-e161-4dfa-a82b-55e564167385\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"},{\"properties\":{\"displayName\":\"External - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1345 - Cryptographic Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Other System Events\",\"description\":\"Specifies whether audit events - are generated for Windows Firewall Service and Windows Firewall driver start - and stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"},\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"},{\"properties\":{\"displayName\":\"Resource - logs in Service Bus should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8f774be-6aee-492a-9e29-486ef81f3a68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1535 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Stream Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"},{\"properties\":{\"displayName\":\"Saved-queries - in Azure Monitor should be saved in customer storage account for logs encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1435 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Linux virtual machines on which the Linux Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1086 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1222 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"},{\"properties\":{\"displayName\":\"Kubernetes - Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\",\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"},{\"properties\":{\"displayName\":\"Storage - account containing the container with activity logs must be encrypted with - BYOK\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"},{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'), - subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\":\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"searchService\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"searchService-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbc14a67-53e4-4932-abcc-2049c6706009\"},{\"properties\":{\"displayName\":\"Virtual - machines and virtual machine scale sets should have encryption at host enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc4d8e41-e223-45ea-9bf5-eada37891d87\"},{\"properties\":{\"displayName\":\"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified that some of your subnets aren't protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable All Internet traffic should be - routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\",\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\",\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\",\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\",\"like\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/', - first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"}},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based - \ Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"},{\"properties\":{\"displayName\":\"[Preview]: - Linux machines should meet requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.1.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureLinuxBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureLinuxBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Client'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1318 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1543 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1611 - Developer-Provided Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1613 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use a managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe3fd216-4f83-4fc1-8984-2bbec80a3418\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL databases should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers\",\"Microsoft.Sql/managedinstances\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"},{\"properties\":{\"displayName\":\"Deploy - export to Log Analytics workspace for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Log Analytics workspace configuration is created. If you enter a name for - a resource group that doesn't exist, it'll be created in the subscription. - Note that each resource group can only have one export to Log Analytics workspace - configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Log Analytics workspace configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The Log Analytics workspace of where - the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"workspaceResourceId\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Log Analytics workspace via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"workspaceResourceId\":{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1158 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"},{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"},{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"},{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"},{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"},{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"},{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"},{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"},{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"},{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"},{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"},{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"},{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"},{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"},{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"},{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"},{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"},{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"},{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"},{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"},{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"},{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"},{\"properties\":{\"displayName\":\"test_policyusm7pczwi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-04T22:57:00.9569478Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydntotaowa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydntotaowa\"},{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"},{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"},{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"},{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"},{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"},{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"},{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"},{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"},{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"},{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"},{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"},{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"},{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"},{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"},{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"},{\"properties\":{\"displayName\":\"test_policyunbs5wtft\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-08T23:45:16.8769261Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyj2uyuq36z\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyj2uyuq36z\"},{\"properties\":{\"displayName\":\"test_policy2wlyo2jcx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T08:52:29.0384373Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T08:52:29.6504961Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjatom4uiu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjatom4uiu\"},{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"},{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"},{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"},{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"},{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"},{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"},{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"},{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"},{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"},{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"},{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"},{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"},{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"},{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"},{\"properties\":{\"displayName\":\"test_policy4ljtwhrb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T09:04:36.2666163Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T09:04:36.9195862Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policynphpv4hoz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policynphpv4hoz\"},{\"properties\":{\"displayName\":\"test_policywr7fgwb3h_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-03-25T07:14:53.2365929Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-03-25T07:14:54.8167247Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyoawd757s5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyoawd757s5\"},{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"},{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"},{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"},{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"},{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"},{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"},{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"},{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"},{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"},{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"},{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"},{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"},{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"},{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"},{\"properties\":{\"displayName\":\"test_policybflkk7cf2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:48:53.5703427Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:48:54.2065695Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysnxqzmcgi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysnxqzmcgi\"},{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"},{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"},{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"},{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"},{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"},{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"},{\"properties\":{\"displayName\":\"test_policy000003\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:50:45.6176005Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:50:46.2416875Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy000002\"},{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"},{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"},{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"},{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"},{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"},{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"},{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"},{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"},{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"},{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"},{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"},{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"},{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"},{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"},{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\",\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')), - 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')), - 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"},{\"properties\":{\"displayName\":\"clitestvgcwukwfkdrnt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:08:49.3743392Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitest7syw4jlpt6vnzk5vvmal7tz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitest7syw4jlpt6vnzk5vvmal7tz\"},{\"properties\":{\"displayName\":\"clitestmwd5emng54d7h\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:29.7005931Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesta744fed3lbeyk3atxfl22hh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesta744fed3lbeyk3atxfl22hh\"},{\"properties\":{\"displayName\":\"clitestasb6ki5xu3s5n\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:32.4697746Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestaccirnpsjl4xcry6egrdxcc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestaccirnpsjl4xcry6egrdxcc\"},{\"properties\":{\"displayName\":\"clitestyfehqscfzl66v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:18:08.1664207Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestatcrgfr7h3bzxn2n2l643lx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestatcrgfr7h3bzxn2n2l643lx\"},{\"properties\":{\"displayName\":\"clitest546cgekm2cmto\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T08:58:45.8641083Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestiympxjk7m7b7zm5ife6siwj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestiympxjk7m7b7zm5ife6siwj\"},{\"properties\":{\"displayName\":\"clitestx3chgt5ixyfdg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T06:59:50.0631487Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestkhjp2fkvvvmtlfh54o7b7db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestkhjp2fkvvvmtlfh54o7b7db\"},{\"properties\":{\"displayName\":\"clitestcv4zaidsjskxz\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:01.5383822Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestlgubbwxnbxedc6oqemfvyul\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestlgubbwxnbxedc6oqemfvyul\"},{\"properties\":{\"displayName\":\"clitest4t542r65t7vdo\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:21:45.5602849Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestm2i27iey5uu3k34mmckjoc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestm2i27iey5uu3k34mmckjoc6\"},{\"properties\":{\"displayName\":\"clitest4fmzwsy5ekwaj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T09:02:35.0596019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestr3x24dreg2li4idugas3fi3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestr3x24dreg2li4idugas3fi3\"},{\"properties\":{\"displayName\":\"clitestsoroll7id56c6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:09:20.8262259Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestxxdb7o7f2qrwygu4p4pupsu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestxxdb7o7f2qrwygu4p4pupsu\"},{\"properties\":{\"displayName\":\"clitestlcamaprqvpmyp\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:29.9142438Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesty3kzkcsdlkgkwcocvpjwcyr\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesty3kzkcsdlkgkwcocvpjwcyr\"},{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\",\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\",\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"Deny - cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\",\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"},{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"},{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"},{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"},{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"},{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"},{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"},{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"},{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"},{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:25:41.2213587Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-25T23:50:17.3899118Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:30:32.2645779Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"westus2\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-bicep-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-bicep-test\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:26:03.8364554Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"},{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"},{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"},{\"properties\":{\"displayName\":\"Sumit- - NSG X on every subnet\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"This - policy enforces a specific NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '2901806' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T08:50:46.2416875Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - ParameterSetName: - - --policy -n --display-name -g --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T08:50:46.2416875Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_assignment000005", "policyDefinitionId": - "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002", - "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001", - "parameters": {"allowedLocations": {"value": ["australiaeast", "eastus", "japaneast", - "westus"]}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - Content-Length: - - '469' - Content-Type: - - application/json - ParameterSetName: - - --policy -n --display-name -g --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}' - headers: - cache-control: - - no-cache - content-length: - - '800' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policy000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","name":"cli_test_policy000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T08:50:41Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": [{"name": "azurecli-test-policy-subnet000007", - "properties": {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '238' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"azurecli-test-policy-vnet000006\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006\",\r\n - \ \"etag\": \"W/\\\"efe9bd5e-142a-4c0f-810f-b741f1832f95\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"d1eec477-38a9-479f-abba-7eba75bd0ede\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"azurecli-test-policy-subnet000007\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006/subnets/azurecli-test-policy-subnet000007\",\r\n - \ \"etag\": \"W/\\\"efe9bd5e-142a-4c0f-810f-b741f1832f95\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/0093dee5-fb4a-4dac-9ac3-f1e1618251bf?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1429' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:50:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 46dbb246-7977-4a85-a05a-6eb1cdf2ae47 - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/0093dee5-fb4a-4dac-9ac3-f1e1618251bf?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 188b8824-8227-4c92-ad3e-0fc6d9b6f281 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"azurecli-test-policy-vnet000006\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006\",\r\n - \ \"etag\": \"W/\\\"99eb9c4f-65f5-4959-949d-6b78011aab18\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"d1eec477-38a9-479f-abba-7eba75bd0ede\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"azurecli-test-policy-subnet000007\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Network/virtualNetworks/azurecli-test-policy-vnet000006/subnets/azurecli-test-policy-subnet000007\",\r\n - \ \"etag\": \"W/\\\"99eb9c4f-65f5-4959-949d-6b78011aab18\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1431' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:01 GMT - etag: - - W/"99eb9c4f-65f5-4959-949d-6b78011aab18" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 22c1a590-e489-4126-99db-7d2de9032a10 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - ParameterSetName: - - --policy -n --display-name -g --not-scopes --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T08:50:46.2416875Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_assignment000005", "policyDefinitionId": - "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002", - "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001", - "parameters": {"allowedLocations": {"value": ["australiaeast", "eastus", "japaneast", - "westus"]}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - Content-Length: - - '469' - Content-Type: - - application/json - ParameterSetName: - - --policy -n --display-name -g --not-scopes --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}' - headers: - cache-control: - - no-cache - content-length: - - '800' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8831' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - ParameterSetName: - - --disable-scope-strict-match - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8831' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}' - headers: - cache-control: - - no-cache - content-length: - - '800' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - ParameterSetName: - - --disable-scope-strict-match - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8030' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T08:50:45.6176005Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T08:50:46.2416875Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control - 1599 - Developer Configuration Management | Software / Firmware Integrity - Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\":{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your Synapse workspaces\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0049a6b3-a662-4f3e-8635-39cf44ace45a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"},{\"properties\":{\"displayName\":\"SQL - Server Integration Services integration runtimes on Azure Data Factory should - be joined to a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0088bc63-6dee-4a9c-9d29-91cfdc848952\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure - Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - protection of your Azure Virtual Machines by enabling Azure Backup. Azure - Backup is a secure and cost effective data protection solution for Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1099 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1709 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1052 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1034 - Least Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1623 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1515 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1361 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"},{\"properties\":{\"displayName\":\"Azure - Kubernetes Service Private Clusters should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"040732e8-d947-40b8-95d6-854c95024bf8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1594 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB allowed locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying Azure Cosmos DB resources.\",\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\",\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))), - ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\":\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"}]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"},{\"properties\":{\"displayName\":\"SQL - managed instances should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Linux VMs - monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"},{\"properties\":{\"displayName\":\"Shared - dashboards should not have markdown tiles with inline content\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that's hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Portal\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Portal/dashboards\"},{\"anyof\":[{\"not\":{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2020-09-01-alpha\"}},{\"count\":{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type\",\"equals\":\"Extension/HubsExtension/PartType/MarkdownPart\"},{\"anyOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"equals\":\"1\"}]}]}},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c655fe-0ac7-48ae-9a32-3a2e208c7624\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1572 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use a customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Azure Front Door Service - service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"},{\"properties\":{\"displayName\":\"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send scan reports to' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\",\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"},\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Data Lake Store should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1223 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1420 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1688 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - access the private endpoint(s) for Storage Sync Service resource interfaces - from a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint's private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateDnsZoneId\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"Private - DNS Zone Identifier\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"afs\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-afs\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06695360-db88-47f6-b976-7500d4297475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1455 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit SQL DB Level Audit Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - DB level audit setting for SQL databases\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Audit - VMs that do not use managed disks\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\",\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\",\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that Cognitive Services - account isn't exposed on the public internet. Creating private endpoints can - limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - \",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1583 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the DSC configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure - Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"},{\"properties\":{\"displayName\":\"Adaptive - network hardening recommendations should be applied on internet facing virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"},{\"properties\":{\"displayName\":\"There - should be more than one owner assigned to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1159 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"},{\"properties\":{\"displayName\":\"Disk - encryption should be applied on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"},{\"properties\":{\"displayName\":\"Configure - backup on virtual machines without a given tag to an existing recovery services - vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location - (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.\",\"strongType\":\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Backup - Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding VMs from - the scope of this policy. This should be used along with the Exclusion Tag - Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exclusion - Tag Values\",\"description\":\"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"value\":\"[empty(parameters('exclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('exclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"},{\"properties\":{\"displayName\":\"Azure - Policy Add-on for Kubernetes service (AKS) should be installed and enabled - on your clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1654 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1428 - Media Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"},{\"properties\":{\"displayName\":\"Audit - resource location matches resource group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that the resource location matches its resource group location\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[resourcegroup().location]\"},{\"field\":\"location\",\"notEquals\":\"global\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Management'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl\",\"exists\":false},{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0aa61e00-0a01-4a3c-9945-e93cffedf0e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"},{\"properties\":{\"displayName\":\"Email - notification to subscription owner for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"not\":{\"allOf\":[{\"field\":\"Microsoft.Security/securityContacts/alertsToAdmins\",\"equals\":\"Off\"},{\"field\":\"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity\",\"equals\":\"High\"}]}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"},{\"properties\":{\"displayName\":\"Key - vaults should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB throughput should be limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max - RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned - to a container via the Resource Provider during create or update.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"},{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\",\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\",\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1239 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"},{\"properties\":{\"displayName\":\"Ensure - API app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Automation Accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"},{\"properties\":{\"displayName\":\"SQL - servers should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for IoT Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d40b058-9f95-4a19-93e3-9b0330baa2a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1518 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1466 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"},{\"properties\":{\"displayName\":\"Deploy - a flow log resource with target network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG - Region\",\"description\":\"This Policy will review NSGs only in the selected - region. You can create other assignments to include other regions.\",\"strongType\":\"location\"}},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - id\",\"description\":\"A string with the storage id for the flowlogs to be - sent to. It will be used for deployment purposes only. Make sure this storage - account is located in the same region as the NSG. The format must be: '/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watchers RG\",\"description\":\"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.\",\"strongType\":\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watcher name\",\"description\":\"The name of the network watcher under which - the flowLog resources will be created. Make sure it belongs to the same region - as the NSG.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\",\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))), - 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\",\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\":{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\":{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-', - uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\",\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\":\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'), - '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\",\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\":{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\":{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\":{\"value\":\"[concat(resourceGroup().id, - '/providers/Microsoft.Network/networkSecurityGroups/', field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure File Sync to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Azure File Sync's internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"value\":\"AllowVirtualNetworksOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e07b2e9-6cd9-4c40-9ccb-52817b95133b\"},{\"properties\":{\"displayName\":\"Authorized - IP ranges should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\",\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Key Vault provides an additional layer of protection and security - intelligence by detecting unusual and potentially harmful attempts to access - or exploit key vault accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"},{\"properties\":{\"displayName\":\"Configure - Batch accounts with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"App - Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\",\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1476 - Fire Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1430 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1574 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1164 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"count\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fda3595-9f2b-4592-8675-4231d6fa82fe\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Container registries\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fdf0491-d080-4575-b627-ad0e843cba0f\"},{\"properties\":{\"displayName\":\"CORS - should not allow every domain to access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\",\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not contain the specified - certificates in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints\",\"description\":\"A semicolon-separated list of - certificate thumbprints that should exist under the Trusted Root certificate - store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"},\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"},{\"properties\":{\"displayName\":\"Custom - subscription owner roles should not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that no custom subscription owner roles exist.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\",\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"/\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1230 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1432 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure IoT Hubs to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"114eec6e-5e59-4bad-999d-6eceeb39d582\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System settings' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies\",\"description\":\"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1655 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Security' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LAN Manager authentication level\",\"description\":\"Specify which - challenge-response authentication protocol is used for network logons. This - choice affects the level of authentication protocol used by clients, the level - of session security negotiated, and the level of authentication accepted by - servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LDAP client signing requirements\",\"description\":\"Specify the - level of data signing that is requested on behalf of clients that issue LDAP - BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients\",\"description\":\"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers\",\"description\":\"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"},{\"properties\":{\"displayName\":\"Allowlist - rules in your adaptive application control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center's adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use Key Vault for storing secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"exists\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"PWD=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"Password=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"CredString=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"pwd=\"}]}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type\",\"equals\":\"SecureString\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type\",\"equals\":\"SecureString\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"MongoDbAtlas\",\"MongoDbV2\"]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type\",\"equals\":\"SecureString\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"127ef6d7-242f-43b3-9eef-947faf1725d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1240 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System objects'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"},\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1450 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1184 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure machines to receive the Qualys vulnerability assessment agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don't need a Qualys license or even a Qualys account - everything's handled - seamlessly inside Security Center. Machines which don't have the Qualys vulnerability - assessment agent deployed automatically receive the agent if this policy is - enabled.\",\"metadata\":{\"category\":\"Security Center\",\"preview\":true,\"version\":\"2.0.0-preview\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]},\"deployment\":{\"properties\":{\"mode\":\"Incremental\",\"template\":{\"contentVersion\":\"1.0.0.0\",\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"parameters\":{\"vmName\":{\"type\":\"String\"},\"resourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.compute/virtualmachines'))]\",\"type\":\"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"},{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.hybridcompute/machines'))]\",\"type\":\"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"resourceType\":{\"value\":\"[field('type')]\"}}}},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13ce0167-8ca6-4048-8e6b-f996402e3c1b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1085 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1404 - Maintenance Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that contain certificates expiring within the specified number - of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - store path\",\"description\":\"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is 'Cert:' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher', - 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Expiration - limit in days\",\"description\":\"An integer indicating the number of days - within which to check for certificates that are expiring. For example, if - this value is 30, any certificate expiring within the next 30 days will cause - this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to include\",\"description\":\"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to exclude\",\"description\":\"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - expired certificates\",\"description\":\"Must be 'true' or 'false'. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group contains - any of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to exclude\",\"description\":\"A semicolon-separated list of members - that should be excluded in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"},\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityWindowsAgent\":\"[concat('deployAzureSecurityWindowsAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityWindowsAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityWindowsAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1537496a-b1e8-482b-a06a-1cc2415cdc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1157 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1564 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a minimum password - age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1662 - Fail In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1684 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1103 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1007 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"},{\"properties\":{\"displayName\":\"Deploy - associations for a managed application\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"},\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Managed - application ID\",\"description\":\"Resource ID of the managed application - to which resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the managed application.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetManagedApplicationId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\":{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"},{\"properties\":{\"displayName\":\"[ASC - Private Preview] Deploy - Configure system-assigned managed identity to enable - Azure Monitor assignments on VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.2.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[if(contains(field('identity.type'), - 'UserAssigned'), concat(field('identity.type'), ',SystemAssigned'), 'SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17b3de92-f710-4cf4-aa55-0e7859f1ed7b\"},{\"properties\":{\"displayName\":\"Transparent - Data Encryption on SQL databases should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1325 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1480 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1369 - Incident Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Logon-Logoff' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\":\"Audit - Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Group Membership\",\"description\":\"Specifies whether audit events are generated - when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"},{\"properties\":{\"displayName\":\"Azure - Monitor log profile should collect logs for categories 'write,' 'delete,' - and 'action'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that a log profile collects logs for categories 'write,' 'delete,' - and 'action'\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Access to App Services should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1adadefe-5f21-44f7-b931-a59b54ccdb45\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance which doesn't have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"},{\"properties\":{\"displayName\":\"Public - network access on Azure SQL Database should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"},{\"properties\":{\"displayName\":\"Azure - Service Bus namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"},{\"properties\":{\"displayName\":\"Public - network access on Azure Data Factory should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"},{\"properties\":{\"displayName\":\"Azure - File Sync should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization's network, rather than through the internet-accessible - public endpoint. Creating a private endpoint by itself does not disable the - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d320205-c6a1-4ac6-873d-46224024e8e2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using no secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires no secrets. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1538 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"},{\"properties\":{\"displayName\":\"Virtual - machines should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1595 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - a required tag and its value. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Target sub resource the private endpoint - connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('targetSubResource')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"synapse-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\"},{\"properties\":{\"displayName\":\"Key - vaults should have soft delete enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - API for FHIR should have at least one approved private endpoint connection. - Clients in a virtual network can securely access resources that have private - endpoint connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"count\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ee56206-5dd1-42ab-b02d-8aae8b1634ce\"},{\"properties\":{\"displayName\":\"An - Azure Active Directory administrator should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be encrypted with customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Shutdown'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Clear virtual memory pagefile\",\"description\":\"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\":false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"},{\"properties\":{\"displayName\":\"Logic - Apps Integration Service Environment should be encrypted with customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/integrationServiceEnvironments\"},{\"field\":\"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption at host to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure security - center has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"},{\"properties\":{\"displayName\":\"VM - Image Builder templates should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM - Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization's - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a8cd35-125e-4d13-b82d-2e19b7208bb7\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a9766a-82a5-4747-abb5-650b6dbba6d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1111 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1596 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Audit'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1399 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Management'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"},{\"properties\":{\"displayName\":\"Management - ports should be closed on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1493 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"},{\"properties\":{\"displayName\":\"Only - secure connections to your Azure Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not restrict the minimum - password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"},{\"properties\":{\"displayName\":\"Service - Bus should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Automation account so that it isn't accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Automation\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"value\":false}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1268 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1231 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a maximum password age - of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1372 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"},{\"properties\":{\"displayName\":\"Endpoint - protection solution should be installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1649 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"},{\"properties\":{\"displayName\":\"Metric - alert rules should be configured on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - configuration of metric alert rules on Batch account to enable the required - metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Metric - name\",\"description\":\"The metric name that an alert rule must be enabled - on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\":\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\",\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\",\"equals\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourcegroups/', resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', - field('name'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"},{\"properties\":{\"displayName\":\"Configure - virtual machines to be onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1396 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"},{\"properties\":{\"displayName\":\"Flow - logs should be enabled for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkWatchers/flowLogs\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27960feb-a23c-4577-8d36-ef8b5f35e0be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1074 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1527 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"},{\"properties\":{\"displayName\":\"Deploy - default Microsoft IaaSAntimalware extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file extensions to exclude from scanning\"}},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of process names to exclude from scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\":\"true\",\"metadata\":{\"description\":\"Indicates - whether or not real time protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\":{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\":\"Indicates - whether or not custom scheduled scan settings are enabled (default is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)\"}},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\",\"metadata\":{\"description\":\"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\",\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\",\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\",\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\",\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\":{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\",\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\":{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1436 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"},{\"properties\":{\"displayName\":\"Azure - Defender for App Service should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for App Service leverages the scale of the cloud, and the visibility - that Azure has as a cloud provider, to monitor for common web app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"},{\"properties\":{\"displayName\":\"Service - Bus Premium namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"},{\"not\":{\"field\":\"Microsoft.ServiceBus/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"295fc8b1-dc9f-4f53-9c61-3f313ceab40a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - User Account Control'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"},\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Policy Change' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\":\"Audit - Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\":\"Audit - Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authentication Policy Change\",\"description\":\"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authorization Policy Change\",\"description\":\"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1274 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"},{\"properties\":{\"displayName\":\"Synapse - workspace auditing settings should have action groups configured to capture - critical activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b18f286-371e-4b80-9887-04759970c0d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1434 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1388 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1344 - Authenticator Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"},{\"properties\":{\"displayName\":\"SSH - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows SSH access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"},{\"properties\":{\"displayName\":\"Unattached - disks should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any unattached disk without encryption enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1546 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1414 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1679 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1068 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"},{\"properties\":{\"displayName\":\"App - Service should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any App Service not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not store passwords using reversible - encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that allow remote connections from accounts - without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"},{\"properties\":{\"displayName\":\"Public - network access on Azure IoT Hub should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure IoT Hub should use customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"lessOrEquals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\"},{\"properties\":{\"displayName\":\"Managed - workspace virtual network on Azure Synapse workspaces should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetwork\",\"notEquals\":\"default\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d9dbfa3-927b-4cf0-9d0f-08747f971650\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1077 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1000 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1519 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System objects' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Windows - VMs monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1144 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1090 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Access'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Storage should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Storage provides detections of unusual and potentially harmful - attempts to access or exploit storage accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cache for Redis resource so that it's - not accessible over the public internet. This helps protect the cache against - data leakage risks.\",\"metadata\":{\"category\":\"Cache\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30b3dfa5-a70d-4c8e-bed6-0083858f663d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines missing any of specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to include\",\"description\":\"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not joined to the specified - domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Domain Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"},\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics Agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"},{\"properties\":{\"displayName\":\"API - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"324c7761-08db-4474-9661-d1039abc92ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1587 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the specified services - are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and 'Running'. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Service names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the services that should be installed and 'Running'. - e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"},\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"},{\"properties\":{\"displayName\":\"Azure - SQL Database should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"},{\"properties\":{\"displayName\":\"Deploy - the Linux Guest Configuration extension to enable Guest Configuration assignments - on Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"},{\"properties\":{\"displayName\":\"MySQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Audit' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: - Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to an existing recovery - services vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally include - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Location (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral\",\"strongType\":\"location\"}},\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"345fa903-145c-4fe1-8bcd-93ec2adccde8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1151 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should allow outbound data traffic only to approved targets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3484ce98-c0c5-4c83-994b-c5ac24785218\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1412 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1475 - Emergency Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1060 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premises clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"},{\"properties\":{\"displayName\":\"Resource - logs in Logic Apps should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1210 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a maximum password - age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Object Access' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit - Detailed File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\",\"AuditFileSystem\":\"Audit - File System;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File Share\",\"description\":\"Specifies whether to audit events related to - file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Firewall Properties' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\",\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPrivateUseProfileSettings\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPublicUseProfileSettings\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Private: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"},{\"properties\":{\"displayName\":\"Gateway - subnets should not be configured with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection on Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection on Storage Accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('storageAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1313 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"},{\"properties\":{\"displayName\":\"Automation - account variables should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is important to enable encryption of Automation account variable assets when - storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"},{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1685 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"},{\"properties\":{\"displayName\":\"Deploy - Threat Detection on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Security'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LAN Manager authentication level\",\"description\":\"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LDAP client signing requirements\",\"description\":\"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients\",\"description\":\"Specifies which behaviors are allowed by - clients for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services. - See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers\",\"description\":\"Specifies which behaviors are allowed by - servers for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid topics to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36ea4b4b-0f7f-4a54-89fa-ab18f555a172\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/domains/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"domain\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36f4658a-848a-467b-881c-e6fa20cf75fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Interactive Logon'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1624 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"},{\"properties\":{\"displayName\":\"Storage - accounts should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\",\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"},{\"properties\":{\"displayName\":\"Resource - logs in IoT Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"3.0.1\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"},{\"properties\":{\"displayName\":\"Deploy - the Windows Guest Configuration extension to enable Guest Configuration assignments - on Windows VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1081 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1522 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1397 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address for security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1232 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1246 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"},{\"properties\":{\"displayName\":\"Synapse - managed private endpoints should only connect to resources in approved Azure - Active Directory tenants\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"allowedTenantIds\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List - of Allowed Tenant Ids for private endpoint creation\",\"description\":\"This - parameter defines the list of Allowed Tenant Ids that are allowed to create - managed private endpoints in the workspaces\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"notIn\":\"[parameters('allowedTenantIds')]\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a003702-13d2-4679-941b-937e58c443f0\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1648 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Control - Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Control Panel' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1315 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1548 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto - approved by policy assignment\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b3b0c27-08d2-4b32-879d-19930bee3266\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1003 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Security operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Security Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\",\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"},{\"properties\":{\"displayName\":\"PostgreSQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1621 - Resource Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1127 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on virtual machines with no identities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have extra accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\":\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\":\"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Search Services in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Devices'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Log Analytics workspace\",\"description\":\"Select Log Analytics workspace - from dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\",\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - monitoring for Linux VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"},{\"properties\":{\"displayName\":\"App - Configuration should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d9f5e4c-9947-4579-9539-2a7695fbc187\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1385 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell modules - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn't available - in a location specified by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\":\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Modules\",\"description\":\"A semicolon-separated list of the names of the - PowerShell modules that should be installed. You may also specify a specific - version of a module that should be installed by including a comma after the - module name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"},{\"properties\":{\"displayName\":\"Azure - Monitor solution 'Security and Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that Security and Audit is deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1160 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1545 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Access' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths\",\"description\":\"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1561 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"},{\"properties\":{\"displayName\":\"Secure - transfer to storage accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always use classic logon\",\"description\":\"Specifies whether to force the - user to log on to the computer using the classic logon screen. This setting - only works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Boot-Start Driver Initialization Policy\",\"description\":\"Specifies which - boot-start drivers are initialized based on a classification determined by - an Early Launch Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable Windows NTP Client\",\"description\":\"Specifies whether the Windows - NTP Client is enabled. Enabling the Windows NTP Client allows your computer - to synchronize its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\":{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\":{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\":{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\":{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\":{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1202 - Access Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1438 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"},{\"properties\":{\"displayName\":\"Azure - Monitor should collect activity logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"},{\"properties\":{\"displayName\":\"Temp - disks and cache for agent node pools in Azure Kubernetes Service clusters - should be encrypted at host\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"count\":{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"false\"}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41425d9f-d1a5-499a-9932-f8ed8453932c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1263 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"},{\"properties\":{\"displayName\":\"Audit - Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Azure Front Door - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"},{\"properties\":{\"displayName\":\"Resource - logs in Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Detailed Tracking'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Process Termination\",\"description\":\"Specifies whether audit events - are generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"},\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1137 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System settings'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies\",\"description\":\"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Logon' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit - Credential Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Credential Validation\",\"description\":\"Specifies whether audit events are - generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1544 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1398 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor permissive network access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1720 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1310 - Device Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1565 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use a Private Link enabled SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"field\":\"Microsoft.SignalRService/SignalR/sku.tier\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464a1620-21b5-448d-8ce6-d4ac6d1bc49a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require SQL Server version 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"},{\"properties\":{\"displayName\":\"Require - automatic OS image patching on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\",\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\",\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedStorage\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"},{\"properties\":{\"displayName\":\"[Preview]: - IoT Hub device provisioning service data should be encrypted using customer-managed - keys (CMK)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47031206-ce96-41f8-861b-6a915f3de284\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn't exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage - accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB key based metadata write access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"},{\"properties\":{\"displayName\":\"Auto - provisioning of the Log Analytics agent should be enabled on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"},{\"properties\":{\"displayName\":\"Adaptive - application controls for defining safe applications should be enabled on your - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"},{\"properties\":{\"displayName\":\"Configure - Cognitive Services accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Cognitive Services resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Disabled\",\"Modify\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2017-04-18')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1165 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"},{\"properties\":{\"displayName\":\"Private - endpoints for Guest Configuration assignments should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"},{\"field\":\"id\",\"contains\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyof\":[{\"field\":\"[concat('tags[', - 'EnablePrivateNeworkGC', ']')]\",\"equals\":\"TRUE\"},{\"field\":\"[concat('tags[', - 'EnablePrivateNetworkGC', ']')]\",\"equals\":\"TRUE\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"480d0f91-30af-4a76-9afb-f5710ac52b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1048 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1033 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1669 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - User Account Control' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"UACRunAllAdministratorsInAdminApprovalMode\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of the elevation prompt for administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for Data factories\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"groupId\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - group Id that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - group Id\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupId\":[\"[parameters('groupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496ca26b-f669-4322-a1ad-06b7b5e41882\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on VMs with a user-assigned identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[concat(field('identity.type'), - ',SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Audit'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - 'modify' effect policies are available that support remediation of tags on - existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1677 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1094 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid topic instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"count\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"},{\"properties\":{\"displayName\":\"Function - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d0bc837-6eff-477e-9ecd-33bf8d4212a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"},{\"properties\":{\"displayName\":\"FTPS - should be required in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1156 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1312 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"},{\"properties\":{\"displayName\":\"Azure - Defender for servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for servers provides real-time threat protection for server workloads - and generates hardening recommendations as well as alerts about suspicious - activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1001 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1083 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1247 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1267 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints that connect to Batch - accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"batchAccount\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"batchAccount-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec38ebc-381f-45ee-81a4-acbc4be878f8\"},{\"properties\":{\"displayName\":\"Azure - data factories should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/encryption.vaultBaseUrl\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec52d6d-beb7-40c4-9a9e-fe753254690e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1139 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"},{\"properties\":{\"displayName\":\"A - maximum of 3 owners should be designated for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"},{\"properties\":{\"displayName\":\"Subscriptions - should have a contact email address for security issues\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"},{\"properties\":{\"displayName\":\"Add - a tag to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"},{\"properties\":{\"displayName\":\"[Preview]: - Storage account public access should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.\",\"metadata\":{\"version\":\"2.0.1-preview\",\"category\":\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The effect determines what happens when the policy - rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\",\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"},{\"properties\":{\"displayName\":\"A - vulnerability assessment solution should be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center's - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1485 - Delivery And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center regulatory compliance\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\",\"preview - \":true},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"regulatoryComplianceStandards\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - standards names\",\"description\":\"For all compliance standards, leave it - empty. For specific compliance standards, enter a list of standards names - separated by semicolons (';'). Compliance standards names are available through - the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center regulatory compliance assessment is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center regulatory compliance - assessment is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets\",\"exists\":false},{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"less\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceControlStates')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\",\"name\":\"regulatoryComplianceControlState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.state\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceControlState')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceControlStates'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceStandards')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\",\"name\":\"regulatoryComplianceStandard\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"id\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceStandard')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceStandards'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"notEquals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('regulatoryComplianceStandards'),parameters('regulatoryComplianceControlStates'))]\"},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\"},\"equals\":\"[mul(2,mul(length(parameters('regulatoryComplianceStandards')),length(parameters('regulatoryComplianceControlStates'))))]\"}]}]}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"regulatoryComplianceStandards\":{\"type\":\"array\"},\"regulatoryComplianceControlStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"regulatoryComplianceStandardsLength\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"regulatoryComplianceControlStatesLength\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"regulatoryComplianceStandardsLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsLength'), - 0), 1, variables('regulatoryComplianceStandardsLength'))]\",\"regulatoryComplianceControlStatesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceControlStatesLength'), - 0), 1, variables('regulatoryComplianceControlStatesLength'))]\",\"stateMap\":{\"Failed\":\"failed\",\"Passed\":\"passed\",\"Skipped\":\"skipped\",\"Unsupported\":\"unsupported\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center regulatory - compliance assessment is created or triggered\":\"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered\"},\"doesAllStatesSelected\":\"[if(equals(length(parameters('regulatoryComplianceControlStates')),length(variables('stateMap'))),bool('true'),bool('false'))]\",\"doesAllStandardsSelected\":\"[if(equals(variables('regulatoryComplianceStandardsLength'),0),bool('true'),bool('false'))]\",\"allRegulatoryComplianceRuleSets\":[],\"customStandardsOrCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsOrCustomStateRuleSetsArr\",\"count\":\"[if(not(variables('doesAllStandardsSelected')),variables('regulatoryComplianceStandardsLength'),if(not(variables('doesAllStatesSelected')),variables('regulatoryComplianceControlStatesLength'),1))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(not(variables('doesAllStandardsSelected')),'id',if(not(variables('doesAllStatesSelected')),'properties.state',json('null')))]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],json('null')))]\",\"operator\":\"[if(not(variables('doesAllStandardsSelected')),'Contains',if(not(variables('doesAllStatesSelected')),'Equals',json('null')))]\"}]}}]},\"customStandardsAndCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsAndCustomStateRuleSetsArr\",\"count\":\"[if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),mul(variables('regulatoryComplianceStandardsLength'),variables('regulatoryComplianceControlStatesLength')),1)]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[mod(div(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength')), variables('regulatoryComplianceStandardsLength'))],json('null'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.state\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[mod(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength'))],json('null'))]\",\"operator\":\"Equals\"}]}}]},\"sourceRuleSets\":\"[if(and(variables('doesAllStandardsSelected'),variables('doesAllStatesSelected')),variables('allRegulatoryComplianceRuleSets'),if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),variables('customStandardsAndCustomStateRuleSets').customStandardsAndCustomStateRuleSetsArr,variables('customStandardsOrCustomStateRuleSets').customStandardsOrCustomStateRuleSetsArr))]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"RegulatoryComplianceAssessment\",\"ruleSets\":\"[variables('sourceRuleSets')]\"}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"regulatoryComplianceStandards\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\"},\"regulatoryComplianceControlStates\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"509122b9-ddd9-47ba-a5f1-d0dac20be63c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1566 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"},{\"properties\":{\"displayName\":\"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"IPsecEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Encryption\",\"description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Integrity\",\"description\":\"IPsec Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Integrity\",\"description\":\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"DH - Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"PFS - Group\",\"description\":\"PFS Group\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\",\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\",\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\",\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\",\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\",\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\",\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1248 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1386 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"},{\"properties\":{\"displayName\":\"Bot - Service should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"},{\"properties\":{\"displayName\":\"Azure - Defender for Kubernetes should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Kubernetes provides real-time threat protection for containerized - environments and generates alerts for suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"},{\"properties\":{\"displayName\":\"Synapse - workspaces with SQL auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your Synapse workspace' SQL auditing to storage account destination to at - least 90 days. Confirm that you are meeting the necessary retention rules - for the regions in which you are operating. This is sometimes required for - compliance with regulatory standards.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"529ea018-6afc-4ed4-95bd-7c9ee47b00bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1642 - Network Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"},{\"properties\":{\"displayName\":\"Connection - throttling should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Azure SignalR Service - resource instead of the entire service, you'll reduce your data leakage risks. - Learn more about private links at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1467 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"},{\"properties\":{\"displayName\":\"[Preview]: - Firewall should be enabled on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Key - vault's firewall prevents unauthorized traffic from reaching your key vault - and provides an additional layer of protection for your secrets. Enable the - firewall to make sure that only traffic from allowed networks can access your - key vault.\",\"metadata\":{\"version\":\"1.0.2-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"},{\"properties\":{\"displayName\":\"Azure - Automation accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.Keyvault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56a5ee18-2ae6-4810-86f7-18e39ce5629b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"},{\"properties\":{\"displayName\":\"IP - firewall rules on Azure Synapse workspaces should be removed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces/firewallrules\"},{\"field\":\"name\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56fd377d-098c-4f02-8406-81eb055902b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"},{\"properties\":{\"displayName\":\"Windows - web servers should be configured to use secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\",\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"[SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - TLS version\",\"description\":\"The minimum TLS protocol version that should - be enabled. Windows web servers with lower TLS versions will be marked as - non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1162 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1054 - Session Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"},{\"properties\":{\"displayName\":\"Configure - disk access resources with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disk access resources in this region are validated and private endpoints are - created in this region.\"}},\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[concat('pe','-',field('name'))]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[parameters('name')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"disks\"]}}],\"manualPrivateLinkServiceConnections\":[]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Detailed Tracking' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit - Process Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Process Termination\",\"description\":\"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"},{\"properties\":{\"displayName\":\"CosmosDB - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your CosmosDB account, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1547 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which Windows Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Port Number\",\"description\":\"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Baud Rate\",\"description\":\"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1573 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1463 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1425 - Timely Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"},{\"properties\":{\"displayName\":\"Operating - system version should be the most current version for your cloud service roles\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a minimum password age - of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1032 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not restrict the minimum password - length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1005 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1105 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1433 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"},{\"properties\":{\"displayName\":\"Container - registries should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.2\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\",\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"},{\"properties\":{\"displayName\":\"Ensure - WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Remote Host Name\",\"description\":\"Specifies the Domain Name System (DNS) - name or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Port\",\"description\":\"The TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Should connect to remote host\",\"description\":\"Must be 'True' or 'False'. - 'True' indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. 'False' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"},\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"},\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Security'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be enabled in virtual machine scale sets for listed - virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1671 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1067 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"},{\"properties\":{\"displayName\":\"External - accounts with write permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1483 - Water Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1362 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1665 - Process Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Function App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"},{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1208 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: West India, South India, - Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\",\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"},{\"properties\":{\"displayName\":\"[Preview]: - Private endpoint should be configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use user-assigned managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers' security posture and protect them from attacks.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"},{\"properties\":{\"displayName\":\"External - accounts with read permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityLinuxAgent\":\"[concat('deployAzureSecurityLinuxAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityLinuxAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityLinuxAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityLinuxAgent\",\"typeHandlerVersion\":\"2.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f8eb305-9c9f-4abe-9bb0-df220d9faba2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Windows virtual machines on which the Windows Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"2.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1663 - Protection Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Object Access'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"},{\"properties\":{\"displayName\":\"Storage - Accounts should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows web servers that are not using secure communication - protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Data Security on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\":\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - variables('serverResourceGroupName'), parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', - variables('uniqueStorage')))]\"},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\":\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\":{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\":[\"[concat('Microsoft.Storage/storageAccounts/', - variables('storageName'))]\",\"[concat('Microsoft.Sql/servers/', parameters('serverName'), - '/securityAlertPolicies/Default')]\"]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"},{\"properties\":{\"displayName\":\"Configure - time zone on Windows machines.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"configurationStores\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"614ffa75-862c-456e-ad8b-eaa1b0844b07\"},{\"properties\":{\"displayName\":\"Bot - Service endpoint should be a valid HTTPS URI\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service - Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\":\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\",\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\",\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1110 - Audit Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1415 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a4d60b-7326-440e-8051-9f94394d4dd1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1153 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System objects'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the Log Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected - workspace IDs\",\"description\":\"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"},{\"properties\":{\"displayName\":\"Modify - Azure SignalR Service resources to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"Audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"value\":\"Deny\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"value\":[]}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62a3ae95-8169-403e-a2d2-b82141448092\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1660 - Session Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"},{\"properties\":{\"displayName\":\"Audit - Windows machines network connectivity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote - Host Name\",\"description\":\"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Port\",\"description\":\"The - TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Should - connect to remote host\",\"description\":\"The machine will be non-compliant - if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"},{\"properties\":{\"displayName\":\"Authentication - to Linux machines should require SSH keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1002 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1498 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1185 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Devices'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Devices: Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"64d314f6-6062-4780-a861-c23e8951bee5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit missing blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"},{\"properties\":{\"displayName\":\"Azure - Defender for SQL servers on machines should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1261 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"},{\"properties\":{\"displayName\":\"Service - principals should be used to protect your subscriptions instead of management - certificates\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1319 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedKey\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Network' for guest logons, simultaneous connections, network bridge, - ICS, and multicast name resolution. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable - insecure guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn - off multicast name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - insecure guest logons\",\"description\":\"Specifies whether the SMB client - will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked service resource type should be in allow list\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"allowedLinkedServiceResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed linked service resource types\",\"description\":\"The list of allowed - linked service resource types.\"},\"allowedValues\":[\"AdlsGen2CosmosStructuredStream\",\"AdobeExperiencePlatform\",\"AdobeIntegration\",\"AmazonRedshift\",\"AmazonS3\",\"AzureBlobFS\",\"AzureBlobStorage\",\"AzureDataExplorer\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureDataShare\",\"AzureFileStorage\",\"AzureKeyVault\",\"AzureMariaDB\",\"AzureMySql\",\"AzurePostgreSql\",\"AzureSearch\",\"AzureSqlDatabase\",\"AzureSqlDW\",\"AzureSqlMI\",\"AzureTableStorage\",\"Cassandra\",\"CommonDataServiceForApps\",\"CosmosDb\",\"CosmosDbMongoDbApi\",\"Db2\",\"DynamicsCrm\",\"FileServer\",\"FtpServer\",\"GitHub\",\"GoogleCloudStorage\",\"Hdfs\",\"Hive\",\"HttpServer\",\"Informix\",\"Kusto\",\"MicrosoftAccess\",\"MySql\",\"Netezza\",\"Odata\",\"Odbc\",\"Office365\",\"Oracle\",\"PostgreSql\",\"Salesforce\",\"SalesforceServiceCloud\",\"SapBw\",\"SapHana\",\"SapOpenHub\",\"SapTable\",\"Sftp\",\"SharePointOnlineList\",\"Snowflake\",\"SqlServer\",\"Sybase\",\"Teradata\",\"HDInsightOnDemand\",\"HDInsight\",\"AzureDataLakeAnalytics\",\"AzureBatch\",\"AzureFunction\",\"AzureML\",\"AzureMLService\",\"MongoDb\",\"GoogleBigQuery\",\"Impala\",\"ServiceNow\",\"Dynamics\",\"AzureDatabricks\",\"AmazonMWS\",\"SapCloudForCustomer\",\"SapEcc\",\"Web\",\"MongoDbAtlas\",\"HBase\",\"Spark\",\"Phoenix\",\"PayPal\",\"Marketo\",\"Responsys\",\"SalesforceMarketingCloud\",\"Presto\",\"Square\",\"Xero\",\"Jira\",\"Magento\",\"Shopify\",\"Concur\",\"Hubspot\",\"Zoho\",\"Eloqua\",\"QuickBooks\",\"Couchbase\",\"Drill\",\"Greenplum\",\"MariaDB\",\"Vertica\",\"MongoDbV2\",\"OracleServiceCloud\",\"GoogleAdWords\",\"RestService\",\"DynamicsAX\",\"AzureDataCatalog\",\"AzureDatabricksDeltaLake\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"notIn\":\"[parameters('allowedLinkedServiceResourceTypes')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6809a3d0-d354-42fb-b955-783d207c62a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the Log Analytics agent - is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Connected workspace IDs\",\"description\":\"A semicolon-separated list of - the workspace IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"},\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1597 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1588 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1727 - Memory Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1652 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to exclude\",\"description\":\"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1244 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available\",\"description\":\"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to 'Non-Compliant' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to 'Compliant' will make these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"},\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1211 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1653 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"},{\"properties\":{\"displayName\":\"Deprecated - accounts should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Service Bus in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1031 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL servers on machine should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f97aa83c-9b63-4f9a-99f6-b22c4398f936\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\"},{\"properties\":{\"displayName\":\"Not - allowed resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that cannot be deployed.\",\"displayName\":\"Not allowed - resource types\",\"strongType\":\"resourceTypes\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},{\"value\":\"[field('type')]\",\"exists\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Azure Kubernetes Service should be connected to\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AllMetrics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-apiserver\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-apiserver - - Enabled\",\"description\":\"Whether to stream kube-apiserver logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit - - Enabled\",\"description\":\"Whether to stream kube-audit logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-controller-manager\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-controller-manager - - Enabled\",\"description\":\"Whether to stream kube-controller-manager logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-scheduler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-scheduler - - Enabled\",\"description\":\"Whether to stream kube-scheduler logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"cluster-autoscaler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"cluster-autoscaler - - Enabled\",\"description\":\"Whether to stream cluster-autoscaler logs to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit-admin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit-admin - - Enabled\",\"description\":\"Whether to stream kube-audit-admin logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"guard\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"guard - - Enabled\",\"description\":\"Whether to stream guard logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AllMetrics\":{\"type\":\"string\"},\"kube-apiserver\":{\"type\":\"string\"},\"kube-audit\":{\"type\":\"string\"},\"kube-controller-manager\":{\"type\":\"string\"},\"kube-scheduler\":{\"type\":\"string\"},\"cluster-autoscaler\":{\"type\":\"string\"},\"kube-audit-admin\":{\"type\":\"string\"},\"guard\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetrics')]\"}],\"logs\":[{\"category\":\"kube-apiserver\",\"enabled\":\"[parameters('kube-apiserver')]\"},{\"category\":\"kube-audit\",\"enabled\":\"[parameters('kube-audit')]\"},{\"category\":\"kube-controller-manager\",\"enabled\":\"[parameters('kube-controller-manager')]\"},{\"category\":\"kube-scheduler\",\"enabled\":\"[parameters('kube-scheduler')]\"},{\"category\":\"cluster-autoscaler\",\"enabled\":\"[parameters('cluster-autoscaler')]\"},{\"category\":\"kube-audit-admin\",\"enabled\":\"[parameters('kube-audit-admin')]\"},{\"category\":\"guard\",\"enabled\":\"[parameters('guard')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"guard\":{\"value\":\"[parameters('guard')]\"},\"AllMetrics\":{\"value\":\"[parameters('AllMetrics')]\"},\"kube-apiserver\":{\"value\":\"[parameters('kube-apiserver')]\"},\"kube-audit\":{\"value\":\"[parameters('kube-audit')]\"},\"kube-scheduler\":{\"value\":\"[parameters('kube-scheduler')]\"},\"kube-controller-manager\":{\"value\":\"[parameters('kube-controller-manager')]\"},\"cluster-autoscaler\":{\"value\":\"[parameters('cluster-autoscaler')]\"},\"kube-audit-admin\":{\"value\":\"[parameters('kube-audit-admin')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c66c325-74c8-42fd-a286-a74b0e2939d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"},{\"properties\":{\"displayName\":\"Function - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1651 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts with private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint group id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"automationAccounts-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dd01e4f-1be1-4e80-9d0b-d109e04cb064\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"},{\"properties\":{\"displayName\":\"Email - notification for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\",\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1586 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1530 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"},{\"properties\":{\"displayName\":\"Storage - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1460 - Access Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1320 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"},{\"properties\":{\"displayName\":\"Configure - diagnostic settings for storage accounts to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"category\":\"Storage\",\"version\":\"1.3.0\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the storage account should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"servicesToDeploy\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Storage - services to deploy\",\"description\":\"List of Storage services to deploy\"},\"allowedValues\":[\"storageAccounts\",\"blobServices\",\"fileServices\",\"tableServices\",\"queueServices\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"StorageDelete\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageDelete - - Enabled\",\"description\":\"Whether to stream StorageDelete logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageWrite\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageWrite - - Enabled\",\"description\":\"Whether to stream StorageWrite logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageRead\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageRead - - Enabled\",\"description\":\"Whether to stream StorageRead logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Transaction\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Transaction - - Enabled\",\"description\":\"Whether to stream Transaction logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"servicesToDeploy\":{\"type\":\"array\"},\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Transaction\":{\"type\":\"string\"},\"StorageRead\":{\"type\":\"string\"},\"StorageWrite\":{\"type\":\"string\"},\"StorageDelete\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'blobServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'fileServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'tableServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'queueServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'storageAccounts')]\",\"type\":\"Microsoft.Storage/storageAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"Transaction\":{\"value\":\"[parameters('Transaction')]\"},\"StorageDelete\":{\"value\":\"[parameters('StorageDelete')]\"},\"StorageWrite\":{\"value\":\"[parameters('StorageWrite')]\"},\"StorageRead\":{\"value\":\"[parameters('StorageRead')]\"},\"servicesToDeploy\":{\"value\":\"[parameters('servicesToDeploy')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f8f98a4-f108-47cb-8e98-91a0d85cd474\"},{\"properties\":{\"displayName\":\"Storage - accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"},{\"properties\":{\"displayName\":\"Workbooks - should be saved to storage accounts that you control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Audit, - Deny, or Disable the execution of this policy\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"microsoft.insights/workbooks\"},{\"field\":\"microsoft.insights/workbooks/storageUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fc8115b-2008-441f-8c61-9b722c1e537f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/topics/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"topic\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Server'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"OS - and data disks should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"value\":\"[length(field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"true\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]'))]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"anyOf\":[{\"count\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]\",\"where\":{\"value\":\"[length(current('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"exists\":\"true\"}}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"702dd420-7fcc-42c5-afe8-4026edd20fe0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Components'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Send file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow Telemetry\",\"description\":\"Specifies configuration of the amount - of diagnostic and usage data reported to Microsoft. The data is transmitted - securely and sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow unencrypted traffic\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) service sends and receives unencrypted messages - over the network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always install with elevated privileges\",\"description\":\"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Automatically send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Default consent\",\"description\":\"Specifies setting of the default - consent handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Windows SmartScreen\",\"description\":\"Specifies how to manage - the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow Digest authentication\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow WinRM from storing RunAs credentials\",\"description\":\"Specifies - whether the Windows Remote Management (WinRM) service will not allow RunAs - credentials to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Do not allow passwords to be saved\",\"description\":\"Specifies whether to - prevent Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Security: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set client connection encryption level\",\"description\":\"Specifies whether - to require the use of a specific encryption level to secure communications - between client computers and RD Session Host servers during Remote Desktop - Protocol (RDP) connections. This policy only applies when you are using native - RDP encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Setup: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off Data Execution Prevention for Explorer\",\"description\":\"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Specify the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\":{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\":{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\":{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"},\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"},\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\":{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1509 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1541 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1481 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the DSC configuration is not - compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Network'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"},{\"properties\":{\"displayName\":\"[Preview]: - Windows machines should meet requirements of the Azure Security Center baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureWindowsBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureWindowsBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that allow re-use of the previous - 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"},{\"properties\":{\"displayName\":\"Add - a tag to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Synapse workspace, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"},{\"properties\":{\"displayName\":\"Configure - App Configuration to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for App Configuration so that it isn't accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73290fa2-dfa7-4bbb-945d-a5e23b75df2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1456 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"For all recommendations, leave empty. For specific - recommendations, enter a list of recommendation IDs separated by semicolons - (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Determines recommendation severities. Example: - High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - states\",\"description\":\"Determines recommendation states. Recommendations - with unhealthy state require your attention to resolve. When a recommendation - state is healthy, it no longer applies to the resource as Security Center - detects it as healthy. A recommendation is not-applicable if, for example, - it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"},\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not - Applicable\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Recommendation is - created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(if(equals(length(parameters('recommendationNames')),0),array('Microsoft.Security/assessments'),parameters('recommendationNames')),parameters('recommendationSeverities'),if(contains(parameters('recommendationStates'),'Not - Applicable'),union(parameters('recommendationStates'), array('notapplicable')),parameters('recommendationStates')))]\"},{\"count\":{\"value\":\"[parameters('recommendationSeverities')]\",\"name\":\"recommendationSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.metadata.severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationSeverity')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationSeverities'))]\"},{\"count\":{\"value\":\"[parameters('recommendationStates')]\",\"name\":\"recommendationState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.status.code\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[replace(current('recommendationState'), - ' ','')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationSeverities')))]\"}},\"equals\":\"[length(parameters('recommendationStates'))]\"},{\"count\":{\"value\":\"[parameters('recommendationNames')]\",\"name\":\"recommendationName\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"name\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationName')]\"}]}},\"equals\":\"[mul(length(parameters('recommendationSeverities')),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationNames'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\":\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\":\"[if(equals(variables('recommendationStatesLength'), - 0), 1, variables('recommendationStatesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\",\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\":\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not - Applicable\":\"notapplicable\"},\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When - an Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), - mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'Microsoft.Security/assessments', parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationName')), variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\",\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"},{\"properties\":{\"displayName\":\"API - Management service should use a SKU that supports virtual networks\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for Azure API Management service.\",\"displayName\":\"Allowed - SKUs\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Isolated\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"not\":{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73ef9241-5d81-4cd4-b483-8443d1730fe5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1581 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"},{\"properties\":{\"displayName\":\"Storage - accounts should be limited by allowed SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Restrict - the set of storage account SKUs that your organization can deploy.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for storage accounts.\",\"displayName\":\"Allowed - SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public - IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Diagnostic - setting name\",\"description\":\"Profile name for the Azure diagnostic settings - resource\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The target Log Analytics workspace - for the diagnostic settings\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Logs\",\"description\":\"Enable Logs - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Metrics\",\"description\":\"Enable Metrics - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/publicIPAddresses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('LogsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('MetricsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('name'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"DDoSProtectionNotifications\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationFlowLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationReports\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('name'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"name\":{\"value\":\"[field('name')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752154a7-1e0f-45c6-a880-ac75a7e4f648\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit enabling of diagnostic logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"},{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"},{\"properties\":{\"displayName\":\"Configure - Azure Migrate resources to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Migrate\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"Default\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/assessmentProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/migrateProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.OffAzure/masterSites\"}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"default-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7590a335-57cf-4c95-babd-ecbc8fafeb1f\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1459 - Access Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Vulnerabilities should be remediated by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Azure SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"},{\"properties\":{\"displayName\":\"Audit - delegation of scopes to a managing tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"},{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1508 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"},{\"properties\":{\"displayName\":\"Azure - subscriptions should have a log profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory should use a Git repository for source control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"exists\":\"false\"},{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77d40665-3120-4348-b539-3192ec808307\"},{\"properties\":{\"displayName\":\"Virtual - network firewall rule on Azure SQL Database should be enabled to allow traffic - from the specified subnet\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\",\"description\":\"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your Azure Cache for Redis instances, data leakage risks are reduced. Learn - more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"amlworkspace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7838fd83-5cbb-4b5d-888c-bfa240972597\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1010 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1647 - Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your CosmosDB account - isn't exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1384 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Port Number\",\"description\":\"An integer indicating the COM port to - be used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Baud Rate\",\"description\":\"An integer indicating the baud rate to be - used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"},\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\":{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1093 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1708 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1289 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints connected to App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"configurationStores\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-azconfig-io\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a860e27-9ca2-4fc6-822d-c2d248c300df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1687 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"},{\"properties\":{\"displayName\":\"Allow - managing tenant ids to onboard through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\":{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - tenants\",\"description\":\"List of the tenants IDs that can be onboarded - through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"},{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\",\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1492 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"},{\"properties\":{\"displayName\":\"Azure - Attestation providers should use private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Attestation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Attestation/attestationProviders\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b256a2d-058b-41f8-bed9-3f870541c40a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"},{\"properties\":{\"displayName\":\"Resource - logs in Virtual Machine Scale Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - AKS Clusters\",\"description\":\"Whether to include AKS Clusters to resource - logs extension - True or False\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1051 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1279 - Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should reside within a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"},{\"properties\":{\"displayName\":\"Both - operating systems and data disks in Azure Kubernetes Service clusters should - be encrypted by customer-managed keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encrypting - OS and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d7be79c-23ba-4033-84dd-45e2a5ccdd67\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d890f7f-100c-473d-baa1-2777e2266535\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1471 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1011 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have not restarted within the specified - number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure SQL Database server to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the server should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"logAnalyticsWorkspaceId\":{\"type\":\"string\"}},\"variables\":{\"diagnosticSettingsName\":\"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1\"},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"name\":\"[concat(parameters('serverName'),'/master/microsoft.insights/',variables('diagnosticSettingsName'))]\",\"apiVersion\":\"2017-05-01-preview\",\"properties\":{\"name\":\"[variables('diagnosticSettingsName')]\",\"workspaceId\":\"[parameters('logAnalyticsWorkspaceId')]\",\"logs\":[{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":true,\"retentionPolicy\":{\"days\":0,\"enabled\":false}}]}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[concat('Microsoft.Sql/servers/', - parameters('serverName'),'/databases/master/providers/microsoft.insights/diagnosticSettings/', - variables('diagnosticSettingsName'))]\"],\"properties\":{\"state\":\"Enabled\",\"isAzureMonitorTargetEnabled\":true}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"logAnalyticsWorkspaceId\":{\"value\":\"[parameters('logAnalyticsWorkspaceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ea8a143-05e3-4553-abfe-f56bef8b0b70\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1520 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Privilege Use'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"},{\"properties\":{\"displayName\":\"Audit - diagnostic setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - diagnostic setting for selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - Types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"},{\"properties\":{\"displayName\":\"Azure - Defender for Azure SQL Database servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"},{\"properties\":{\"displayName\":\"SQL - Auditing settings should have Action-Groups configured to capture critical - activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"},{\"properties\":{\"displayName\":\"Deploy - - Configure suppression rules for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0\"},\"parameters\":{\"alertType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - Type\",\"description\":\"Enter the alert type field of the alert you would - like to suppress. Alert type could be queried via alerts api or PowerShell, - learn more at https://aka.ms/asc-alertsPwoershell\"}},\"suppressionRuleName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Rule - name\",\"description\":\"Rule names must begin with a letter or a number, - be between 2 and 50 characters, and contain no symbols other than dashes ( - - ) or underscores ( _ )\"}},\"state\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"State\"},\"allowedValues\":[\"Enabled\",\"Disabled\"]},\"reason\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Reason\"},\"allowedValues\":[\"The - severity of the alert should be lower\",\"The alert detecting too many normal - activities\",\"The alert is too noisy - hitting on the same resources too - many times\",\"The resource isn't relevant for me to monitor\",\"The alert - detecting normal activity on specific entity\",\"The alert isn't actionable - - not clear how to investigate the threat\",\"Other\"]},\"comment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Comment\"}},\"expirationDate\":{\"type\":\"DateTime\",\"metadata\":{\"displayName\":\"Expiration - date\"}},\"entityOneType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entityOneOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entityOneValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}},\"entitySecondType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entitySecondOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entitySecondValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"name\":\"[parameters('suppressionRuleName')]\",\"existenceScope\":\"subscription\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"location\":\"centralus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"alertType\":{\"type\":\"String\"},\"suppressionRuleName\":{\"type\":\"String\"},\"state\":{\"type\":\"String\"},\"reason\":{\"type\":\"String\"},\"comment\":{\"type\":\"String\"},\"expirationDate\":{\"type\":\"String\"},\"entityOneType\":{\"type\":\"String\"},\"entityOneOp\":{\"type\":\"String\"},\"entityOneValue\":{\"type\":\"String\"},\"entitySecondType\":{\"type\":\"String\"},\"entitySecondOp\":{\"type\":\"String\"},\"entitySecondValue\":{\"type\":\"String\"}},\"variables\":{\"reasonToEnum\":{\"The - severity of the alert should be lower\":\"AlertSeverityTooHigh\",\"The alert - detecting too many normal activities\":\"FalsePositive\",\"The alert is too - noisy - hitting on the same resources too many times\":\"Noise\",\"The resource - isn't relevant for me to monitor\":\"NotRelevant\",\"The alert detecting normal - activity on specific entity\":\"SpecificEntityFalsePositive\",\"The alert - isn't actionable - not clear how to investigate the threat\":\"Unclear\",\"Other\":\"Other\"},\"entityNameToType\":{\"User - account - name\":\"entities.account.name\",\"User account - AAD user ID\":\"entities.account.aaduserid\",\"User - account - UPN suffix\":\"entities.account.upnsuffix\",\"Azure resource ID\":\"entities.azureresource.resourceid\",\"File - - name\":\"entities.file.name\",\"File - directory\":\"entities.file.directory\",\"File - hash\":\"entities.filehash.value\",\"Host - name\":\"entities.host.hostname\",\"Host - - Azure ID\":\"entities.host.azureid\",\"Host - DNS Domain\":\"entities.host.dnsdomain\",\"Host - - OMS agent ID\":\"entities.host.omsagentid\",\"IP address\":\"entities.ip.address\",\"Malware - - name\":\"entities.malware.name\",\"Malware - category\":\"entities.malware.category\",\"Process - - command line: \":\"entities.process.commandline\"},\"entityOperationNameToOperation\":{\"Equals\":\"in\",\"Contains\":\"contains\"}},\"resources\":[{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"apiVersion\":\"2019-01-01-preview\",\"name\":\"[parameters('suppressionRuleName')]\",\"location\":\"centralus\",\"properties\":{\"alertType\":\"[parameters('alertType')]\",\"state\":\"[parameters('state')]\",\"reason\":\"[variables('reasonToEnum')[parameters('reason')]]\",\"comment\":\"[parameters('comment')]\",\"expirationDateUtc\":\"[parameters('expirationDate')]\",\"suppressionAlertsScope\":\"[if(and(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue')))), - null(), json(concat('{ \\\"allOf\\\": [', if(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), '', - concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entityOneType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entityOneOp')], - '\\\":', if(equals(parameters('entityOneOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entityOneValue'), '\\\"', if(equals(parameters('entityOneOp'), - 'Equals'), ']', ''), ' }', if(or(empty(parameters('entitySecondType')), empty(parameters('entitySecondOp')), - empty(parameters('entitySecondValue'))), '', ', '))), if(or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue'))), - '', concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entitySecondType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entitySecondOp')], - '\\\":', if(equals(parameters('entitySecondOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entitySecondValue'), '\\\"', if(equals(parameters('entitySecondOp'), - 'Equals'), ']', ''), ' } ')), '] }')))]\"}}]},\"parameters\":{\"alertType\":{\"value\":\"[parameters('alertType')]\"},\"suppressionRuleName\":{\"value\":\"[parameters('suppressionRuleName')]\"},\"state\":{\"value\":\"[parameters('state')]\"},\"reason\":{\"value\":\"[parameters('reason')]\"},\"comment\":{\"value\":\"[parameters('comment')]\"},\"expirationDate\":{\"value\":\"[parameters('expirationDate')]\"},\"entityOneType\":{\"value\":\"[parameters('entityOneType')]\"},\"entityOneOp\":{\"value\":\"[parameters('entityOneOp')]\"},\"entityOneValue\":{\"value\":\"[parameters('entityOneValue')]\"},\"entitySecondType\":{\"value\":\"[parameters('entitySecondType')]\"},\"entitySecondOp\":{\"value\":\"[parameters('entitySecondOp')]\"},\"entitySecondValue\":{\"value\":\"[parameters('entitySecondValue')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80e94a21-c6cd-4c95-a2c7-beb5704e61c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1505 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1614 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'User Rights Assignment'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on locally\",\"description\":\"Specifies which - users or groups can interactively log on to the computer. Users who attempt - to log on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the system time\",\"description\":\"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the time zone\",\"description\":\"Specifies - which users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may create a token object\",\"description\":\"Specifies - which users and groups are permitted to create an access token, which may - provide elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied local logon\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - User and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may shut down the system\",\"description\":\"Specifies - which users and groups who are logged on locally to the computers in your - environment are permitted to shut down the operating system with the Shut - Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1287 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"},{\"properties\":{\"displayName\":\"Azure - Data Explorer encryption at rest should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyName\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81e74cea-30fd-40d5-802f-d72103c2aaaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1448 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1452 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - System' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\":\"Audit - Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Other System Events\",\"description\":\"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1262 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1008 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to a new recovery services - vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally include virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"value\":\"[empty(parameters('inclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('inclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83644c87-93dd-49fe-bf9f-6aff8fd0834e\"},{\"properties\":{\"displayName\":\"Resource - logs in Event Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"},{\"properties\":{\"displayName\":\"Network - interfaces should not have public IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\",\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"},{\"properties\":{\"displayName\":\"Managed - disks should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that a managed disk isn't - exposed on the public internet. Creating private endpoints can limit exposure - of managed disks. Learn more at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"DenyAll\",\"AllowPrivate\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8405fdab-1faf-48aa-b702-999c9c172094\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1382 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"},{\"properties\":{\"displayName\":\"Configure - managed disks to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your managed disk resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disks in this region are validated and disk access resource would be associated - with them.\"}},\"diskAccessId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked\",\"strongType\":\"Microsoft.Compute/diskAccesses\",\"description\":\"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"AllowPrivate\",\"DenyAll\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/diskAccessId\",\"value\":\"[parameters('diskAccessId')]\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"value\":\"AllowPrivate\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8426280e-b5be-43d9-979e-653d12a08638\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1098 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\":\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain - Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) that - the Windows machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Components' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send - file samples when further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\":\"Allow - indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow - unencrypted traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always - install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\":\"Always - prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\":\"Configure - Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\":\"Configure - Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\":\"Disallow - Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\":\"Do - not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\":\"Set - client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\":\"Specify - the interval to check for definition updates;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send - file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - install with elevated privileges\",\"description\":\"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically - send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Default consent\",\"description\":\"Specifies setting of the default consent - handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Windows SmartScreen\",\"description\":\"Specifies how to manage the behavior - of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning - users before running unrecognized programs downloaded from the Internet. Some - information is sent to Microsoft about files and programs run on PCs with - this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - Digest authentication\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - WinRM from storing RunAs credentials\",\"description\":\"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Do - not allow passwords to be saved\",\"description\":\"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - client connection encryption level\",\"description\":\"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off Data Execution Prevention for Explorer\",\"description\":\"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Specify - the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1580 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your IoT Hub device provisioning instance so that - it's not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"859dfc91-ea35-43a6-8256-31271c363794\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory integration runtime should have a limit for number of cores\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - manage your resources and costs, limit the number of cores for an integration - runtime.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"maxCores\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed max number of cores\",\"description\":\"The max number of cores allowed - for dataflow.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"greater\":\"[parameters('maxCores')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85bb39b5-2f66-49f8-9306-77da3ac5130f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1326 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should have firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"},\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Server'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"},{\"properties\":{\"displayName\":\"Deploy - SQL DB transparent data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables - transparent data encryption on SQL databases\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), - '/current')]\",\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"},{\"properties\":{\"displayName\":\"System - updates should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints that connect to Azure Data Factory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"listOfGroupIds\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of Group Ids that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - Group Ids\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"in\":\"[parameters('listOfGroupIds')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"dataFactory-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86cd96e1-1745-420d-94d4-d3f2fe415aa4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should use a customer-managed key to encrypt the device unlock - password\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support customer-managed key - encryption key\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType\",\"notEquals\":\"CustomerManaged\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86efb160-8de7-451d-bc08-5d475b0aadae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"},{\"properties\":{\"displayName\":\"Require - a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - existence of a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Privilege Use' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Devices' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: - Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Control Panel'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"},{\"properties\":{\"displayName\":\"Azure - Stream Analytics jobs should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy\",\"equals\":\"SystemAccount\"},{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87ba29ef-1ab3-4d82-b763-87fcd4f531f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1317 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1501 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"},{\"properties\":{\"displayName\":\"Network - interfaces should disable IP forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure's check of the source and destination for - a network interface. This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1215 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"},{\"properties\":{\"displayName\":\"SQL - servers with auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Sql/servers/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1411 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid domains to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898e9824-104c-4965-8e0e-5197588fa5d4\"},{\"properties\":{\"displayName\":\"App - Configuration should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you'll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/sku.name\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89c8a434-18f0-402c-8147-630a8dea54e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System settings'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should deploy into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"field\":\"Microsoft.ContainerInstance/containerGroups/networkProfile.id\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8af8f826-edcb-4178-b35f-851ea6fea615\"},{\"properties\":{\"displayName\":\"Azure - Data Factory should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Data Factory, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1534 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1170 - Penetration Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Firewall Properties'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1683 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - a required tag and its value on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1324 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1288 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1250 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Arc enabled Kubernetes clusters should have Azure Defender's extension - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender's extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Object Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File Share\",\"description\":\"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"},\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"},\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\":{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\",\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to enable private endpoint connections\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - to use for Private Endpoints\",\"description\":\"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].id\",\"exists\":\"false\"}},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/privateEndpointConnections\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"subnetlocation\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"name\":\"[variables('privateEndpointName')]\",\"location\":\"[parameters('subnetlocation')]\",\"properties\":{\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"sqlServer\"],\"privateLinkServiceConnectionState\":{\"status\":\"Approved\",\"description\":\"Auto-approved\",\"actionsRequired\":\"None\"}}}],\"manualPrivateLinkServiceConnections\":[],\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"customDnsConfigs\":[]}}]},\"parameters\":{\"name\":{\"value\":\"[parameters('name')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"subnetlocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e8ca470-d980-4831-99e6-dc70d9f6af87\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1517 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1668 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1147 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not store passwords using - reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1550 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Firewall - Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Firewall Properties'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Domain: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Private: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Public: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Modules\",\"description\":\"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"},\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1355 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91678b7c-d721-4fc5-b179-3cdf74e96b1c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Components'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"},{\"properties\":{\"displayName\":\"Resource - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91a78b24-f231-4a8a-8da9-02c35b2b6510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"},{\"properties\":{\"displayName\":\"Configure - Dependency agent to be enabled on Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"resources\":[{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"apiVersion\":\"2020-03-11-preview\",\"name\":\"[concat(parameters('vmName'), - '/', variables('DaExtensionName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"},{\"properties\":{\"displayName\":\"MFA - should be enabled accounts with write permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1290 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that contain certificates expiring within - the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not contain the specified certificates in Trusted - Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\\\LocalMachine\\\\Root) does not contain one - or more of the certificates listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints\",\"description\":\"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain all the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to include\",\"description\":\"A semicolon-separated list of members - that should be included in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"},\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1379 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1371 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Management' for auditing application, security, and - user group management, and other management events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"},{\"properties\":{\"displayName\":\"Virtual - networks should be protected by Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Audit\",\"Disabled\"]},\"ddosPlan\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DDoS - Protection Plan\",\"description\":\"DDoS Protection Plan resource to be associated - to the virtual networks\",\"strongType\":\"Microsoft.Network/ddosProtectionPlans\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"notEquals\":true},{\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"value\":true},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id\",\"value\":\"[parameters('ddosPlan')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Key Vault should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AuditEventEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AuditEvent - - Enabled\",\"description\":\"Whether to stream AuditEvent logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AllMetricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AuditEventEnabled\":{\"type\":\"string\"},\"AllMetricsEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetricsEnabled')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('AuditEventEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"AuditEventEnabled\":{\"value\":\"[parameters('AllMetricsEnabled')]\"},\"AllMetricsEnabled\":{\"value\":\"[parameters('AuditEventEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"951af2fa-529b-416e-ab6e-066fd85ac459\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1526 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"},{\"properties\":{\"displayName\":\"Automation - accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1163 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"},{\"properties\":{\"displayName\":\"Require - a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - existence of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"},{\"properties\":{\"displayName\":\"App - Configuration should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - System' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always - use classic logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\":\"Enable - Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\":\"Turn on - convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - use classic logon\",\"description\":\"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start - Driver Initialization Policy\",\"description\":\"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1453 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"},{\"properties\":{\"displayName\":\"Add - a tag to subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96d9a89c-0d67-41fc-899d-2b9599f76a24\"},{\"properties\":{\"displayName\":\"HPC - Cache accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageCache/caches\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"970f84d8-71b6-4091-9979-ace7e3fb6dbb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - MSS (Legacy)'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Policy Change'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authentication Policy Change\",\"description\":\"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authorization Policy Change\",\"description\":\"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\":{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\":{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"},\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1136 - Audit Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1378 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid domain instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\",\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Network'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable insecure guest logons\",\"description\":\"Specifies whether the SMB - client will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\":{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1076 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines without a given tag to a new recovery - services vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally exclude virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Name\",\"description\":\"Name of the tag to use for excluding - VMs from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Values\",\"description\":\"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1102 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"},{\"properties\":{\"displayName\":\"Azure - Batch account should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Batch account's - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"},{\"properties\":{\"displayName\":\"Virtual - network injection should be enabled for Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1049 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1563 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1462 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"},{\"properties\":{\"displayName\":\"Microsoft - IaaSAntimalware extension should be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/provisioningServices\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"greaterOrEquals\":1},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotDps\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b75ea5b-c796-4c99-aaaf-21c204daac43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1236 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1525 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1138 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1135 - Non-Repudiation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9cee519f-d9c1-4fd9-9f79-24ec3449ed30\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1489 - Location Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1322 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1233 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1259 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"},{\"properties\":{\"displayName\":\"All - network ports should be restricted on network security groups associated to - your virtual machine\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified some of your network security groups' inbound - rules to be too permissive. Inbound rules should not allow access from 'Any' - or 'Internet' ranges. This can potentially enable attackers to target your - resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"},{\"properties\":{\"displayName\":\"Application - definition for Managed Application should use customer provided storage account\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed - Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\":\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1500 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1504 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1494 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1187 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not set to the specified time - zone\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"},{\"properties\":{\"displayName\":\"Configure - Storage account to use a private link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"The subnetId that private endpoint - connections should link to\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access\"},\"allowedValues\":[\"blob\",\"blob_secondary\",\"table\",\"table_secondary\",\"queue\",\"queue_secondary\",\"file\",\"web\",\"web_secondary\",\"dfs\",\"dfs_secondary\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"in\":[\"StorageV2\",\"BlobStorage\",\"BlockBlobStorage\",\"FileStorage\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":\"[array(parameters('targetSubResource'))]\",\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f766f00-8d11-464e-80e1-4091d7874074\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1354 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the Log Analytics agent is not - connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search service should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or Deny the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"equals\":\"free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a049bf77-880b-470f-ba6d-9f21c530cf83\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1145 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"},{\"properties\":{\"displayName\":\"Allowed - resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support 'tags' and 'location' will be affected - by this policy. To restrict all resources please duplicate this policy and - change the 'mode' to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that can be deployed.\",\"displayName\":\"Allowed resource - types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1245 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"},{\"properties\":{\"displayName\":\"Security - Center standard pricing tier should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"field\":\"Microsoft.EventHub/namespaces/clusterArmId\",\"exists\":\"true\"},{\"not\":{\"field\":\"Microsoft.EventHub/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Logic Apps in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1612 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1059 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2a5b911-5617-447e-a49e-59dbe0e0434b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1532 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not restrict the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1238 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"},{\"properties\":{\"displayName\":\"Configure - Container registries to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Container Registry resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3701552-92ea-433e-9d17-33b7f1208fc9\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine scale sets for - Azure Security Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux Azure Monitor agent to enable Azure Monitor assignments - on Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorLinuxAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorLinuxAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorLinuxAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4034bc6-ae50-406d-bf76-50f4ee5a7811\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"},{\"properties\":{\"displayName\":\"Audit - usage of custom RBAC rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - built-in roles such as 'Owner, Contributer, Reader' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"},{\"properties\":{\"displayName\":\"Web - Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine for Azure Security - Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1617 - Application Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to CosmosDB account. - Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Dns Zone Id\",\"description\":\"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Group Id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"cosmosDB-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a63cc0bd-cda4-4178-b705-37dc439d3e0f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to an Event Hub to be enabled on Azure Key - Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Azure Key Vault Managed HSMs in this location will be linked to this Event - Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"hsmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('hsmName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('hsmName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"hsmName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6d2c800-5230-4a40-bff3-8268b4987d42\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using HTTPS secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires HTTPS user and key secrets stored in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"httpsUserKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - user name Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name.\"}},\"httpsKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - key Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"httpsUser\":{\"type\":\"securestring\"},\"httpsKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"httpsUser\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsUserKeyVaultSecretName')]\"}},\"httpsKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6f560f4-f582-4b67-b123-a37dcd1bf7ea\"},{\"properties\":{\"displayName\":\"Auditing - on SQL server should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1431 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1027 - Access Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"},{\"properties\":{\"displayName\":\"Azure - DDoS Protection Standard should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1570 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"},{\"properties\":{\"displayName\":\"Require - encryption on Data Lake Store accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures encryption is enabled on all Data Lake Store accounts\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Lake\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"SQL - Managed Instance should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"},{\"properties\":{\"displayName\":\"Deploy - Azure Policy Add-on to Azure Kubernetes Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\":\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\":{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', - parameters('clusterName'))]\",\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', - parameters('clusterName'))]\"},\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\":{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'), - 'Microsoft.ContainerService/managedClusters', parameters('clusterName')), - '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\":\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\",\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'), - 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\":\"[if(contains(parameters('aksClusterContent'), - 'identity'), parameters('aksClusterContent').identity, json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\",\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\",\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties, - 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles, - json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile, - json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile, - json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile, - json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\",\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties, - 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\",\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties, - 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy, - json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'networkProfile'), parameters('aksClusterContent').properties.networkProfile, - json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\",\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile, - json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile, - json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties, - 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID, - json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'identityProfile'), parameters('aksClusterContent').properties.identityProfile, - json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\":\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"}}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1400 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"},{\"properties\":{\"displayName\":\"SQL - Managed Instances should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Detailed Tracking'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"},{\"properties\":{\"displayName\":\"Deploy - network watcher when virtual networks are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\":\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\",\"name\":\"[concat('networkWatcher_', - parameters('location'))]\",\"location\":\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1511 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning instances to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotDps\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices-provisioning.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1539 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1006 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1461 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1073 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that 'PHP version' is the latest, if used as a part of the Function - app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP - cannot be used with Function apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Latest PHP version\",\"description\":\"Latest supported PHP version for App - Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Automatic provisioning of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1323 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - SQL servers without Advanced Data Security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance without advanced data security.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"},{\"properties\":{\"displayName\":\"Enable - Azure Security Center on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\\r\\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\\r\\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\\r\\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\\r\\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\":{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"},{\"properties\":{\"displayName\":\"Configure - disaster recovery on virtual machines by enabling replication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Compute\"},\"parameters\":{\"sourceRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Source - Region\",\"description\":\"Region in which the virtual machine is originally - deployed\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Region\",\"description\":\"Region to be used to deploy the virtual machine - in case of a natural disaster\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Resource Group\",\"description\":\"Resource group to be used to create the - virtual machine in the target region\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Vault - Resource Group\",\"description\":\"The resource group containing the recovery - services vault used for disaster recovery configurations\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Services Vault\",\"description\":\"ID of the recovery services vault to be - used for disaster recovery configurations\",\"strongType\":\"Microsoft.RecoveryServices/vaults\",\"serviceName\":\"ASR\"}},\"recoveryNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Virtual Network\",\"description\":\"Existing Recovery Virtual Network ID or - name of the Virtual Network to be created in Target Region\",\"strongType\":\"Microsoft.Network/virtualNetworks\",\"serviceName\":\"ASR\"}},\"targetZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Availability Zone\",\"description\":\"Availability zone in the designated - target region to be used by virtual machines during disaster\",\"strongType\":\"zone\",\"serviceName\":\"ASR\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('sourceRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings\",\"exists\":\"false\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"location\",\"equals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones[*]\",\"notEquals\":\"[parameters('targetZone')]\"}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"value\":\"[length(parameters('targetZone'))]\",\"greater\":0}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"name\",\"like\":\"ASR-Protect-*\"},{\"field\":\"Microsoft.Resources/links/targetId\",\"contains\":\"/replicationProtectedItems/\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"apiVersion\":{\"type\":\"String\"},\"avSetId\":{\"type\":\"String\"},\"dataDiskIds\":{\"type\":\"object\"},\"osDiskId\":{\"type\":\"String\"},\"ppgId\":{\"type\":\"String\"},\"recoveryNetworkId\":{\"type\":\"String\"},\"recoverySubscriptionId\":{\"type\":\"String\"},\"sourceRegion\":{\"type\":\"String\"},\"sourceResourceGroupName\":{\"type\":\"String\"},\"targetRegion\":{\"type\":\"String\"},\"targetResourceGroupName\":{\"type\":\"String\"},\"targetZone\":{\"type\":\"String\"},\"vaultName\":{\"type\":\"String\"},\"vaultResourceGroupName\":{\"type\":\"String\"},\"vmId\":{\"type\":\"String\"},\"vmZones\":{\"type\":\"Object\"}},\"variables\":{\"avSetApiVersion\":\"2019-03-01\",\"deploymentApiVersion\":\"2017-05-10\",\"vmApiVersion\":\"2019-07-01\",\"ppgApiVersion\":\"2019-12-01\",\"portalLinkPrefix\":\"https://portal.azure.com/aaa@foo.com\",\"schemaLink\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"defaultAvSet\":\"defaultAvSet-asr\",\"defaultPPG\":\"defaultPPG-asr\",\"eligibilityResultsDefault\":\"default\",\"protectedItemSuffix\":\"-policy\",\"recoveryAvSetPrefix\":\"RecoveryAvSet-\",\"recoveryPPGPrefix\":\"RecoveryPPG-\",\"avSetType\":\"Microsoft.Compute/availabilitySets\",\"deploymentType\":\"Microsoft.Resources/deployments\",\"networkType\":\"Microsoft.Network/virtualNetworks\",\"ppgType\":\"Microsoft.Compute/proximityPlacementGroups\",\"replicationEligibilityResultsType\":\"Microsoft.RecoveryServices/replicationEligibilityResults\",\"storageType\":\"Microsoft.Storage/storageAccounts\",\"vaultType\":\"Microsoft.RecoveryServices/vaults\",\"avSetTemplateName\":\"[concat(variables('recoveryAvSetPrefix'), - last(split(parameters('vmId'), '/')))]\",\"avSetTemplateName64\":\"[if(greater(length(variables('avSetTemplateName')), - 64), substring(variables('avSetTemplateName'), 0, 64), variables('avSetTemplateName'))]\",\"ppgTemplateName\":\"[concat(variables('recoveryPPGPrefix'), - last(split(parameters('vmId'), '/')))]\",\"ppgTemplateName64\":\"[if(greater(length(variables('ppgTemplateName')), - 64), substring(variables('ppgTemplateName'), 0, 64), variables('ppgTemplateName'))]\",\"replicationProtectedIntentTemplateName\":\"[concat('ASR-', - parameters('sourceResourceGroupName'), '-', last(split(parameters('vmId'), - '/')))]\",\"replicationProtectedIntentTemplateName64\":\"[if(greater(length(variables('replicationProtectedIntentTemplateName')), - 64), substring(variables('replicationProtectedIntentTemplateName'), 0, 64), - variables('replicationProtectedIntentTemplateName'))]\",\"vmDataDiskIds\":\"[array(parameters('dataDiskIds').rawValue)]\",\"vmDiskCount\":\"[add(length(variables('vmDataDiskIds')), - int(1))]\",\"diskIds\":\"[concat(array(parameters('osDiskId')), array(parameters('dataDiskIds').rawValue))]\",\"vaultId\":\"[resourceId(parameters('vaultResourceGroupName'), - variables('vaultType'), parameters('vaultName'))]\",\"eligibilityResultsId\":\"[extensionResourceId(parameters('vmId'), - variables('replicationEligibilityResultsType'), variables('eligibilityResultsDefault'))]\",\"protectedIntentName\":\"[concat(parameters('vaultName'), - '/', guid(resourceGroup().id, last(split(parameters('vmId'), '/'))), variables('protectedItemSuffix'))]\",\"recoveryAvSetName\":\"[if(empty(parameters('avSetId')), - variables('defaultAvSet'), concat(last(split(parameters('avSetId'), '/')), - '-asr'))]\",\"recoveryAvSetId\":\"[if(empty(parameters('avSetId')), '', resourceId(parameters('targetResourceGroupName'), - variables('avSetType'), variables('recoveryAvSetName')))]\",\"recoveryAvType\":\"[if(not(empty(parameters('avSetId'))), - 'AvailabilitySet', if(greater(length(parameters('vmZones').rawValue), 0), - 'AvailabilityZone', 'Single'))]\",\"recoveryAvZone\":\"[if(greater(length(parameters('vmZones').rawValue), - 0), parameters('targetZone'), '')]\",\"recoveryPPGName\":\"[if(empty(parameters('ppgId')), - variables('defaultPPG'), concat(last(split(parameters('ppgId'), '/')), '-asr'))]\",\"recoveryPPGId\":\"[if(empty(parameters('ppgId')), - '', resourceId(parameters('targetResourceGroupName'), variables('ppgType'), - variables('recoveryPPGName')))]\",\"targetResourceGroupId\":\"[concat('/subscriptions/', - parameters('recoverySubscriptionId'), '/resourceGroups/', parameters('targetResourceGroupName'))]\"},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('ppgTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"type\":\"[variables('ppgType')]\",\"name\":\"[variables('recoveryPPGName')]\",\"apiVersion\":\"[variables('ppgApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"properties\":{\"proximityPlacementGroupType\":\"[if(empty(parameters('ppgId')), - 'Standard', reference(parameters('ppgId'), variables('ppgApiVersion')).proximityPlacementGroupType)]\"}}]},\"parameters\":{}}},{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('avSetTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"type\":\"[variables('avSetType')]\",\"sku\":{\"name\":\"[if(empty(parameters('avSetId')), - 'Aligned', reference(parameters('avSetId'), variables('avSetApiVersion'), - 'Full').sku.name)]\"},\"name\":\"[variables('recoveryAvSetName')]\",\"apiVersion\":\"[variables('avSetApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"tags\":{},\"properties\":{\"platformUpdateDomainCount\":\"[if(empty(parameters('avSetId')), - '5', reference(parameters('avSetId'), variables('avSetApiVersion')).platformUpdateDomainCount)]\",\"platformFaultDomainCount\":\"[if(empty(parameters('avSetId')), - '2', reference(parameters('avSetId'), variables('avSetApiVersion')).platformFaultDomainCount)]\",\"proximityPlacementGroup\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"id\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\"}}]},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\"]},{\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('replicationProtectedIntentTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('vaultResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/replicationProtectionIntents\",\"name\":\"[variables('protectedIntentName')]\",\"apiVersion\":\"[parameters('apiVersion')]\",\"properties\":{\"providerSpecificDetails\":{\"instanceType\":\"A2A\",\"fabricObjectId\":\"[parameters('vmId')]\",\"primaryLocation\":\"[parameters('sourceRegion')]\",\"recoveryLocation\":\"[parameters('targetRegion')]\",\"recoverySubscriptionId\":\"[parameters('recoverySubscriptionId')]\",\"recoveryAvailabilityType\":\"[variables('recoveryAvType')]\",\"recoveryAvailabilityZone\":\"[variables('recoveryAvZone')]\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\",\"recoveryAvailabilitySetCustomInput\":\"[if(empty(parameters('avSetId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryAvailabilitySetId\\\"', ':', '\\\"', variables('recoveryAvSetId'), - '\\\"', '}')))]\",\"recoveryProximityPlacementGroupCustomInput\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryProximityPlacementGroupId\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\",\"recoveryVirtualNetworkCustomInput\":\"[if(contains(parameters('recoveryNetworkId'), - '/'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryVirtualNetworkId\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"New\\\",', - '\\\"recoveryVirtualNetworkName\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')))]\",\"vmDisks\":[],\"copy\":[{\"name\":\"vmManagedDisks\",\"count\":\"[variables('vmDiskCount')]\",\"input\":{\"diskId\":\"[if(equals(copyIndex('vmManagedDisks'), - int(0)), reference(parameters('vmId'), variables('vmApiVersion')).storageProfile.osDisk.managedDisk.Id, - variables('vmDataDiskIds')[sub(copyIndex('vmManagedDisks'), int(1))])]\",\"recoveryResourceGroupCustomInput\":{\"resourceType\":\"Existing\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\"}}}]}}}],\"outputs\":{\"vmName\":{\"value\":\"[last(split(parameters('vmId'), - '/'))]\",\"type\":\"string\"},\"availabilitySetUrl\":{\"value\":\"[if(empty(parameters('avSetId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryAvSetId')))]\",\"type\":\"string\"},\"proximityPlacementGroupUrl\":{\"value\":\"[if(empty(parameters('ppgId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryPPGId')))]\",\"type\":\"string\"},\"replicationEligibilityResults\":{\"value\":\"[reference(variables('eligibilityResultsId'), - parameters('apiVersion'))]\",\"type\":\"Object\"}}},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\",\"[variables('avSetTemplateName64')]\"]}],\"outputs\":{}},\"parameters\":{\"apiVersion\":{\"value\":\"2018-07-10\"},\"avSetId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/availabilitySet.id')]\"},\"dataDiskIds\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id')]\",\"emptyArray\":[]}},\"osDiskId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id')]\"},\"ppgId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/proximityPlacementGroup.id')]\"},\"recoveryNetworkId\":{\"value\":\"[parameters('recoveryNetworkId')]\"},\"recoverySubscriptionId\":{\"value\":\"[subscription().subscriptionId]\"},\"sourceRegion\":{\"value\":\"[parameters('sourceRegion')]\"},\"sourceResourceGroupName\":{\"value\":\"[resourcegroup().Name]\"},\"targetRegion\":{\"value\":\"[parameters('targetRegion')]\"},\"targetResourceGroupName\":{\"value\":\"[last(split(parameters('targetResourceGroupId'), - '/'))]\"},\"targetZone\":{\"value\":\"[parameters('targetZone')]\"},\"vaultName\":{\"value\":\"[last(split(parameters('vaultId'), - '/'))]\"},\"vaultResourceGroupName\":{\"value\":\"[last(split(parameters('vaultResourceGroupId'), - '/'))]\"},\"vmId\":{\"value\":\"[field('id')]\"},\"vmZones\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/zones')]\",\"emptyArray\":[]}}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac34a73f-9fa5-4067-9247-a3ecae514468\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"},{\"properties\":{\"displayName\":\"Role-Based - Access Control (RBAC) should be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"},{\"properties\":{\"displayName\":\"Configure - Synapse workspaces to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"Integer\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a Synapse workspace is created that will be - shared by all Synapse workspaces in that region). Important - for proper operation - of Auditing do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"workspaceName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"int\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[parameters('auditRetentionDays')]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('workspaceaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('workspaceAuditingStorageAccount-', - uniqueString(variables('locationCode'), deployment().name))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure Synapse workspaces to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('workspaceName'), - '/Default')]\",\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"workspaceName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation if the 'environment' tag is set to one of the following - values: production, dev, test, staging\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\",\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1569 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1454 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1272 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"},{\"properties\":{\"displayName\":\"SQL - Server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1598 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"},{\"properties\":{\"displayName\":\"Guest - Configuration extension should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as 'Windows Exploit guard should be enabled'. Learn more - at https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\",\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae89ebca-1c92-4898-ac2c-9f63decb045c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL Managed Instance advanced - data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1413 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1710 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"},{\"properties\":{\"displayName\":\"Azure - Spring Cloud should use network injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Spring Cloud instances should use virtual network injection for the following - purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring - Cloud to interact with systems in either on premises data centers or Azure - service in other virtual networks. 3. Empower customers to control inbound - and outbound network communications for Azure Spring Cloud.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Platform\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure - Spring Cloud SKU Names\",\"description\":\"List of Azure Spring Cloud SKUs - against which this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"},{\"properties\":{\"displayName\":\"Monitor - missing Endpoint Protection in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"SQL - servers which don't have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: 'Auditing should be enabled on advanced data security - settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1725 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"},{\"properties\":{\"displayName\":\"Activity - log should be retained for at least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1429 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1711 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"count\":{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet\",\"exists\":false}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0ab5b05-1c98-40f7-bb9e-dc568e41b501\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints connect to Azure SignalR - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"description\":\"Private DNS zone to integrate with private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"signalr\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-service-signalr-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0e86710-7fb7-4a6c-a064-32e9b829509e\"},{\"properties\":{\"displayName\":\"Management - ports of virtual machines should be protected with just-in-time network access - control\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1571 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"},{\"properties\":{\"displayName\":\"SQL - Database should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1091 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1009 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1234 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1107 - Content Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows web servers that are not using secure - communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum TLS version\",\"description\":\"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\":\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\":{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is deployed for the indicated Storage Sync Service resource. - This enables you to address your Storage Sync Service resource from within - the private IP address space of your organization's network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet with private endpoint network policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"afs\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b35dddd9-daf7-423b-8375-5a5b86806d5a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Logon-Logoff'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to a Log Analytics workspace to be enabled - on Azure Key Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - to send log to. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3884c81-31aa-473d-a9bb-9466fe0ec2a0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1380 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"},{\"properties\":{\"displayName\":\"Resource - logs in Search services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1172 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1131 - Protection Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Shutdown' for allowing shutdown without logon and clearing the virtual - memory pagefile. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Clear virtual memory pagefile\",\"description\":\"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"},{\"properties\":{\"displayName\":\"Azure - Stack Edge devices should use double-encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - secure the data at rest on the device, ensure it's double-encrypted, the access - to data is controlled, and once the device is deactivated, the data is securely - erased off the data disks. Double encryption is the use of two layers of encryption: - BitLocker XTS-AES 256-bit encryption on the data volumes and built-in encryption - of the hard drives. Learn more in the security overview documentation for - the specific Stack Edge device.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Stack Edge\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBoxEdge/DataBoxEdgeDevices\"},{\"field\":\"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name\",\"notIn\":[\"TEA_1Node\",\"TEA_1Node_UPS\",\"TEA_1Node_Heater\",\"TEA_1Node_UPS_Heater\",\"TEA_4Node_Heater\",\"TEA_4Node_UPS_Heater\",\"TMA\",\"EdgePR_Base\",\"EdgePR_Base_UPS\",\"EdgeMR_Mini\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4ac1030-89c5-4697-8e00-28b5ba6a8811\"},{\"properties\":{\"displayName\":\"[Deprecated]: - A security contact phone number should be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should only use Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection for Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection across Cosmos DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('cosmosDbAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"},{\"properties\":{\"displayName\":\"Diagnostic - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts with private endpoints \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A - group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"privateEndpointGroupId\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"String\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"[parameters('privateEndpointGroupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b609e813-3156-4079-91fa-a8494c1471c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"notEquals\":\"free\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Search/searchServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"searchService\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b698b005-b660-4837-b833-a7aaab26ddba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1568 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"},{\"properties\":{\"displayName\":\"Network - Watcher should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"listOfLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\":\"Audit - if Network Watcher is not enabled for region(s).\",\"strongType\":\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NetworkWatcher - resource group name\",\"description\":\"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1608 - Supply Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1401 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for SQL Databases to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select the Log Analytics workspace - from dropdown list\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreRuntimeStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreRuntimeStatistics - logs to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreWaitStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"ErrorsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Errors - - Enabled\",\"description\":\"Whether to stream Errors logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DatabaseWaitStatistics - - Enabled\",\"description\":\"Whether to stream DatabaseWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"BlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Blocks - - Enabled\",\"description\":\"Whether to stream Blocks logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLInsightsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLInsights - - Enabled\",\"description\":\"Whether to stream SQLInsights logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLSecurityAuditEvents - - Enabled\",\"description\":\"Whether to stream SQLSecurityAuditEvents logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"TimeoutsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Timeouts - - Enabled\",\"description\":\"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AutomaticTuningEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AutomaticTuning - - Enabled\",\"description\":\"Whether to stream AutomaticTuning logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DeadlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Deadlocks - - Enabled\",\"description\":\"Whether to stream Deadlocks logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Basic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Basic - (metric) - Enabled\",\"description\":\"Whether to stream Basic metrics to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"InstanceAndAppAdvanced\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"InstanceAndAppAdvanced - (metric) - Enabled\",\"description\":\"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"WorkloadManagement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"WorkloadManagement - (metric) - Enabled\",\"description\":\"Whether to stream WorkloadManagement - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"matchInsensitively\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Basic\":{\"type\":\"string\"},\"InstanceAndAppAdvanced\":{\"type\":\"string\"},\"WorkloadManagement\":{\"type\":\"string\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"string\"},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"string\"},\"ErrorsEnabled\":{\"type\":\"string\"},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"string\"},\"BlocksEnabled\":{\"type\":\"string\"},\"SQLInsightsEnabled\":{\"type\":\"string\"},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"string\"},\"TimeoutsEnabled\":{\"type\":\"string\"},\"AutomaticTuningEnabled\":{\"type\":\"string\"},\"DeadlocksEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Basic\",\"enabled\":\"[parameters('Basic')]\"},{\"category\":\"InstanceAndAppAdvanced\",\"enabled\":\"[parameters('InstanceAndAppAdvanced')]\"},{\"category\":\"WorkloadManagement\",\"enabled\":\"[parameters('WorkloadManagement')]\"}],\"logs\":[{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('SQLInsightsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('AutomaticTuningEnabled')]\"},{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('ErrorsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('TimeoutsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('BlocksEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('DeadlocksEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"Basic\":{\"value\":\"[parameters('Basic')]\"},\"InstanceAndAppAdvanced\":{\"value\":\"[parameters('InstanceAndAppAdvanced')]\"},\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"WorkloadManagement\":{\"value\":\"[parameters('WorkloadManagement')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('fullName')]\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},\"QueryStoreWaitStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},\"ErrorsEnabled\":{\"value\":\"[parameters('ErrorsEnabled')]\"},\"DatabaseWaitStatisticsEnabled\":{\"value\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},\"BlocksEnabled\":{\"value\":\"[parameters('BlocksEnabled')]\"},\"SQLInsightsEnabled\":{\"value\":\"[parameters('SQLInsightsEnabled')]\"},\"SQLSecurityAuditEventsEnabled\":{\"value\":\"[parameters('SQLSecurityAuditEventsEnabled')]\"},\"TimeoutsEnabled\":{\"value\":\"[parameters('TimeoutsEnabled')]\"},\"AutomaticTuningEnabled\":{\"value\":\"[parameters('AutomaticTuningEnabled')]\"},\"DeadlocksEnabled\":{\"value\":\"[parameters('DeadlocksEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b79fa14e-238a-4c2d-b376-442ce508fc84\"},{\"properties\":{\"displayName\":\"API - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members\",\"description\":\"A semicolon-separated list of all the expected - members of the Administrators local group. Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\":{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Event Hub namespaces, data - leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Accounts'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Administrative operations with no activity log alerts - configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Administrative Operation name for which activity - log alert should be configured\"},\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\",\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\",\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1257 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1186 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1447 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1625 - Boundary Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Recovery console'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\",\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"topic\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"topic-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baf19753-7502-405f-8745-370519b20483\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1726 - Information Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1166 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1188 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"},{\"properties\":{\"displayName\":\"Non-internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1533 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Client'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1095 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1050 - Concurrent Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"},{\"properties\":{\"displayName\":\"IP - Forwarding on your virtual machine should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling - IP forwarding on a virtual machine's NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"},{\"properties\":{\"displayName\":\"Container - registries should have SKUs that support Private Links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"notEquals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL Managed Instance - advanced data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It's - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for DNS should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for DNS provides an additional layer of protection for your cloud - resources by continuously monitoring all DNS queries from your Azure resources. - Azure Defender alerts you about suspicious activity at the DNS layer. Learn - more about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Dns\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bdc59948-5574-49b3-bb91-76b7c986428d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group contains any - of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1360 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be enabled for Azure Front Door Service or - Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have not restarted within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\",\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number - of days\",\"description\":\"The number of days without restart until the machine - is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"},{\"properties\":{\"displayName\":\"Windows - Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.1.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\",\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status - if Windows Defender is not available on machine\",\"description\":\"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to 'Non-Compliant' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' - shows these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1152 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"},{\"properties\":{\"displayName\":\"Geo-redundant - storage should be enabled for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - geo-redundancy to create highly available applications\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub's - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotHub\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf684997-3909-404e-929c-d4a38ed23b2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Logon-Logoff'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Group Membership\",\"description\":\"Specifies whether audit events - are generated when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"},\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using SSH secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires a SSH private key secret in Key Vault. - For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"sshKnownHostsContents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Base64-encoded - known hosts content\",\"description\":\"The base64-encoded known hosts content.\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"sshPrivateKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SSH - private key Key Vault secret\",\"description\":\"The name of the Key Vault - secret that holds the base64-encoded SSH private key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents\",\"equals\":\"[parameters('sshKnownHostsContents')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"sshKnownHostsContents\":{\"type\":\"string\"},\"sshPrivateKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":{\"value\":\"[parameters('sshKnownHostsContents')]\"},\"sshPrivateKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('sshPrivateKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c050047b-b21b-4822-8a2d-c1e37c3c0c6a\"},{\"properties\":{\"displayName\":\"Configure - private endpoint connections on Azure Automation accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only - approved VM extensions should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy governs the virtual machine extensions that are not approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"approvedExtensions\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of approved extension types that can be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved - extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1676 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1719 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"},{\"properties\":{\"displayName\":\"Deploy - associations for a custom provider\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom - Provider\"},\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Custom - provider ID\",\"description\":\"Resource ID of the Custom provider to which - resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the custom provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetCustomProviderId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\":{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1004 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Logon'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Credential Validation\",\"description\":\"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"},\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1503 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not set to the specified - time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Time zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"},{\"properties\":{\"displayName\":\"Flow - logs should be configured for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"},{\"properties\":{\"displayName\":\"Azure - Defender for container registries should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the specified services are not - installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and 'Running'. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1176 - Baseline Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should enable double encryption for data at rest on the device\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support software-based double - encryption\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c349d81b-9985-44ae-a8da-ff98d108ede8\"},{\"properties\":{\"displayName\":\"Azure - Key Vault Managed HSM should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHsms/enableSoftDelete\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.KeyVault/managedHsms/enablePurgeProtection\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39ba22d-4428-4149-b981-70acb31fc383\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1389 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for Resource Manager should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Arm\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3d20c29-b36d-48fe-808b-99a87530ad99\"},{\"properties\":{\"displayName\":\"System - updates on virtual machine scale sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"},{\"properties\":{\"displayName\":\"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"},{\"properties\":{\"displayName\":\"[Preview]: - Container Registry should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1235 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1173 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Policy operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Policy Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that contain certificates expiring - within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate store path\",\"description\":\"The path to the certificate store - containing the certificates to check the expiration dates of. Default value - is 'Cert:' which is the root certificate store path, so all certificates on - the machine will be checked. Other example paths: 'Cert:\\\\LocalMachine', - 'Cert:\\\\LocalMachine\\\\TrustedPublisher', 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Expiration limit in days\",\"description\":\"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to include\",\"description\":\"A semicolon-separated - list of certificate thumbprints to check under the specified path. If a value - is not specified, all certificates under the certificate store path will be - checked. If a value is specified, no certificates other than those with the - thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to exclude\",\"description\":\"A semicolon-separated - list of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Include expired certificates\",\"description\":\"Must be 'true' or 'false'. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"},\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"},\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"},\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\":{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"},\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1670 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not set to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\",\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell execution - policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\":{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Execution Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1190 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter.\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Value\",\"description\":\"Value of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Name parameter.\"}}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"not\":{\"field\":\"[concat('tags[',parameters('tagName'), - ']')]\",\"equals\":\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\",\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\",\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\",\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\":\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/', - parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1619 - Information In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1353 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL server advanced data - security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - API App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1470 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Interactive Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"},{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"},{\"properties\":{\"displayName\":\"Resource - logs in Data Lake Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'User Rights Assignment'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotHub\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Network Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name '{storagePrefixParameter}{NSGLocation}' will be - automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - Account Prefix for Regional Storage Account\",\"description\":\"This prefix - will be combined with the network security group location to form the created - storage account name.\"}},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Group Name for Storage Account (must exist)\",\"description\":\"The resource - group that the storage account will be created in. This resource group must - already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\":\"[concat('policyStorage_', - uniqueString(parameters('location'), parameters('nsgName')))]\"},\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\",\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\",\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\",\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\":\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\",\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[concat(parameters('storageprefix'), - parameters('location'))]\",\"sku\":{\"name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\":\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\":null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\":\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\":\"[resourceId(parameters('rgName'), - 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'), parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"},\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"},{\"properties\":{\"displayName\":\"Storage - accounts should allow access from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Some - Microsoft services that interact with storage accounts operate from networks - that can't be granted access through network rules. To help this type of service - work as intended, allow the set of trusted Microsoft services to bypass the - network rules. These services will then use strong authentication to access - the storage account.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"},{\"properties\":{\"displayName\":\"App - Configuration should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your app configuration instances - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows Azure Monitor agent to enable Azure Monitor assignments - on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorWindowsAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorWindowsAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca817e41-e85a-4783-bc7f-dc532d36235e\"},{\"properties\":{\"displayName\":\"Managed - disks should be double encrypted with both platform-managed and customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskEncryptionSets\"},{\"field\":\"Microsoft.Compute/diskEncryptionSets/encryptionType\",\"notEquals\":\"EncryptionAtRestWithPlatformAndCustomerKeys\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca91455f-eace-4f96-be59-e6e2c35b4816\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Server' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1486 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1167 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1374 - Incident Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"},{\"properties\":{\"displayName\":\"[Preview]: - Sensitive data in your SQL databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Security - Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"},{\"properties\":{\"displayName\":\"Allowed - virtual machine size SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"},\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of size SKUs that can be specified for virtual machines.\",\"displayName\":\"Allowed - Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1443 - Media Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation only if the 'department' tag is set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1582 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1104 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"},{\"properties\":{\"displayName\":\"Deploy - export to Event Hub for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Event Hub configuration is created. If you enter a name for a resource group - that doesn't exist, it'll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Event Hub configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub details\",\"description\":\"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with 'Send' claim.\",\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\":\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Event Hub via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', - variables('SeperatedEventHubDetails')[1], '/', variables('SeperatedEventHubDetails')[2], - '/', variables('SeperatedEventHubDetails')[3], '/', variables('SeperatedEventHubDetails')[4], - '/', variables('SeperatedEventHubDetails')[5], '/', variables('SeperatedEventHubDetails')[6], - '/', variables('SeperatedEventHubDetails')[7], '/', variables('SeperatedEventHubDetails')[8], - '/', variables('SeperatedEventHubDetails')[9], '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\":\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"eventHubDetails\":{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Privilege Use'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1209 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"},{\"properties\":{\"displayName\":\"Resource - logs in Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1724 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"},{\"properties\":{\"displayName\":\"Container - registries should not allow unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn't have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1084 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against 'man in the middle' attacks by encrypting the data stream - between the server and your application. This configuration enforces that - SSL is always enabled for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1620 - Denial Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Function Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1721 - Spam Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"},{\"properties\":{\"displayName\":\"Virtual - machines' Guest Configuration extension should be deployed with system-assigned - managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines\",\"name\":\"[first(split(field('fullName'), - '/'))]\",\"existenceCondition\":{\"field\":\"identity.type\",\"contains\":\"SystemAssigned\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d26f7642-7545-4e18-9b75-8c9bbdee3a9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"domain\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"domain-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d389df0a-e0d7-4607-833c-75a6fdac2c2d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the DSC configuration is - not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"},{\"properties\":{\"displayName\":\"Long-term - geo-redundant backup should be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\",\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1249 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1562 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"},{\"properties\":{\"displayName\":\"Virtual - machines should be connected to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual machine connected to a virtual network that is not - approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network Id\",\"description\":\"Resource Id of the virtual network. Example: - /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\",\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1383 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"},{\"properties\":{\"displayName\":\"Managed - disks should use a specific set of disk encryption sets for the customer-managed - key encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"allowedEncryptionSets\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - disk encryption set\",\"description\":\"The list of allowed disk encryption - sets for managed disks.\",\"strongType\":\"Microsoft.Compute/diskEncryptionSets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d461a302-a187-421a-89ac-84acdb4edc04\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1112 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs for Application Insights should be linked to a Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that's enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1585 - Security Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"},{\"properties\":{\"displayName\":\"Log - Analytics agent health issues should be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1150 - Security Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"},{\"properties\":{\"displayName\":\"Event - Hub should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1549 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Client' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1473 - Emergency Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1529 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn't exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d82101f3-f3ce-4fc5-8708-4c09f4009546\"},{\"properties\":{\"displayName\":\"Configure - Container registries with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"registry\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d85c6833-7d33-4cf5-a915-aaa2de84405f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1488 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption in transit to encrypt communication - between Azure HDInsight cluster nodes\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9da03a1-f3c3-412a-9709-947156872263\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not store passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1516 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your CosmosDB resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Batch Accounts in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"},{\"properties\":{\"displayName\":\"Logic - Apps should be deployed into Integration Service Environment\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"field\":\"Microsoft.Logic/workflows/integrationServiceEnvironment\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc595cb1-1cde-45f6-8faf-f88874e1c0e1\"},{\"properties\":{\"displayName\":\"Web - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dcbc65aa-59f3-4239-8978-3bb869d82604\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1439 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Policy Change'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1678 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1391 - Information Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1146 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Settings - Account Policies'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Recovery console'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1689 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1528 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Recovery Services vaults should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"count\":{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState\",\"equals\":\"Succeeded\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deeddb44-9f94-4903-9fa0-081d524406e3\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df39c015-56a4-45de-b4a3-efe77bed320d\"},{\"properties\":{\"displayName\":\"MariaDB - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - resource id of the private DNS zone\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"redisCache\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-redis-cache-windows-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e016b22b-e0eb-436d-8fd7-160c4eaed6e2\"},{\"properties\":{\"displayName\":\"Auditing - on Synapse workspace should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e04e5000-cd89-451d-bb21-a14d24ff9c73\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'User - Rights Assignment' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access - this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"Allow - log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":\"Deny - access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":\"Manage - auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":\"Back - up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\":\"Change - the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\":\"Change - the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\":\"Create - a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":\"Deny - log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":\"Deny - log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\":\"Deny - log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":\"Force - shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":\"Restore - files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\":\"Shut - down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":\"Take - ownership of files or other objects;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on locally\",\"description\":\"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the system time\",\"description\":\"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the time zone\",\"description\":\"Specifies which - users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may create a token object\",\"description\":\"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied local logon\",\"description\":\"Specifies which - users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"User - and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may shut down the system\",\"description\":\"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"},{\"properties\":{\"displayName\":\"Cosmos - DB should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - MSS (Legacy)' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Execution Policy\",\"description\":\"The expected PowerShell execution - policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"},\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1686 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1047 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled in virtual machine scale sets for listed virtual machine - images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1161 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1387 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"},{\"properties\":{\"displayName\":\"Azure - VPN gateways should not use 'basic' SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\":\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\",\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"},{\"properties\":{\"displayName\":\"RDP - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows RDP access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Shutdown'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Settings - - Account Policies'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enforce password history\",\"description\":\"Specifies limits on password - reuse - how many times a new password must be created for a user account before - the password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Maximum password age\",\"description\":\"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password age\",\"description\":\"Specifies the minimum number of days - that must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password length\",\"description\":\"Specifies the minimum number of - characters that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Password must meet complexity requirements\",\"description\":\"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\":{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\":{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\":{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\":{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\":{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1451 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - User Account Control'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode\",\"description\":\"Specifies the behavior of the elevation prompt for - administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1381 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1421 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1023 - Account Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"},{\"properties\":{\"displayName\":\"Allowed - locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\":\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1499 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Accounts'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Accounts: Guest account status\",\"description\":\"Specifies whether the local - Guest account is disabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"},\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that do not have the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the specified services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the services that should be installed and 'Running'. e.g. - 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"},{\"properties\":{\"displayName\":\"Subnets - should be associated with a Network Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1567 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1311 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL server Advanced - Data Security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"},{\"properties\":{\"displayName\":\"Allowed - locations for resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that resource groups can be created in.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1273 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - 'man in the middle' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in container security configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Storage in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"},{\"properties\":{\"displayName\":\"Container - registries should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network.By mapping private endpoints to your container registries - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1723 - Information Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"},{\"properties\":{\"displayName\":\"Configure - Container registries to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint's associated VNET.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"registry\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"containerRegistry-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1200 - Security Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1487 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be created with infrastructure-encryption enabled - (double encryption)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"},{\"properties\":{\"displayName\":\"Key - Vault should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that allow remote connections from accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1422 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1542 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"},{\"properties\":{\"displayName\":\"Function - apps should have 'Client Certificates (Incoming client certificates)' enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1321 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"},{\"properties\":{\"displayName\":\"Log - checkpoints should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"},{\"properties\":{\"displayName\":\"Log - connections should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"},{\"properties\":{\"displayName\":\"Disconnections - should be logged for PostgreSQL database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"},{\"properties\":{\"displayName\":\"Log - duration should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"},{\"properties\":{\"displayName\":\"Deprecated - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts with owner permissions should be removed from your subscription. - \ Deprecated accounts are accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\":{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"},{\"properties\":{\"displayName\":\"Double - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that allow remote connections from - accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Control Panel'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1622 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed66d4f5-8220-45dc-ab4a-20d1749c74e6\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Key Vaults in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Stream Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"amlworkspace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"amlworkspace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee40564d-486e-4f68-a5ca-7a621edae0fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1189 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee980b6d-0eca-4501-8d54-f6290fd512c3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Accounts' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: - Guest account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Accounts: - Guest account status\",\"description\":\"Specifies whether the local Guest - account is disabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1089 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1314 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1128 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints to Azure SignalR Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"signalr\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef45854f-b33f-49a3-8041-9057e915d88f\"},{\"properties\":{\"displayName\":\"API - Management services should use a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API - Management SKU Names\",\"description\":\"List of API Management SKUs against - which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Destination Location\",\"description\":\"The location the Event Hub that - will get diagnostic data resides in. Only source Event Hubs in this location - will be linked to this destination Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1472 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1012 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1358 - Incident Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1531 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0fcf93c-c063-4071-9668-c47474bd3564\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - name contains\",\"description\":\"String included in the required alert name. - For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Alert is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Alert is created - or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('alertSeverities'),if(equals(parameters('alertName'), - ''), array('3.'), array(parameters('alertName'))))]\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"in\":\"[union(array('Severity'),if(equals(parameters('alertName'), - ''), array('Version'), array('AlertDisplayName')))]\"},{\"count\":{\"value\":\"[parameters('alertSeverities')]\",\"name\":\"alertSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"Severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('alertSeverity')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('alertSeverities'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert - is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'), - ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(parameters('alertName'), - ''), '3.', parameters('alertName'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'), - variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1028 - Information Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"},{\"properties\":{\"displayName\":\"Virtual - networks should use specified virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network gateway Id\",\"description\":\"Resource Id of the virtual network - gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\",\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), - '/')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - MSS (Legacy)'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Settings - Account Policies' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\":\"Enforce - password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum password - age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\",\"MinimumPasswordLength\":\"Minimum - password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\":\"Password - must meet complexity requirements;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce - password history\",\"description\":\"Specifies limits on password reuse - - how many times a new password must be created for a user account before the - password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Maximum - password age\",\"description\":\"Specifies the maximum number of days that - may elapse before a user account password must be changed. The format of the - value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password age\",\"description\":\"Specifies the minimum number of days that - must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password length\",\"description\":\"Specifies the minimum number of characters - that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password - must meet complexity requirements\",\"description\":\"Specifies whether a - user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1457 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"},{\"properties\":{\"displayName\":\"Disk - access resources should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to diskAccesses, data leakage - risks are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f39f5f49-4abf-44de-8c70-0756997bfb51\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - all of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not contain the specified certificates - in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"},{\"properties\":{\"displayName\":\"Audit - Log Analytics workspace for VM - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - VMs as non-compliant if they aren't logging to the Log Analytics workspace - specified in the policy/initiative assignment.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics Workspace Id that VMs should be configured for\",\"description\":\"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"},{\"properties\":{\"displayName\":\"Authorization - rules on the Event Hub instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1495 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have not restarted within the - specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Number of days\",\"description\":\"The number of days without restart until - the machine is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"},\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"},{\"properties\":{\"displayName\":\"Disk - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b53539-8df9-40e4-86c6-6b607703bd4e\"},{\"properties\":{\"displayName\":\"Configure - SQL servers to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, SQL - servers should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a SQL Server is created that will be shared - by all servers in that region). Important - for proper operation of Auditing - do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('sqlaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-', - uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure SQL servers to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1469 - Power Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1618 - Security Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths\",\"description\":\"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be a set mode for Application Gateway and - Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Mode Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"},{\"properties\":{\"displayName\":\"Internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1214 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Recovery console' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1540 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1449 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use system-assigned managed identity - authentication when it is supported\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Using - system-assigned managed identity when communicating with data stores via linked - services avoids the use of less secured credentials such as passwords or connection - strings.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"AzureSqlDatabase\",\"AzureSqlMI\",\"AzureSqlDW\",\"AzureBlobFS\",\"AdlsGen2CosmosStructuredStream\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureBlobStorage\",\"AzureDatabricks\"]},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"User - ID=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f78ccdb4-7bf4-4106-8647-270491d2978a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/encryption.cmk.key.name\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d52b2d-e161-4dfa-a82b-55e564167385\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"},{\"properties\":{\"displayName\":\"External - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1345 - Cryptographic Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Other System Events\",\"description\":\"Specifies whether audit events - are generated for Windows Firewall Service and Windows Firewall driver start - and stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"},\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"},{\"properties\":{\"displayName\":\"Resource - logs in Service Bus should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8f774be-6aee-492a-9e29-486ef81f3a68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1535 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Stream Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"},{\"properties\":{\"displayName\":\"Saved-queries - in Azure Monitor should be saved in customer storage account for logs encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1435 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Linux virtual machines on which the Linux Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1086 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1222 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"},{\"properties\":{\"displayName\":\"Kubernetes - Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\",\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"},{\"properties\":{\"displayName\":\"Storage - account containing the container with activity logs must be encrypted with - BYOK\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"},{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'), - subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\":\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"searchService\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"searchService-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbc14a67-53e4-4932-abcc-2049c6706009\"},{\"properties\":{\"displayName\":\"Virtual - machines and virtual machine scale sets should have encryption at host enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc4d8e41-e223-45ea-9bf5-eada37891d87\"},{\"properties\":{\"displayName\":\"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified that some of your subnets aren't protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable All Internet traffic should be - routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\",\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\",\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\",\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\",\"like\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/', - first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"}},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based - \ Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"},{\"properties\":{\"displayName\":\"[Preview]: - Linux machines should meet requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.1.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureLinuxBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureLinuxBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Client'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1318 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1543 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1611 - Developer-Provided Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1613 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use a managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe3fd216-4f83-4fc1-8984-2bbec80a3418\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL databases should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers\",\"Microsoft.Sql/managedinstances\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"},{\"properties\":{\"displayName\":\"Deploy - export to Log Analytics workspace for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Log Analytics workspace configuration is created. If you enter a name for - a resource group that doesn't exist, it'll be created in the subscription. - Note that each resource group can only have one export to Log Analytics workspace - configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Log Analytics workspace configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The Log Analytics workspace of where - the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"workspaceResourceId\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Log Analytics workspace via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"workspaceResourceId\":{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1158 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"},{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"},{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"},{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"},{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"},{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"},{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"},{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"},{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"},{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"},{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"},{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"},{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"},{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"},{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"},{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"},{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"},{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"},{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"},{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"},{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"},{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"},{\"properties\":{\"displayName\":\"test_policyusm7pczwi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-04T22:57:00.9569478Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydntotaowa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydntotaowa\"},{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"},{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"},{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"},{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"},{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"},{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"},{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"},{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"},{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"},{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"},{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"},{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"},{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"},{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"},{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"},{\"properties\":{\"displayName\":\"test_policyunbs5wtft\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-08T23:45:16.8769261Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyj2uyuq36z\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyj2uyuq36z\"},{\"properties\":{\"displayName\":\"test_policy2wlyo2jcx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T08:52:29.0384373Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T08:52:29.6504961Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjatom4uiu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjatom4uiu\"},{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"},{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"},{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"},{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"},{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"},{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"},{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"},{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"},{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"},{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"},{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"},{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"},{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"},{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"},{\"properties\":{\"displayName\":\"test_policy4ljtwhrb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T09:04:36.2666163Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T09:04:36.9195862Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policynphpv4hoz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policynphpv4hoz\"},{\"properties\":{\"displayName\":\"test_policywr7fgwb3h_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-03-25T07:14:53.2365929Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-03-25T07:14:54.8167247Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyoawd757s5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyoawd757s5\"},{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"},{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"},{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"},{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"},{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"},{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"},{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"},{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"},{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"},{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"},{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"},{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"},{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"},{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"},{\"properties\":{\"displayName\":\"test_policybflkk7cf2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:48:53.5703427Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:48:54.2065695Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysnxqzmcgi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysnxqzmcgi\"},{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"},{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"},{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"},{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"},{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"},{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"},{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"},{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"},{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"},{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"},{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"},{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"},{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"},{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"},{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"},{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"},{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"},{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"},{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"},{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"},{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\",\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')), - 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')), - 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"},{\"properties\":{\"displayName\":\"clitestvgcwukwfkdrnt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:08:49.3743392Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitest7syw4jlpt6vnzk5vvmal7tz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitest7syw4jlpt6vnzk5vvmal7tz\"},{\"properties\":{\"displayName\":\"clitestmwd5emng54d7h\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:29.7005931Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesta744fed3lbeyk3atxfl22hh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesta744fed3lbeyk3atxfl22hh\"},{\"properties\":{\"displayName\":\"clitestasb6ki5xu3s5n\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:32.4697746Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestaccirnpsjl4xcry6egrdxcc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestaccirnpsjl4xcry6egrdxcc\"},{\"properties\":{\"displayName\":\"clitestyfehqscfzl66v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:18:08.1664207Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestatcrgfr7h3bzxn2n2l643lx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestatcrgfr7h3bzxn2n2l643lx\"},{\"properties\":{\"displayName\":\"clitest546cgekm2cmto\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T08:58:45.8641083Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestiympxjk7m7b7zm5ife6siwj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestiympxjk7m7b7zm5ife6siwj\"},{\"properties\":{\"displayName\":\"clitestx3chgt5ixyfdg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T06:59:50.0631487Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestkhjp2fkvvvmtlfh54o7b7db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestkhjp2fkvvvmtlfh54o7b7db\"},{\"properties\":{\"displayName\":\"clitestcv4zaidsjskxz\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:01.5383822Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestlgubbwxnbxedc6oqemfvyul\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestlgubbwxnbxedc6oqemfvyul\"},{\"properties\":{\"displayName\":\"clitest4t542r65t7vdo\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:21:45.5602849Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestm2i27iey5uu3k34mmckjoc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestm2i27iey5uu3k34mmckjoc6\"},{\"properties\":{\"displayName\":\"clitest4fmzwsy5ekwaj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T09:02:35.0596019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestr3x24dreg2li4idugas3fi3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestr3x24dreg2li4idugas3fi3\"},{\"properties\":{\"displayName\":\"clitestsoroll7id56c6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:09:20.8262259Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestxxdb7o7f2qrwygu4p4pupsu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestxxdb7o7f2qrwygu4p4pupsu\"},{\"properties\":{\"displayName\":\"clitestlcamaprqvpmyp\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:29.9142438Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesty3kzkcsdlkgkwcocvpjwcyr\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesty3kzkcsdlkgkwcocvpjwcyr\"},{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\",\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\",\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"Deny - cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\",\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"},{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"},{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"},{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"},{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"},{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"},{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"},{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"},{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"},{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:25:41.2213587Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-25T23:50:17.3899118Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:30:32.2645779Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"westus2\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-bicep-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-bicep-test\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:26:03.8364554Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"},{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"},{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"},{\"properties\":{\"displayName\":\"Sumit- - NSG X on every subnet\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"This - policy enforces a specific NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '2900913' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 08:51:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_scenario.yaml deleted file mode 100644 index 190d100eeda..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_resource_scenario.yaml +++ /dev/null @@ -1,5094 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock7tx2tyc3v3vvezclvc3rxzrgtm6asq2na6sp33rp/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcjoi6vqz46v3rj2yct","name":"cli.lock.rsrcjoi6vqz46v3rj2yct","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.718551Z","changedTime":"2021-04-16T09:02:36.2691217Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deploymentn5z7j45gzmgjltywgcshvx2uid7aacrnjygvgi3ipnxcrlncszuc6xq7/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.9696389Z","changedTime":"2021-04-16T09:02:53.2988137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsor57szkn3yfyhcr6rlu7j7c7na25loweu2mprcjonyll/providers/Microsoft.Network/virtualNetworks/cli-lock-vnettidwdoxbeqfox32l5","name":"cli-lock-vnettidwdoxbeqfox32l5","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.3712782Z","changedTime":"2021-04-16T09:02:43.2809144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl","name":"cli-lock-vneteiwnwbeenz3uxsywl","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.9309208Z","changedTime":"2021-04-16T09:02:43.5624205Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lockwaf6vbga56o2t6i7g4efohbczofllsctdczalbrteg2v/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcvxva4zyzprfcxlnlo","name":"cli.lock.rsrcvxva4zyzprfcxlnlo","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.6627936Z","changedTime":"2021-04-16T09:02:53.0937305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_createrriap2boqewkia64j6jnciblh5in5vdrrpmxra4rhb3ggyfe6dy/providers/Microsoft.web/serverFarms/cli_res_create_plan","name":"cli_res_create_plan","type":"Microsoft.web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-04-16T09:02:24.0940729Z","changedTime":"2021-04-16T09:02:33.030136Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_createrriap2boqewkia64j6jnciblh5in5vdrrpmxra4rhb3ggyfe6dy/providers/Microsoft.web/sites/clirescreateweb","name":"clirescreateweb","type":"Microsoft.web/sites","kind":"app","location":"westus","createdTime":"2021-04-16T09:02:35.6226514Z","changedTime":"2021-04-16T09:02:57.963645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_idtsh4h3hjkiiga3vshnizhizxgtsggsphwm7i3fzzkhzggriqku2lwbw/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet","name":"cli_test_resource_id_vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.8772661Z","changedTime":"2021-04-16T09:02:38.9611069Z","provisioningState":"Succeeded","tags":{"tag-vnet":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock4vtsmptndsqf2m4ops4prz6vuzc5a7hmn24qps33z6jpjtnkwyssj/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcv4t4j2hjivno3dcps","name":"cli.lock.rsrcv4t4j2hjivno3dcps","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:51.7272276Z","changedTime":"2021-04-16T09:03:02.8794298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T06:50:44.9479813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T07:05:33.5187219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-15T07:31:19.7938344Z","changedTime":"2021-04-15T11:39:53.8391765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-mgmtscenario","name":"azuredbclitest-clirecording-mgmtscenario","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-15T07:30:57.4786874Z","changedTime":"2021-04-15T11:39:51.5558249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/Vnetbclitest-clirecording-vnetservermg","name":"Vnetbclitest-clirecording-vnetservermg","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-04-15T05:50:09.8204383Z","changedTime":"2021-04-15T06:00:34.0404499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T06:50:45.1628218Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T07:05:33.4352913Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma0_disk1_60f9f2543e46442695e1e09984eab7a2","name":"vma0_disk1_60f9f2543e46442695e1e09984eab7a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","location":"eastus","createdTime":"2021-04-13T03:52:45.1159286Z","changedTime":"2021-04-13T04:02:45.2508053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","name":"vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","location":"eastus","createdTime":"2021-04-13T03:52:45.812905Z","changedTime":"2021-04-13T04:02:45.965306Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","name":"vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","location":"eastus","createdTime":"2021-04-13T03:52:45.4429603Z","changedTime":"2021-04-13T04:02:45.7906305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma3_disk1_d20623c35e694bd4920be0917d935b32","name":"vma3_disk1_d20623c35e694bd4920be0917d935b32","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","location":"eastus","createdTime":"2021-04-13T03:52:45.7868051Z","changedTime":"2021-04-13T04:02:46.2810654Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma4_disk1_bee0fd8685144639a14dfc483c237e38","name":"vma4_disk1_bee0fd8685144639a14dfc483c237e38","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","location":"eastus","createdTime":"2021-04-13T03:52:45.4317783Z","changedTime":"2021-04-13T04:02:45.7815674Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","name":"vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","location":"eastus","createdTime":"2021-04-13T03:54:04.6764809Z","changedTime":"2021-04-13T04:04:05.0575341Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","name":"vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","location":"eastus","createdTime":"2021-04-13T03:54:05.1743662Z","changedTime":"2021-04-13T04:04:05.2702127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb2_disk1_dabeb4c409bf4607814952b641b571dc","name":"vmb2_disk1_dabeb4c409bf4607814952b641b571dc","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","location":"eastus","createdTime":"2021-04-13T03:54:03.7888126Z","changedTime":"2021-04-13T04:04:03.9069183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","name":"vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","location":"eastus","createdTime":"2021-04-13T03:54:03.9533529Z","changedTime":"2021-04-13T04:04:04.5330996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","name":"vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","location":"eastus","createdTime":"2021-04-13T03:54:03.972142Z","changedTime":"2021-04-13T04:04:04.2402086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","name":"vma0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3971072Z","changedTime":"2021-04-13T04:03:12.0603993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","name":"vma1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9614713Z","changedTime":"2021-04-13T04:03:16.4797702Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","name":"vma2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3947032Z","changedTime":"2021-04-13T04:03:12.4351415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","name":"vma3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9636704Z","changedTime":"2021-04-14T04:25:12.0905308Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","name":"vma4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3972132Z","changedTime":"2021-04-13T04:03:14.4547557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","name":"vmb0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.85886Z","changedTime":"2021-04-13T04:04:30.3608695Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","name":"vmb1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1910001Z","changedTime":"2021-04-13T07:35:22.7987215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","name":"vmb2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1919245Z","changedTime":"2021-04-15T23:21:13.7021882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","name":"vmb3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1880577Z","changedTime":"2021-04-13T04:04:34.4708412Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","name":"vmb4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1968672Z","changedTime":"2021-04-13T04:04:33.1179376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic0","name":"vmaVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8692571Z","changedTime":"2021-04-13T04:02:44.5362132Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic1","name":"vmaVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:39.1022701Z","changedTime":"2021-04-13T07:36:54.0477773Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic2","name":"vmaVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8474398Z","changedTime":"2021-04-14T05:35:16.3457819Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic3","name":"vmaVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8778149Z","changedTime":"2021-04-13T16:28:57.5643823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic4","name":"vmaVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8514282Z","changedTime":"2021-04-14T04:03:44.702378Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic0","name":"vmbVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1760869Z","changedTime":"2021-04-13T04:04:03.4256127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic1","name":"vmbVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1937404Z","changedTime":"2021-04-13T04:04:02.9138543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic2","name":"vmbVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1743285Z","changedTime":"2021-04-13T04:04:04.0330882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic3","name":"vmbVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2030379Z","changedTime":"2021-04-15T01:36:42.9343812Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic4","name":"vmbVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2101605Z","changedTime":"2021-04-13T04:04:02.9327831Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmaNSG","name":"vmaNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:52:28.2913012Z","changedTime":"2021-04-13T16:14:43.4179249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmbNSG","name":"vmbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:53:48.6223649Z","changedTime":"2021-04-13T04:04:03.1807446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP0","name":"vmaPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3072481Z","changedTime":"2021-04-14T02:51:52.0494186Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP1","name":"vmaPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2991417Z","changedTime":"2021-04-14T21:16:13.1864618Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP2","name":"vmaPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3023251Z","changedTime":"2021-04-13T04:02:42.6367127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP3","name":"vmaPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3046529Z","changedTime":"2021-04-13T04:02:43.2772535Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP4","name":"vmaPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2963782Z","changedTime":"2021-04-13T04:04:39.4474817Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP0","name":"vmbPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6185Z","changedTime":"2021-04-13T04:04:04.3043263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP1","name":"vmbPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6412943Z","changedTime":"2021-04-14T20:25:36.2089718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP2","name":"vmbPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6262566Z","changedTime":"2021-04-13T04:03:59.6644567Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP3","name":"vmbPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6351095Z","changedTime":"2021-04-13T07:30:14.8734854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP4","name":"vmbPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.626293Z","changedTime":"2021-04-15T18:12:22.7119379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:51:45.3316443Z","changedTime":"2021-04-13T19:32:13.9615122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:49:42.2386917Z","changedTime":"2021-04-13T04:00:00.1371315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm0_disk1_3d783ec74b1e42249c7272959805c34e","name":"vm0_disk1_3d783ec74b1e42249c7272959805c34e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","location":"eastus","createdTime":"2021-04-13T03:50:30.040456Z","changedTime":"2021-04-13T04:00:30.2916203Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","name":"vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastus","createdTime":"2021-04-13T03:50:30.0004562Z","changedTime":"2021-04-13T04:00:30.1996331Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","name":"vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T03:50:29.8233626Z","changedTime":"2021-04-13T04:00:29.9356859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","name":"vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","location":"eastus","createdTime":"2021-04-13T03:50:31.1570585Z","changedTime":"2021-04-13T04:00:31.4963175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","name":"vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","location":"eastus","createdTime":"2021-04-13T03:50:30.3725111Z","changedTime":"2021-04-13T04:00:30.4681706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","name":"vm0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9796387Z","changedTime":"2021-04-13T04:00:57.7987131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.4983305Z","changedTime":"2021-04-13T04:00:58.6412615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9829634Z","changedTime":"2021-04-13T04:01:01.8968917Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","name":"vm3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9953133Z","changedTime":"2021-04-13T04:01:01.4654632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","name":"vm4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.5080817Z","changedTime":"2021-04-13T04:00:58.9971514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic0","name":"vmVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2243422Z","changedTime":"2021-04-13T04:00:29.1381148Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic1","name":"vmVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.243604Z","changedTime":"2021-04-13T04:00:24.9228248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic2","name":"vmVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2414276Z","changedTime":"2021-04-13T04:00:30.3169211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic3","name":"vmVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2256691Z","changedTime":"2021-04-13T04:00:31.349475Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic4","name":"vmVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2302001Z","changedTime":"2021-04-13T04:00:28.9175452Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:50:11.7648196Z","changedTime":"2021-04-13T04:00:21.9310333Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP0","name":"vmPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7649448Z","changedTime":"2021-04-13T04:00:27.3360134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP1","name":"vmPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7743768Z","changedTime":"2021-04-13T04:00:27.8344638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP2","name":"vmPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7466935Z","changedTime":"2021-04-13T04:00:27.7945651Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP3","name":"vmPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7615548Z","changedTime":"2021-04-13T04:00:27.37948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP4","name":"vmPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7405987Z","changedTime":"2021-04-13T04:02:23.4658483Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-16T04:24:34.1318778Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned"},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","name":"vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T06:34:21.041844Z","changedTime":"2021-04-13T06:44:21.5553019Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_731c40a9e3384b738d76de0402483e43","name":"vm_disk1_731c40a9e3384b738d76de0402483e43","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-13T02:56:20.3860897Z","changedTime":"2021-04-13T03:06:20.6354032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname","name":"mygalleryname","type":"Microsoft.Compute/galleries","location":"eastus","createdTime":"2021-04-13T02:59:06.0042502Z","changedTime":"2021-04-13T03:09:35.2116456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1","name":"mygalleryname/images1","type":"Microsoft.Compute/galleries/images","location":"eastus","createdTime":"2021-04-13T02:59:47.2095608Z","changedTime":"2021-04-15T02:18:55.2852722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1/versions/1.2021.03311859","name":"mygalleryname/images1/1.2021.03311859","type":"Microsoft.Compute/galleries/images/versions","location":"eastus","createdTime":"2021-04-13T03:01:54.6450959Z","changedTime":"2021-04-15T03:10:36.1617416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/images/managedImage1","name":"managedImage1","type":"Microsoft.Compute/images","location":"eastus","createdTime":"2021-04-13T03:01:16.3886044Z","changedTime":"2021-04-13T03:11:34.8454874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T02:56:16.2154566Z","changedTime":"2021-04-16T06:30:55.6329804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T06:34:19.2112514Z","changedTime":"2021-04-15T06:13:04.6254338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T07:17:31.984486Z","changedTime":"2021-04-13T07:27:38.046716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T06:34:14.9542507Z","changedTime":"2021-04-13T06:44:20.8699662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T02:56:12.2384703Z","changedTime":"2021-04-13T03:06:15.9483686Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T06:34:02.4240507Z","changedTime":"2021-04-13T06:44:14.667826Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T02:56:01.5727329Z","changedTime":"2021-04-13T03:06:13.1401664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T06:34:02.415923Z","changedTime":"2021-04-13T06:44:16.0466828Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T02:56:01.5702394Z","changedTime":"2021-04-16T06:30:53.7572823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T02:56:01.6886359Z","changedTime":"2021-04-13T03:06:12.9636048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-12T02:10:40.1358187Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-09T07:29:20.2386602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-12T06:44:46.6954551Z","changedTime":"2021-04-12T06:54:49.1899735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-16T07:33:57.1254995Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/TTL/providers/Microsoft.Compute/disks/ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","name":"ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","location":"westus2","createdTime":"2021-04-16T04:28:40.5772429Z","changedTime":"2021-04-16T04:38:40.8159242Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","name":"ttl-1","type":"Microsoft.Compute/virtualMachines","location":"westus2","createdTime":"2021-04-16T04:28:39.358405Z","changedTime":"2021-04-16T04:38:54.4421977Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt","name":"ygttt","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:31:05.0005364Z","changedTime":"2021-04-16T04:41:05.5979219Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt2","name":"ygttt2","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T05:08:46.7671912Z","changedTime":"2021-04-16T05:18:47.4331454Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkInterfaces/ttl-1VMNic","name":"ttl-1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-16T04:28:38.8096553Z","changedTime":"2021-04-16T04:38:39.7892039Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkSecurityGroups/ttl-1NSG","name":"ttl-1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-16T04:28:35.7854477Z","changedTime":"2021-04-16T04:38:38.5247526Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/publicIPAddresses/ttl-1PublicIP","name":"ttl-1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:28:35.8052323Z","changedTime":"2021-04-16T04:38:37.6834824Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/virtualNetworks/ttl-1VNET","name":"ttl-1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-16T04:28:35.7989448Z","changedTime":"2021-04-16T04:38:40.235011Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTQ4IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFsT1FWQlRSUzFYUlZOVVZWTS0ifQ%3d%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '446998' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTQ4IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFsT1FWQlRSUzFYUlZOVVZWTS0ifQ%3D%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-16T06:18:23.8488356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T08:29:09.3651804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZXF-TEST/providers/Microsoft.Compute/disks/vm_OsDisk_1_34927e1ba8a941268235774c0556b295","name":"vm_OsDisk_1_34927e1ba8a941268235774c0556b295","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","location":"westus","createdTime":"2021-04-13T12:04:02.599161Z","changedTime":"2021-04-13T12:14:02.9846142Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T12:03:57.5495549Z","changedTime":"2021-04-15T01:55:23.8030127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachineScaleSets/vmss","name":"vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS1_v2","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-15T09:30:34.484772Z","changedTime":"2021-04-15T09:52:53.0444868Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-14T05:24:44.1352674Z","changedTime":"2021-04-14T05:34:51.1823342Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/loadBalancers/vmssLB","name":"vmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:29.0435899Z","changedTime":"2021-04-15T09:40:34.7789361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T12:03:51.1596395Z","changedTime":"2021-04-13T12:13:55.175685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T12:03:38.9341864Z","changedTime":"2021-04-13T12:13:53.5470152Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T12:03:39.1103154Z","changedTime":"2021-04-15T01:55:14.5265136Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmssLBPublicIP","name":"vmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:18.426387Z","changedTime":"2021-04-15T09:40:32.1624298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T12:03:39.1743254Z","changedTime":"2021-04-13T12:13:52.7502593Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '24343' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001","name":"cli_test_resource_scenario000001","location":"southcentralus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-16T09:03:01Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '392' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "southcentralus", "tags": {"cli-test": "test"}, "properties": - {"addressSpace": {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": - [{"name": "subnet-000003", "properties": {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '254' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"67a986ec-1271-4152-8a6d-f4e9e6f25e73\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"67a986ec-1271-4152-8a6d-f4e9e6f25e73\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/802c7156-da5a-42b1-82e7-f6e7e6190204?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1415' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 2bd18327-adf3-451b-ba45-2cae188f9e08 - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/802c7156-da5a-42b1-82e7-f6e7e6190204?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d0f72d02-6949-45cb-a912-d0188f875962 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1417' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:17 GMT - etag: - - W/"0afbd0b4-e3e0-4356-969a-b17a40de62dc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 44a50509-643d-4891-a565-17958be226cc - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock7tx2tyc3v3vvezclvc3rxzrgtm6asq2na6sp33rp/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcjoi6vqz46v3rj2yct","name":"cli.lock.rsrcjoi6vqz46v3rj2yct","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.718551Z","changedTime":"2021-04-16T09:02:36.2691217Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deploymentn5z7j45gzmgjltywgcshvx2uid7aacrnjygvgi3ipnxcrlncszuc6xq7/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","createdTime":"2021-04-16T09:03:04.7773825Z","changedTime":"2021-04-16T09:03:07.7397336Z","provisioningState":"Succeeded","tags":{"key":"super=value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deploymentn5z7j45gzmgjltywgcshvx2uid7aacrnjygvgi3ipnxcrlncszuc6xq7/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.9696389Z","changedTime":"2021-04-16T09:02:53.2988137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsor57szkn3yfyhcr6rlu7j7c7na25loweu2mprcjonyll/providers/Microsoft.Network/virtualNetworks/cli-lock-vnettidwdoxbeqfox32l5","name":"cli-lock-vnettidwdoxbeqfox32l5","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.3712782Z","changedTime":"2021-04-16T09:02:43.2809144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl","name":"cli-lock-vneteiwnwbeenz3uxsywl","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.9309208Z","changedTime":"2021-04-16T09:02:43.5624205Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lockwaf6vbga56o2t6i7g4efohbczofllsctdczalbrteg2v/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcvxva4zyzprfcxlnlo","name":"cli.lock.rsrcvxva4zyzprfcxlnlo","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.6627936Z","changedTime":"2021-04-16T09:02:53.0937305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_createrriap2boqewkia64j6jnciblh5in5vdrrpmxra4rhb3ggyfe6dy/providers/Microsoft.web/serverFarms/cli_res_create_plan","name":"cli_res_create_plan","type":"Microsoft.web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-04-16T09:02:24.0940729Z","changedTime":"2021-04-16T09:02:33.030136Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_createrriap2boqewkia64j6jnciblh5in5vdrrpmxra4rhb3ggyfe6dy/providers/Microsoft.web/sites/clirescreateweb","name":"clirescreateweb","type":"Microsoft.web/sites","kind":"app","location":"westus","createdTime":"2021-04-16T09:02:35.6226514Z","changedTime":"2021-04-16T09:02:57.963645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_idtsh4h3hjkiiga3vshnizhizxgtsggsphwm7i3fzzkhzggriqku2lwbw/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet","name":"cli_test_resource_id_vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.8772661Z","changedTime":"2021-04-16T09:02:38.9611069Z","provisioningState":"Succeeded","tags":{"tag-vnet":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock4vtsmptndsqf2m4ops4prz6vuzc5a7hmn24qps33z6jpjtnkwyssj/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcv4t4j2hjivno3dcps","name":"cli.lock.rsrcv4t4j2hjivno3dcps","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:51.7272276Z","changedTime":"2021-04-16T09:03:02.8794298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-16T09:03:08.7813888Z","changedTime":"2021-04-16T09:03:14.4975206Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T06:50:44.9479813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T07:05:33.5187219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-15T07:31:19.7938344Z","changedTime":"2021-04-15T11:39:53.8391765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-mgmtscenario","name":"azuredbclitest-clirecording-mgmtscenario","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-15T07:30:57.4786874Z","changedTime":"2021-04-15T11:39:51.5558249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/Vnetbclitest-clirecording-vnetservermg","name":"Vnetbclitest-clirecording-vnetservermg","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-04-15T05:50:09.8204383Z","changedTime":"2021-04-15T06:00:34.0404499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T06:50:45.1628218Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T07:05:33.4352913Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma0_disk1_60f9f2543e46442695e1e09984eab7a2","name":"vma0_disk1_60f9f2543e46442695e1e09984eab7a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","location":"eastus","createdTime":"2021-04-13T03:52:45.1159286Z","changedTime":"2021-04-13T04:02:45.2508053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","name":"vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","location":"eastus","createdTime":"2021-04-13T03:52:45.812905Z","changedTime":"2021-04-13T04:02:45.965306Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","name":"vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","location":"eastus","createdTime":"2021-04-13T03:52:45.4429603Z","changedTime":"2021-04-13T04:02:45.7906305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma3_disk1_d20623c35e694bd4920be0917d935b32","name":"vma3_disk1_d20623c35e694bd4920be0917d935b32","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","location":"eastus","createdTime":"2021-04-13T03:52:45.7868051Z","changedTime":"2021-04-13T04:02:46.2810654Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma4_disk1_bee0fd8685144639a14dfc483c237e38","name":"vma4_disk1_bee0fd8685144639a14dfc483c237e38","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","location":"eastus","createdTime":"2021-04-13T03:52:45.4317783Z","changedTime":"2021-04-13T04:02:45.7815674Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","name":"vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","location":"eastus","createdTime":"2021-04-13T03:54:04.6764809Z","changedTime":"2021-04-13T04:04:05.0575341Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","name":"vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","location":"eastus","createdTime":"2021-04-13T03:54:05.1743662Z","changedTime":"2021-04-13T04:04:05.2702127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb2_disk1_dabeb4c409bf4607814952b641b571dc","name":"vmb2_disk1_dabeb4c409bf4607814952b641b571dc","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","location":"eastus","createdTime":"2021-04-13T03:54:03.7888126Z","changedTime":"2021-04-13T04:04:03.9069183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","name":"vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","location":"eastus","createdTime":"2021-04-13T03:54:03.9533529Z","changedTime":"2021-04-13T04:04:04.5330996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","name":"vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","location":"eastus","createdTime":"2021-04-13T03:54:03.972142Z","changedTime":"2021-04-13T04:04:04.2402086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","name":"vma0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3971072Z","changedTime":"2021-04-13T04:03:12.0603993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","name":"vma1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9614713Z","changedTime":"2021-04-13T04:03:16.4797702Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","name":"vma2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3947032Z","changedTime":"2021-04-13T04:03:12.4351415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","name":"vma3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9636704Z","changedTime":"2021-04-14T04:25:12.0905308Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","name":"vma4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3972132Z","changedTime":"2021-04-13T04:03:14.4547557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","name":"vmb0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.85886Z","changedTime":"2021-04-13T04:04:30.3608695Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","name":"vmb1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1910001Z","changedTime":"2021-04-13T07:35:22.7987215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","name":"vmb2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1919245Z","changedTime":"2021-04-15T23:21:13.7021882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","name":"vmb3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1880577Z","changedTime":"2021-04-13T04:04:34.4708412Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","name":"vmb4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1968672Z","changedTime":"2021-04-13T04:04:33.1179376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic0","name":"vmaVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8692571Z","changedTime":"2021-04-13T04:02:44.5362132Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic1","name":"vmaVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:39.1022701Z","changedTime":"2021-04-13T07:36:54.0477773Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic2","name":"vmaVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8474398Z","changedTime":"2021-04-14T05:35:16.3457819Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic3","name":"vmaVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8778149Z","changedTime":"2021-04-13T16:28:57.5643823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic4","name":"vmaVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8514282Z","changedTime":"2021-04-14T04:03:44.702378Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic0","name":"vmbVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1760869Z","changedTime":"2021-04-13T04:04:03.4256127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic1","name":"vmbVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1937404Z","changedTime":"2021-04-13T04:04:02.9138543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic2","name":"vmbVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1743285Z","changedTime":"2021-04-13T04:04:04.0330882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic3","name":"vmbVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2030379Z","changedTime":"2021-04-15T01:36:42.9343812Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic4","name":"vmbVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2101605Z","changedTime":"2021-04-13T04:04:02.9327831Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmaNSG","name":"vmaNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:52:28.2913012Z","changedTime":"2021-04-13T16:14:43.4179249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmbNSG","name":"vmbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:53:48.6223649Z","changedTime":"2021-04-13T04:04:03.1807446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP0","name":"vmaPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3072481Z","changedTime":"2021-04-14T02:51:52.0494186Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP1","name":"vmaPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2991417Z","changedTime":"2021-04-14T21:16:13.1864618Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP2","name":"vmaPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3023251Z","changedTime":"2021-04-13T04:02:42.6367127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP3","name":"vmaPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3046529Z","changedTime":"2021-04-13T04:02:43.2772535Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP4","name":"vmaPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2963782Z","changedTime":"2021-04-13T04:04:39.4474817Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP0","name":"vmbPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6185Z","changedTime":"2021-04-13T04:04:04.3043263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP1","name":"vmbPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6412943Z","changedTime":"2021-04-14T20:25:36.2089718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP2","name":"vmbPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6262566Z","changedTime":"2021-04-13T04:03:59.6644567Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP3","name":"vmbPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6351095Z","changedTime":"2021-04-13T07:30:14.8734854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP4","name":"vmbPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.626293Z","changedTime":"2021-04-15T18:12:22.7119379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:51:45.3316443Z","changedTime":"2021-04-13T19:32:13.9615122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:49:42.2386917Z","changedTime":"2021-04-13T04:00:00.1371315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm0_disk1_3d783ec74b1e42249c7272959805c34e","name":"vm0_disk1_3d783ec74b1e42249c7272959805c34e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","location":"eastus","createdTime":"2021-04-13T03:50:30.040456Z","changedTime":"2021-04-13T04:00:30.2916203Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","name":"vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastus","createdTime":"2021-04-13T03:50:30.0004562Z","changedTime":"2021-04-13T04:00:30.1996331Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","name":"vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T03:50:29.8233626Z","changedTime":"2021-04-13T04:00:29.9356859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","name":"vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","location":"eastus","createdTime":"2021-04-13T03:50:31.1570585Z","changedTime":"2021-04-13T04:00:31.4963175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","name":"vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","location":"eastus","createdTime":"2021-04-13T03:50:30.3725111Z","changedTime":"2021-04-13T04:00:30.4681706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","name":"vm0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9796387Z","changedTime":"2021-04-13T04:00:57.7987131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.4983305Z","changedTime":"2021-04-13T04:00:58.6412615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9829634Z","changedTime":"2021-04-13T04:01:01.8968917Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","name":"vm3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9953133Z","changedTime":"2021-04-13T04:01:01.4654632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","name":"vm4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.5080817Z","changedTime":"2021-04-13T04:00:58.9971514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic0","name":"vmVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2243422Z","changedTime":"2021-04-13T04:00:29.1381148Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic1","name":"vmVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.243604Z","changedTime":"2021-04-13T04:00:24.9228248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic2","name":"vmVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2414276Z","changedTime":"2021-04-13T04:00:30.3169211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic3","name":"vmVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2256691Z","changedTime":"2021-04-13T04:00:31.349475Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic4","name":"vmVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2302001Z","changedTime":"2021-04-13T04:00:28.9175452Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:50:11.7648196Z","changedTime":"2021-04-13T04:00:21.9310333Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP0","name":"vmPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7649448Z","changedTime":"2021-04-13T04:00:27.3360134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP1","name":"vmPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7743768Z","changedTime":"2021-04-13T04:00:27.8344638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP2","name":"vmPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7466935Z","changedTime":"2021-04-13T04:00:27.7945651Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP3","name":"vmPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7615548Z","changedTime":"2021-04-13T04:00:27.37948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP4","name":"vmPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7405987Z","changedTime":"2021-04-13T04:02:23.4658483Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-16T04:24:34.1318778Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned"},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","name":"vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T06:34:21.041844Z","changedTime":"2021-04-13T06:44:21.5553019Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_731c40a9e3384b738d76de0402483e43","name":"vm_disk1_731c40a9e3384b738d76de0402483e43","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-13T02:56:20.3860897Z","changedTime":"2021-04-13T03:06:20.6354032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname","name":"mygalleryname","type":"Microsoft.Compute/galleries","location":"eastus","createdTime":"2021-04-13T02:59:06.0042502Z","changedTime":"2021-04-13T03:09:35.2116456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1","name":"mygalleryname/images1","type":"Microsoft.Compute/galleries/images","location":"eastus","createdTime":"2021-04-13T02:59:47.2095608Z","changedTime":"2021-04-15T02:18:55.2852722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1/versions/1.2021.03311859","name":"mygalleryname/images1/1.2021.03311859","type":"Microsoft.Compute/galleries/images/versions","location":"eastus","createdTime":"2021-04-13T03:01:54.6450959Z","changedTime":"2021-04-15T03:10:36.1617416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/images/managedImage1","name":"managedImage1","type":"Microsoft.Compute/images","location":"eastus","createdTime":"2021-04-13T03:01:16.3886044Z","changedTime":"2021-04-13T03:11:34.8454874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T02:56:16.2154566Z","changedTime":"2021-04-16T06:30:55.6329804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T06:34:19.2112514Z","changedTime":"2021-04-15T06:13:04.6254338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T07:17:31.984486Z","changedTime":"2021-04-13T07:27:38.046716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T06:34:14.9542507Z","changedTime":"2021-04-13T06:44:20.8699662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T02:56:12.2384703Z","changedTime":"2021-04-13T03:06:15.9483686Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T06:34:02.4240507Z","changedTime":"2021-04-13T06:44:14.667826Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T02:56:01.5727329Z","changedTime":"2021-04-13T03:06:13.1401664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T06:34:02.415923Z","changedTime":"2021-04-13T06:44:16.0466828Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T02:56:01.5702394Z","changedTime":"2021-04-16T06:30:53.7572823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T02:56:01.6886359Z","changedTime":"2021-04-13T03:06:12.9636048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-12T02:10:40.1358187Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-09T07:29:20.2386602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-12T06:44:46.6954551Z","changedTime":"2021-04-12T06:54:49.1899735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-16T07:33:57.1254995Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/TTL/providers/Microsoft.Compute/disks/ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","name":"ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","location":"westus2","createdTime":"2021-04-16T04:28:40.5772429Z","changedTime":"2021-04-16T04:38:40.8159242Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","name":"ttl-1","type":"Microsoft.Compute/virtualMachines","location":"westus2","createdTime":"2021-04-16T04:28:39.358405Z","changedTime":"2021-04-16T04:38:54.4421977Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt","name":"ygttt","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:31:05.0005364Z","changedTime":"2021-04-16T04:41:05.5979219Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt2","name":"ygttt2","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T05:08:46.7671912Z","changedTime":"2021-04-16T05:18:47.4331454Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkInterfaces/ttl-1VMNic","name":"ttl-1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-16T04:28:38.8096553Z","changedTime":"2021-04-16T04:38:39.7892039Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkSecurityGroups/ttl-1NSG","name":"ttl-1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-16T04:28:35.7854477Z","changedTime":"2021-04-16T04:38:38.5247526Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/publicIPAddresses/ttl-1PublicIP","name":"ttl-1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:28:35.8052323Z","changedTime":"2021-04-16T04:38:37.6834824Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/virtualNetworks/ttl-1VNET","name":"ttl-1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-16T04:28:35.7989448Z","changedTime":"2021-04-16T04:38:40.235011Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '447208' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-16T06:18:23.8488356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T08:29:09.3651804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZXF-TEST/providers/Microsoft.Compute/disks/vm_OsDisk_1_34927e1ba8a941268235774c0556b295","name":"vm_OsDisk_1_34927e1ba8a941268235774c0556b295","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","location":"westus","createdTime":"2021-04-13T12:04:02.599161Z","changedTime":"2021-04-13T12:14:02.9846142Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T12:03:57.5495549Z","changedTime":"2021-04-15T01:55:23.8030127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachineScaleSets/vmss","name":"vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS1_v2","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-15T09:30:34.484772Z","changedTime":"2021-04-15T09:52:53.0444868Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-14T05:24:44.1352674Z","changedTime":"2021-04-14T05:34:51.1823342Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/loadBalancers/vmssLB","name":"vmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:29.0435899Z","changedTime":"2021-04-15T09:40:34.7789361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T12:03:51.1596395Z","changedTime":"2021-04-13T12:13:55.175685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T12:03:38.9341864Z","changedTime":"2021-04-13T12:13:53.5470152Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T12:03:39.1103154Z","changedTime":"2021-04-15T01:55:14.5265136Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmssLBPublicIP","name":"vmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:18.426387Z","changedTime":"2021-04-15T09:40:32.1624298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T12:03:39.1743254Z","changedTime":"2021-04-13T12:13:52.7502593Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '25053' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=location%20eq%20%27southcentralus%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-16T09:03:08.7813888Z","changedTime":"2021-04-16T09:03:14.4975206Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=location+eq+%27southcentralus%27&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '6214' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=location+eq+%27southcentralus%27&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3D - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=resourceType%20eq%20%27Microsoft.Network%2FvirtualNetworks%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock7tx2tyc3v3vvezclvc3rxzrgtm6asq2na6sp33rp/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcjoi6vqz46v3rj2yct","name":"cli.lock.rsrcjoi6vqz46v3rj2yct","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.718551Z","changedTime":"2021-04-16T09:02:36.2691217Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deploymentn5z7j45gzmgjltywgcshvx2uid7aacrnjygvgi3ipnxcrlncszuc6xq7/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.9696389Z","changedTime":"2021-04-16T09:02:53.2988137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsor57szkn3yfyhcr6rlu7j7c7na25loweu2mprcjonyll/providers/Microsoft.Network/virtualNetworks/cli-lock-vnettidwdoxbeqfox32l5","name":"cli-lock-vnettidwdoxbeqfox32l5","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.3712782Z","changedTime":"2021-04-16T09:02:43.2809144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_idbzoybnj4cn2y3xdvtfovqxyv4h67nxj3hg3pmneyjg5gr/providers/Microsoft.Network/virtualNetworks/cli-lock-vneteiwnwbeenz3uxsywl","name":"cli-lock-vneteiwnwbeenz3uxsywl","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.9309208Z","changedTime":"2021-04-16T09:02:43.5624205Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_msi_no_scopefa5injgnsnwryna2d2pzwodyox6xdi37zj5bme3fvrjumzvh653k4v/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2018-04-14T05:48:22.7499035Z","changedTime":"2018-04-14T05:58:42.0862409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lockwaf6vbga56o2t6i7g4efohbczofllsctdczalbrteg2v/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcvxva4zyzprfcxlnlo","name":"cli.lock.rsrcvxva4zyzprfcxlnlo","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.6627936Z","changedTime":"2021-04-16T09:02:53.0937305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_idtsh4h3hjkiiga3vshnizhizxgtsggsphwm7i3fzzkhzggriqku2lwbw/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet","name":"cli_test_resource_id_vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:24.8772661Z","changedTime":"2021-04-16T09:02:38.9611069Z","provisioningState":"Succeeded","tags":{"tag-vnet":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock4vtsmptndsqf2m4ops4prz6vuzc5a7hmn24qps33z6jpjtnkwyssj/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcv4t4j2hjivno3dcps","name":"cli.lock.rsrcv4t4j2hjivno3dcps","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:51.7272276Z","changedTime":"2021-04-16T09:03:02.8794298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-16T09:03:08.7813888Z","changedTime":"2021-04-16T09:03:14.4975206Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/Vnetbclitest-clirecording-vnetservermg","name":"Vnetbclitest-clirecording-vnetservermg","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-04-15T05:50:09.8204383Z","changedTime":"2021-04-15T06:00:34.0404499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:51:45.3316443Z","changedTime":"2021-04-13T19:32:13.9615122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:49:42.2386917Z","changedTime":"2021-04-13T04:00:00.1371315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T02:56:01.6886359Z","changedTime":"2021-04-13T03:06:12.9636048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/virtualNetworks/ttl-1VNET","name":"ttl-1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-16T04:28:35.7989448Z","changedTime":"2021-04-16T04:38:40.235011Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T12:03:39.1743254Z","changedTime":"2021-04-13T12:13:52.7502593Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '36395' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=name%20eq%20%27vnet-000002%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-16T09:03:08.7813888Z","changedTime":"2021-04-16T09:03:14.4975206Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=name+eq+%27vnet-000002%27&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '1031' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=name+eq+%27vnet-000002%27&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTUyIU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbFpRem95UkZkRlUxUlZVeTFOU1VOU1QxTlBSbFE2TWtWT1JWUlhUMUpMT2pKR1VGSkpWa0ZVUlVWT1JGQlBTVTVVVXpveVJsQkZPakpFVTFGTVUwVlNWa1ZTTFZkRlUxUlZVdy0tIn0%3D - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=tagname%20eq%20%27cli-test%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus"}]}' - headers: - cache-control: - - no-cache - content-length: - - '349' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=tagname%20eq%20%27cli-test%27%20and%20tagvalue%20eq%20%27test%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus"}]}' - headers: - cache-control: - - no-cache - content-length: - - '349' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1562' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:23 GMT - etag: - - W/"0afbd0b4-e3e0-4356-969a-b17a40de62dc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 19181b7d-48ce-4832-a7f7-e039674ed91b - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --namespace --parent --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --namespace --parent --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"subnet-000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '657' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:25 GMT - etag: - - W/"0afbd0b4-e3e0-4356-969a-b17a40de62dc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a6cea7c5-5d78-415e-abde-2bfd33431807 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1562' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:26 GMT - etag: - - W/"0afbd0b4-e3e0-4356-969a-b17a40de62dc" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a651e8d1-e2ef-496f-96e1-56aab46cded6 - status: - code: 200 - message: OK -- request: - body: '{"location": "southcentralus", "tags": {}, "properties": {"provisioningState": - "Succeeded", "resourceGuid": "b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6", "addressSpace": - {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {"dnsServers": []}, "subnets": - [{"name": "subnet-000003", "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003", - "etag": "W/\"0afbd0b4-e3e0-4356-969a-b17a40de62dc\"", "properties": {"provisioningState": - "Succeeded", "addressPrefix": "10.0.0.0/24", "delegations": [], "privateEndpointNetworkPolicies": - "Enabled", "privateLinkServiceNetworkPolicies": "Enabled"}, "type": "Microsoft.Network/virtualNetworks/subnets"}], - "virtualNetworkPeerings": [], "enableDdosProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - Content-Length: - - '922' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/d21a888d-95b9-4ceb-8048-4380eecba0dd?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:03:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 58389a1b-974c-4181-a1b6-ebb7ae7a3313 - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/d21a888d-95b9-4ceb-8048-4380eecba0dd?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c0b8ab63-dcfd-4d22-b1b4-7208c7f25d9b - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:02 GMT - etag: - - W/"0fdacd58-68b4-4e58-8a76-955082161d0e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 1e1e55e2-97ad-459d-acde-648be7397c97 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"b27cf97d-4472-48bb-b1ee-4fe9f4ce72b6\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"0fdacd58-68b4-4e58-8a76-955082161d0e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:04 GMT - etag: - - W/"0fdacd58-68b4-4e58-8a76-955082161d0e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a0969394-83e8-4bd0-8d7c-45e24de6d254 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"]},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"]},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"]},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"]},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"]},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"]},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"]},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"]},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"]},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"]},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"]},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"]},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"]},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"]},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"]},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '102749' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/646807dd-a4f0-4997-8302-ebfe657b8986?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Fri, 16 Apr 2021 09:04:06 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operationResults/646807dd-a4f0-4997-8302-ebfe657b8986?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 8e26964d-133b-41f6-ab86-b3e7178c25ca - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/646807dd-a4f0-4997-8302-ebfe657b8986?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - adffae83-2c47-4eec-8bf5-feb072e51367 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identitypzrlxvphtwyf7o57vfri7dxno2fjo2tf3/providers/Microsoft.KeyVault/vaults/cligsgr64lz7x3x","name":"cligsgr64lz7x3x","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-16T09:03:47.8381778Z","changedTime":"2021-04-16T09:03:54.1092335Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploysf6cjydocw6sxvqj5qsqoifhrastqrsigdymtovtmtfqifwb62m/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72","name":"test1ddosdatest72","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:04:00.6041042Z","changedTime":"2021-04-16T09:04:26.0137257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deploymentn5z7j45gzmgjltywgcshvx2uid7aacrnjygvgi3ipnxcrlncszuc6xq7/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:02:42.9696389Z","changedTime":"2021-04-16T09:02:53.2988137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_waitmgdcukfd7rocmf2esnbo3rtvyfhbpta3yer5rhjl7q/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1","name":"azure-cli-deploy-test-nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T09:03:51.7153899Z","changedTime":"2021-04-16T09:03:55.3166176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_sourcegkzqs7w2u5sat5sjjqjkkgus5jjujjm5b2lvbzimh7smss/providers/Microsoft.Network/networkSecurityGroups/nsg-moveghgffcbvzqh4","name":"nsg-moveghgffcbvzqh4","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T09:04:19.0051293Z","changedTime":"2021-04-16T09:04:23.3580001Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_sourcegkzqs7w2u5sat5sjjqjkkgus5jjujjm5b2lvbzimh7smss/providers/Microsoft.Network/networkSecurityGroups/nsg-moveiaj3c45pxw67","name":"nsg-moveiaj3c45pxw67","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T09:04:09.7688004Z","changedTime":"2021-04-16T09:04:20.9688077Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T06:50:44.9479813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG36LWPM3IJ3TLUHLODHRJ6QMSWAOORPIO4ORUVLVXNXVBAI4SLGEM5TLL7VPBGZAG7/providers/Microsoft.Compute/disks/clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","name":"clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","location":"southeastasia","createdTime":"2021-04-16T09:03:58.1925827Z","changedTime":"2021-04-16T09:03:58.3058137Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","name":"clitest-vmgmhwn","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8829168Z","changedTime":"2021-04-16T09:03:57.441446Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkInterfaces/clitest-vmgmhwnVMNic","name":"clitest-vmgmhwnVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.8810776Z","changedTime":"2021-04-16T09:03:54.3162328Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkSecurityGroups/clitest-vmgmhwnNSG","name":"clitest-vmgmhwnNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3105323Z","changedTime":"2021-04-16T09:03:48.1494155Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/publicIPAddresses/clitest-vmgmhwnPublicIP","name":"clitest-vmgmhwnPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:47.3074778Z","changedTime":"2021-04-16T09:03:49.3325577Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/virtualNetworks/clitest-vmgmhwnVNET","name":"clitest-vmgmhwnVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3164009Z","changedTime":"2021-04-16T09:03:50.6759381Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultukoqsmzbf7l","name":"clitest-vaultukoqsmzbf7l","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6071079Z","changedTime":"2021-04-16T09:03:44.6034102Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T07:05:33.5187219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG7YGLMW66MBXPZGX2IWPNDITHXJWOJWSYIFYWCLYI6K2ENOYB4X7QUSNTACPMNZ5WX/providers/Microsoft.Compute/disks/clitest-vmcregi_OsDisk_1_6c4e559f9edc414a8c87ecd9fabe44d1","name":"clitest-vmcregi_OsDisk_1_6c4e559f9edc414a8c87ecd9fabe44d1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Compute/virtualMachines/clitest-vmcregi","location":"southeastasia","createdTime":"2021-04-16T09:04:02.4717755Z","changedTime":"2021-04-16T09:04:02.6666528Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Compute/virtualMachines/clitest-vmcregi","name":"clitest-vmcregi","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:04:00.4541703Z","changedTime":"2021-04-16T09:04:02.2267667Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Network/networkInterfaces/clitest-vmcregiVMNic","name":"clitest-vmcregiVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:57.390552Z","changedTime":"2021-04-16T09:03:59.0072418Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Network/networkSecurityGroups/clitest-vmcregiNSG","name":"clitest-vmcregiNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.550534Z","changedTime":"2021-04-16T09:03:49.9820578Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Network/publicIPAddresses/clitest-vmcregiPublicIP","name":"clitest-vmcregiPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.5651401Z","changedTime":"2021-04-16T09:03:50.2375248Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.Network/virtualNetworks/clitest-vmcregiVNET","name":"clitest-vmcregiVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.7875591Z","changedTime":"2021-04-16T09:03:51.7727295Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpqgazhztope","name":"clitest-vaultpqgazhztope","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5330162Z","changedTime":"2021-04-16T09:03:43.9199088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-15T07:31:19.7938344Z","changedTime":"2021-04-15T11:39:53.8391765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-mgmtscenario","name":"azuredbclitest-clirecording-mgmtscenario","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-15T07:30:57.4786874Z","changedTime":"2021-04-15T11:39:51.5558249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/Vnetbclitest-clirecording-vnetservermg","name":"Vnetbclitest-clirecording-vnetservermg","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-04-15T05:50:09.8204383Z","changedTime":"2021-04-15T06:00:34.0404499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T06:50:45.1628218Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGHWJQTOOPOZBFXFQ4HDCEY3UNPGOY5OYHQMJISBQOTBA25KNZUCO4C34GZ4ZVMFL4E/providers/Microsoft.Compute/disks/clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","name":"clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","location":"southeastasia","createdTime":"2021-04-16T09:03:56.5691534Z","changedTime":"2021-04-16T09:03:56.7504653Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","name":"clitest-vmapciw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.5027178Z","changedTime":"2021-04-16T09:04:20.8359738Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkInterfaces/clitest-vmapciwVMNic","name":"clitest-vmapciwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:55.1089181Z","changedTime":"2021-04-16T09:03:55.2457107Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkSecurityGroups/clitest-vmapciwNSG","name":"clitest-vmapciwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:49.8438874Z","changedTime":"2021-04-16T09:03:51.543494Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/publicIPAddresses/clitest-vmapciwPublicIP","name":"clitest-vmapciwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:49.8752582Z","changedTime":"2021-04-16T09:03:51.3880421Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/virtualNetworks/clitest-vmapciwVNET","name":"clitest-vmapciwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.9424234Z","changedTime":"2021-04-16T09:03:53.2160734Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyhh4qtwrkvr","name":"clitest-vaultyhh4qtwrkvr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6645838Z","changedTime":"2021-04-16T09:03:44.2070068Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGHWYAZCLYV2QC7IN6P7V73FIEUY2SNWO5SMCEPSWLSUPLKL25IDTRJBDAV4L4AFYXJ/providers/Microsoft.Compute/disks/clitest-vmzv75l_OsDisk_1_23af4a54e5fb4a13b516b8f877393687","name":"clitest-vmzv75l_OsDisk_1_23af4a54e5fb4a13b516b8f877393687","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Compute/virtualMachines/clitest-vmzv75l","location":"southeastasia","createdTime":"2021-04-16T09:04:01.453335Z","changedTime":"2021-04-16T09:04:01.5987569Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Compute/virtualMachines/clitest-vmzv75l","name":"clitest-vmzv75l","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:59.1393937Z","changedTime":"2021-04-16T09:04:00.486792Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Network/networkInterfaces/clitest-vmzv75lVMNic","name":"clitest-vmzv75lVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:58.7267023Z","changedTime":"2021-04-16T09:03:58.9449624Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Network/networkSecurityGroups/clitest-vmzv75lNSG","name":"clitest-vmzv75lNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:51.0456127Z","changedTime":"2021-04-16T09:03:53.0433662Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Network/publicIPAddresses/clitest-vmzv75lPublicIP","name":"clitest-vmzv75lPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:51.0472533Z","changedTime":"2021-04-16T09:03:52.6656587Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.Network/virtualNetworks/clitest-vmzv75lVNET","name":"clitest-vmzv75lVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:51.0719728Z","changedTime":"2021-04-16T09:03:53.9345084Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.RecoveryServices/vaults/clitest-vaulteubxds4e7dj","name":"clitest-vaulteubxds4e7dj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6705832Z","changedTime":"2021-04-16T09:03:44.5028742Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T07:05:33.4352913Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmyn6viofcgnpjligm5lqsrv2fwoickri7ooba7lzio2y2nye7gcnsgmqsxwkwscbo/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:03:42.3078265Z","changedTime":"2021-04-16T09:03:52.594306Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGRTZYBZ26H2D2F54VPDSXETVAQH5XQLWQF7DJUURXW2CSHGKWRMYTAPLDDSVWO7JQL/providers/Microsoft.Compute/disks/clitest-vma264i_disk1_a0bb109c0f5f44ef931ff7a9a56983e5","name":"clitest-vma264i_disk1_a0bb109c0f5f44ef931ff7a9a56983e5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Compute/virtualMachines/clitest-vma264i","location":"southeastasia","createdTime":"2021-04-16T09:03:56.8579796Z","changedTime":"2021-04-16T09:03:57.0017371Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Compute/virtualMachines/clitest-vma264i","name":"clitest-vma264i","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.2739756Z","changedTime":"2021-04-16T09:04:20.6290153Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Network/networkInterfaces/clitest-vma264iVMNic","name":"clitest-vma264iVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.3972193Z","changedTime":"2021-04-16T09:03:53.6843829Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Network/networkSecurityGroups/clitest-vma264iNSG","name":"clitest-vma264iNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.1991226Z","changedTime":"2021-04-16T09:03:49.8204068Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Network/publicIPAddresses/clitest-vma264iPublicIP","name":"clitest-vma264iPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.2029254Z","changedTime":"2021-04-16T09:03:49.989287Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.Network/virtualNetworks/clitest-vma264iVNET","name":"clitest-vma264iVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.2005277Z","changedTime":"2021-04-16T09:03:51.3894618Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.RecoveryServices/vaults/clitest-vaultwigajwrefb6","name":"clitest-vaultwigajwrefb6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.0604904Z","changedTime":"2021-04-16T09:03:44.6933629Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVPROSCGKHUPYYRPZZMWYXDHAQQYM7FJYJ52PS3ANZUSY3GOVEIGCK7ENPD36AV6RK/providers/Microsoft.Compute/disks/clitest-vmj6du6_disk1_8ca9d6b0ea744fac8eaf18889f14df43","name":"clitest-vmj6du6_disk1_8ca9d6b0ea744fac8eaf18889f14df43","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Compute/virtualMachines/clitest-vmj6du6","location":"southeastasia","createdTime":"2021-04-16T09:03:56.968334Z","changedTime":"2021-04-16T09:03:57.0823847Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Compute/virtualMachines/clitest-vmj6du6","name":"clitest-vmj6du6","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8510081Z","changedTime":"2021-04-16T09:04:20.5893702Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Network/networkInterfaces/clitest-vmj6du6VMNic","name":"clitest-vmj6du6VMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:55.427636Z","changedTime":"2021-04-16T09:03:55.5716389Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Network/networkSecurityGroups/clitest-vmj6du6NSG","name":"clitest-vmj6du6NSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:49.0178357Z","changedTime":"2021-04-16T09:03:50.9599235Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Network/publicIPAddresses/clitest-vmj6du6PublicIP","name":"clitest-vmj6du6PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:49.2431573Z","changedTime":"2021-04-16T09:03:51.0216564Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.Network/virtualNetworks/clitest-vmj6du6VNET","name":"clitest-vmj6du6VNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.307057Z","changedTime":"2021-04-16T09:03:53.913768Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsuedfxc436s","name":"clitest-vaultsuedfxc436s","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.05224Z","changedTime":"2021-04-16T09:03:44.3198416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVPS3SF22MUKYRZD7X6W4AJS5DK7VYINVDNFFR2VZTO7VSEWLDKAF4YTQ3YFLABWRC/providers/Microsoft.Compute/disks/clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","name":"clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","location":"southeastasia","createdTime":"2021-04-16T09:03:58.0366389Z","changedTime":"2021-04-16T09:03:58.1656138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","name":"clitest-vmb7duk","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8945379Z","changedTime":"2021-04-16T09:03:58.0582229Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkInterfaces/clitest-vmb7dukVMNic","name":"clitest-vmb7dukVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.9857642Z","changedTime":"2021-04-16T09:03:54.5049495Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmb7dukNSG","name":"clitest-vmb7dukNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0002004Z","changedTime":"2021-04-16T09:03:49.7390506Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/publicIPAddresses/clitest-vmb7dukPublicIP","name":"clitest-vmb7dukPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.0542928Z","changedTime":"2021-04-16T09:03:50.6935798Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/virtualNetworks/clitest-vmb7dukVNET","name":"clitest-vmb7dukVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0912896Z","changedTime":"2021-04-16T09:03:50.93373Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.RecoveryServices/vaults/clitest-vault6hmnpzruvsg","name":"clitest-vault6hmnpzruvsg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5286583Z","changedTime":"2021-04-16T09:03:44.2555367Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma0_disk1_60f9f2543e46442695e1e09984eab7a2","name":"vma0_disk1_60f9f2543e46442695e1e09984eab7a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","location":"eastus","createdTime":"2021-04-13T03:52:45.1159286Z","changedTime":"2021-04-13T04:02:45.2508053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","name":"vma1_disk1_f48b0aa414cc41c2ad49612cd3b91a7d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","location":"eastus","createdTime":"2021-04-13T03:52:45.812905Z","changedTime":"2021-04-13T04:02:45.965306Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","name":"vma2_disk1_8d83ecfe76814af199f1af029ce5ab2d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","location":"eastus","createdTime":"2021-04-13T03:52:45.4429603Z","changedTime":"2021-04-13T04:02:45.7906305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma3_disk1_d20623c35e694bd4920be0917d935b32","name":"vma3_disk1_d20623c35e694bd4920be0917d935b32","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","location":"eastus","createdTime":"2021-04-13T03:52:45.7868051Z","changedTime":"2021-04-13T04:02:46.2810654Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vma4_disk1_bee0fd8685144639a14dfc483c237e38","name":"vma4_disk1_bee0fd8685144639a14dfc483c237e38","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","location":"eastus","createdTime":"2021-04-13T03:52:45.4317783Z","changedTime":"2021-04-13T04:02:45.7815674Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","name":"vmb0_disk1_dc30568e48ce48d9b8a6a7fd335ad8ca","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","location":"eastus","createdTime":"2021-04-13T03:54:04.6764809Z","changedTime":"2021-04-13T04:04:05.0575341Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","name":"vmb1_disk1_5f2838aec795464ab2d3da8ef5c98bba","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","location":"eastus","createdTime":"2021-04-13T03:54:05.1743662Z","changedTime":"2021-04-13T04:04:05.2702127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb2_disk1_dabeb4c409bf4607814952b641b571dc","name":"vmb2_disk1_dabeb4c409bf4607814952b641b571dc","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","location":"eastus","createdTime":"2021-04-13T03:54:03.7888126Z","changedTime":"2021-04-13T04:04:03.9069183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","name":"vmb3_disk1_d5a2a71c0a9e495b8ef51f98e615186d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","location":"eastus","createdTime":"2021-04-13T03:54:03.9533529Z","changedTime":"2021-04-13T04:04:04.5330996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY/providers/Microsoft.Compute/disks/vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","name":"vmb4_disk1_c6c91b3d211e42e6b934291aff35754f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","location":"eastus","createdTime":"2021-04-13T03:54:03.972142Z","changedTime":"2021-04-13T04:04:04.2402086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma0","name":"vma0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3971072Z","changedTime":"2021-04-13T04:03:12.0603993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma1","name":"vma1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9614713Z","changedTime":"2021-04-13T04:03:16.4797702Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma2","name":"vma2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3947032Z","changedTime":"2021-04-13T04:03:12.4351415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma3","name":"vma3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.9636704Z","changedTime":"2021-04-14T04:25:12.0905308Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vma4","name":"vma4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:52:43.3972132Z","changedTime":"2021-04-13T04:03:14.4547557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb0","name":"vmb0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.85886Z","changedTime":"2021-04-13T04:04:30.3608695Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb1","name":"vmb1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1910001Z","changedTime":"2021-04-13T07:35:22.7987215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb2","name":"vmb2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1919245Z","changedTime":"2021-04-15T23:21:13.7021882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb3","name":"vmb3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1880577Z","changedTime":"2021-04-13T04:04:34.4708412Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/virtualMachines/vmb4","name":"vmb4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:54:02.1968672Z","changedTime":"2021-04-13T04:04:33.1179376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic0","name":"vmaVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8692571Z","changedTime":"2021-04-13T04:02:44.5362132Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic1","name":"vmaVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:39.1022701Z","changedTime":"2021-04-13T07:36:54.0477773Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic2","name":"vmaVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8474398Z","changedTime":"2021-04-14T05:35:16.3457819Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic3","name":"vmaVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8778149Z","changedTime":"2021-04-13T16:28:57.5643823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmaVMNic4","name":"vmaVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:52:38.8514282Z","changedTime":"2021-04-14T04:03:44.702378Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic0","name":"vmbVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1760869Z","changedTime":"2021-04-13T04:04:03.4256127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic1","name":"vmbVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1937404Z","changedTime":"2021-04-13T04:04:02.9138543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic2","name":"vmbVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.1743285Z","changedTime":"2021-04-13T04:04:04.0330882Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic3","name":"vmbVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2030379Z","changedTime":"2021-04-15T01:36:42.9343812Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkInterfaces/vmbVMNic4","name":"vmbVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:53:58.2101605Z","changedTime":"2021-04-13T04:04:02.9327831Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmaNSG","name":"vmaNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:52:28.2913012Z","changedTime":"2021-04-13T16:14:43.4179249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/networkSecurityGroups/vmbNSG","name":"vmbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:53:48.6223649Z","changedTime":"2021-04-13T04:04:03.1807446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP0","name":"vmaPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3072481Z","changedTime":"2021-04-14T02:51:52.0494186Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP1","name":"vmaPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2991417Z","changedTime":"2021-04-14T21:16:13.1864618Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP2","name":"vmaPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3023251Z","changedTime":"2021-04-13T04:02:42.6367127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP3","name":"vmaPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.3046529Z","changedTime":"2021-04-13T04:02:43.2772535Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmaPublicIP4","name":"vmaPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:52:28.2963782Z","changedTime":"2021-04-13T04:04:39.4474817Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP0","name":"vmbPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6185Z","changedTime":"2021-04-13T04:04:04.3043263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP1","name":"vmbPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6412943Z","changedTime":"2021-04-14T20:25:36.2089718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP2","name":"vmbPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6262566Z","changedTime":"2021-04-13T04:03:59.6644567Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP3","name":"vmbPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.6351095Z","changedTime":"2021-04-13T07:30:14.8734854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/publicIPAddresses/vmbPublicIP4","name":"vmbPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:53:48.626293Z","changedTime":"2021-04-15T18:12:22.7119379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:51:45.3316443Z","changedTime":"2021-04-13T19:32:13.9615122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T03:49:42.2386917Z","changedTime":"2021-04-13T04:00:00.1371315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm0_disk1_3d783ec74b1e42249c7272959805c34e","name":"vm0_disk1_3d783ec74b1e42249c7272959805c34e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","location":"eastus","createdTime":"2021-04-13T03:50:30.040456Z","changedTime":"2021-04-13T04:00:30.2916203Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","name":"vm1_disk1_3ea0b45e022146dabc67e4a27831bbe5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastus","createdTime":"2021-04-13T03:50:30.0004562Z","changedTime":"2021-04-13T04:00:30.1996331Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","name":"vm2_disk1_32fdf3e799c149bf8b68abd902cda0b6","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T03:50:29.8233626Z","changedTime":"2021-04-13T04:00:29.9356859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","name":"vm3_disk1_8bcfe5b176f04022bfa51bc048bf680b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","location":"eastus","createdTime":"2021-04-13T03:50:31.1570585Z","changedTime":"2021-04-13T04:00:31.4963175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FY3/providers/Microsoft.Compute/disks/vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","name":"vm4_disk1_05e57b9f033c400f9d07fd4fc32b370f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","location":"eastus","createdTime":"2021-04-13T03:50:30.3725111Z","changedTime":"2021-04-13T04:00:30.4681706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm0","name":"vm0","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9796387Z","changedTime":"2021-04-13T04:00:57.7987131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.4983305Z","changedTime":"2021-04-13T04:00:58.6412615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9829634Z","changedTime":"2021-04-13T04:01:01.8968917Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm3","name":"vm3","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:27.9953133Z","changedTime":"2021-04-13T04:01:01.4654632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Compute/virtualMachines/vm4","name":"vm4","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T03:50:28.5080817Z","changedTime":"2021-04-13T04:00:58.9971514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic0","name":"vmVMNic0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2243422Z","changedTime":"2021-04-13T04:00:29.1381148Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic1","name":"vmVMNic1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.243604Z","changedTime":"2021-04-13T04:00:24.9228248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic2","name":"vmVMNic2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2414276Z","changedTime":"2021-04-13T04:00:30.3169211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic3","name":"vmVMNic3","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2256691Z","changedTime":"2021-04-13T04:00:31.349475Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkInterfaces/vmVMNic4","name":"vmVMNic4","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T03:50:23.2302001Z","changedTime":"2021-04-13T04:00:28.9175452Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T03:50:11.7648196Z","changedTime":"2021-04-13T04:00:21.9310333Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP0","name":"vmPublicIP0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7649448Z","changedTime":"2021-04-13T04:00:27.3360134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP1","name":"vmPublicIP1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7743768Z","changedTime":"2021-04-13T04:00:27.8344638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP2","name":"vmPublicIP2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7466935Z","changedTime":"2021-04-13T04:00:27.7945651Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP3","name":"vmPublicIP3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7615548Z","changedTime":"2021-04-13T04:00:27.37948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy3/providers/Microsoft.Network/publicIPAddresses/vmPublicIP4","name":"vmPublicIP4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T03:50:11.7405987Z","changedTime":"2021-04-13T04:02:23.4658483Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-16T04:24:34.1318778Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned"},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","name":"vm2_disk1_3fac54adea3a4ade8db320f5d587c2a2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","location":"eastus","createdTime":"2021-04-13T06:34:21.041844Z","changedTime":"2021-04-13T06:44:21.5553019Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_731c40a9e3384b738d76de0402483e43","name":"vm_disk1_731c40a9e3384b738d76de0402483e43","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-13T02:56:20.3860897Z","changedTime":"2021-04-13T03:06:20.6354032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname","name":"mygalleryname","type":"Microsoft.Compute/galleries","location":"eastus","createdTime":"2021-04-13T02:59:06.0042502Z","changedTime":"2021-04-13T03:09:35.2116456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1","name":"mygalleryname/images1","type":"Microsoft.Compute/galleries/images","location":"eastus","createdTime":"2021-04-13T02:59:47.2095608Z","changedTime":"2021-04-15T02:18:55.2852722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/galleries/mygalleryname/images/images1/versions/1.2021.03311859","name":"mygalleryname/images1/1.2021.03311859","type":"Microsoft.Compute/galleries/images/versions","location":"eastus","createdTime":"2021-04-13T03:01:54.6450959Z","changedTime":"2021-04-15T03:10:36.1617416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/images/managedImage1","name":"managedImage1","type":"Microsoft.Compute/images","location":"eastus","createdTime":"2021-04-13T03:01:16.3886044Z","changedTime":"2021-04-13T03:11:34.8454874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-13T02:56:16.2154566Z","changedTime":"2021-04-16T06:30:55.6329804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T06:34:19.2112514Z","changedTime":"2021-04-15T06:13:04.6254338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T07:17:31.984486Z","changedTime":"2021-04-13T07:27:38.046716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T06:34:14.9542507Z","changedTime":"2021-04-13T06:44:20.8699662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-13T02:56:12.2384703Z","changedTime":"2021-04-13T03:06:15.9483686Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T06:34:02.4240507Z","changedTime":"2021-04-13T06:44:14.667826Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T02:56:01.5727329Z","changedTime":"2021-04-13T03:06:13.1401664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T06:34:02.415923Z","changedTime":"2021-04-13T06:44:16.0466828Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-13T02:56:01.5702394Z","changedTime":"2021-04-16T06:30:53.7572823Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T02:56:01.6886359Z","changedTime":"2021-04-13T03:06:12.9636048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-12T02:10:40.1358187Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-09T07:29:20.2386602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-12T06:44:46.6954551Z","changedTime":"2021-04-12T06:54:49.1899735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-16T07:33:57.1254995Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/TTL/providers/Microsoft.Compute/disks/ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","name":"ttl-1_disk1_5f6a10fb9fa24538a114b4d57102de63","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","location":"westus2","createdTime":"2021-04-16T04:28:40.5772429Z","changedTime":"2021-04-16T04:38:40.8159242Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Compute/virtualMachines/ttl-1","name":"ttl-1","type":"Microsoft.Compute/virtualMachines","location":"westus2","createdTime":"2021-04-16T04:28:39.358405Z","changedTime":"2021-04-16T04:38:54.4421977Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt","name":"ygttt","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:31:05.0005364Z","changedTime":"2021-04-16T04:41:05.5979219Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.ContainerRegistry/registries/ygttt2","name":"ygttt2","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Basic","tier":"Basic"},"location":"westus2","createdTime":"2021-04-16T05:08:46.7671912Z","changedTime":"2021-04-16T05:18:47.4331454Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkInterfaces/ttl-1VMNic","name":"ttl-1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-16T04:28:38.8096553Z","changedTime":"2021-04-16T04:38:39.7892039Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/networkSecurityGroups/ttl-1NSG","name":"ttl-1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-16T04:28:35.7854477Z","changedTime":"2021-04-16T04:38:38.5247526Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/publicIPAddresses/ttl-1PublicIP","name":"ttl-1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2021-04-16T04:28:35.8052323Z","changedTime":"2021-04-16T04:38:37.6834824Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ttl/providers/Microsoft.Network/virtualNetworks/ttl-1VNET","name":"ttl-1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-16T04:28:35.7989448Z","changedTime":"2021-04-16T04:38:40.235011Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTM2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbEpVMGhKVkVWVFZDMU5TVU5TVDFOUFJsUTZNa1ZPUlZSWFQxSkxPakpHVmtsU1ZGVkJURTVGVkZkUFVrdFRPakpHV1ZOV1RrVlVMVmRGVTFSVlV3LS0ifQ%3d%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '456049' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-02-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTM2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWbEpVMGhKVkVWVFZDMU5TVU5TVDFOUFJsUTZNa1ZPUlZSWFQxSkxPakpHVmtsU1ZGVkJURTVGVkZkUFVrdFRPakpHV1ZOV1RrVlVMVmRGVTFSVlV3LS0ifQ%3D%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-16T06:18:23.8488356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T08:29:09.3651804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZXF-TEST/providers/Microsoft.Compute/disks/vm_OsDisk_1_34927e1ba8a941268235774c0556b295","name":"vm_OsDisk_1_34927e1ba8a941268235774c0556b295","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","location":"westus","createdTime":"2021-04-13T12:04:02.599161Z","changedTime":"2021-04-13T12:14:02.9846142Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"type":"UserAssigned"},"createdTime":"2021-04-13T12:03:57.5495549Z","changedTime":"2021-04-15T01:55:23.8030127Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Compute/virtualMachineScaleSets/vmss","name":"vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS1_v2","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-15T09:30:34.484772Z","changedTime":"2021-04-15T09:52:53.0444868Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-14T05:24:44.1352674Z","changedTime":"2021-04-14T05:34:51.1823342Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/loadBalancers/vmssLB","name":"vmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:29.0435899Z","changedTime":"2021-04-15T09:40:34.7789361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T12:03:51.1596395Z","changedTime":"2021-04-13T12:13:55.175685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T12:03:38.9341864Z","changedTime":"2021-04-13T12:13:53.5470152Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T12:03:39.1103154Z","changedTime":"2021-04-15T01:55:14.5265136Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/publicIPAddresses/vmssLBPublicIP","name":"vmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T09:30:18.426387Z","changedTime":"2021-04-15T09:40:32.1624298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zxf-test/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T12:03:39.1743254Z","changedTime":"2021-04-13T12:13:52.7502593Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '42677' - content-type: - - application/json; charset=utf-8 - date: - - Fri, 16 Apr 2021 09:04:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_show_built_in_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_show_built_in_policy.yaml deleted file mode 100644 index f0e337d9769..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_show_built_in_policy.yaml +++ /dev/null @@ -1,465 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition list] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 policyclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"displayName":"Audit - enabling of diagnostic logs in Azure Data Lake Store","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","type":"Microsoft.Authorization/policyDefinitions","name":"057ef27e-665e-4328-8ea3-04b3122bd9fb"},{"properties":{"displayName":"Audit - SQL DB Level Audit Setting","policyType":"BuiltIn","mode":"All","description":"Audit - DB level audit setting for SQL databases","metadata":{"category":"SQL","deprecated":true},"parameters":{"setting":{"type":"String","metadata":{"displayName":"Audit - Setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/auditingSettings","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"Audit - VMs that do not use managed disks","policyType":"BuiltIn","mode":"All","description":"This - policy audits VMs that do not use managed disks","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osDisk.uri","exists":"True"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/VirtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers","exists":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl","exists":"True"}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a4d"},{"properties":{"displayName":"[Preview]: - Deploy default OMS VM Extension for Windows VMs.","policyType":"BuiltIn","mode":"NotSpecified","description":"This - policy deploys OMS VM Extensions on Windows VMs, and connects to the selected - Log Analytics workspace","metadata":{"category":"Compute"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list","strongType":"omsWorkspace"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"resources":[{"name":"[concat(parameters(''vmName''),''/omsPolicy'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.EnterpriseCloud.Monitoring","type":"MicrosoftMonitoringAgent","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - monitoring for Windows VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c","type":"Microsoft.Authorization/policyDefinitions","name":"0868462e-646c-4fe3-9ced-a733534b6a2c"},{"properties":{"displayName":"[Preview]: - Monitor unencrypted VM Disks in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"VMs - without an enabled disk encryption will be monitored by Azure Security Center - as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","type":"Microsoft.Authorization/policyDefinitions","name":"0961003e-5a0a-4549-abde-af6a37f2724d"},{"properties":{"displayName":"Audit - resource location matches resource group location","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that the resource location matches its resource group location","metadata":{"category":"General"},"parameters":{},"policyRule":{"if":{"field":"location","notIn":["[resourcegroup().location]","global"]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a","type":"Microsoft.Authorization/policyDefinitions","name":"0a914e76-4921-4c19-b460-a2d36003525a"},{"properties":{"displayName":"Audit - transparent data encryption status","policyType":"BuiltIn","mode":"Indexed","description":"Audit - transparent data encryption status for SQL databases","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"enabled"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"17k78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"Audit - use of classic virtual machines","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager v2 for your virtual machines to provide security - enhancements such as: stronger access control (RBAC), better auditing, ARM-based - deployment and governance, access to managed identities, access to key vault - for secrets, Azure AD-based authentication and support for tags and resource - groups for easier security management","metadata":{"category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.classicCompute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","type":"Microsoft.Authorization/policyDefinitions","name":"1d84d5fb-01f6-4d12-ba4f-4a26081d403d"},{"properties":{"displayName":"Enforce - tag and its value","policyType":"BuiltIn","description":"Enforces a required - tag and its value. Does not apply to resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"not":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","equals":"[parameters(''tagValue'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","type":"Microsoft.Authorization/policyDefinitions","name":"1e30110a-5ceb-460c-a204-c1c3969c6d62"},{"properties":{"displayName":"Audit - provisioning of an Azure Active Directory administrator for SQL server","policyType":"BuiltIn","mode":"Indexed","description":"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/administrators"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","type":"Microsoft.Authorization/policyDefinitions","name":"1f314764-cb73-4fc9-b863-8eca98ac36e9"},{"properties":{"displayName":"[Preview]: - Monitor unprotected web application in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Web - applications without a Web Application Firewall protection will be monitored - by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Network/publicIPAddresses","Microsoft.ClassicCompute/domainNames","Microsoft.Web/hostingEnvironments"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6","type":"Microsoft.Authorization/policyDefinitions","name":"201ea587-7c90-41c3-910f-c280ae01cfd6"},{"properties":{"displayName":"Audit - enabling of only secure connections to your Redis Cache","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of only connections via SSL to Redis Cache. Use of secure connections - ensures authentication between the server and the service and protects data - in transit from network layer attacks such as man-in-the-middle, eavesdropping, - and session-hijacking","metadata":{"category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/enableNonSslPort","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","type":"Microsoft.Authorization/policyDefinitions","name":"22bee202-a82f-4305-9a2a-6d7f44d4dedb"},{"properties":{"displayName":"Audit - configuration of metric alert rules on Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - configuration of metric alert rules on Batch account to enable the required - metric","metadata":{"category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"metricName":{"type":"String","metadata":{"displayName":"Metric - name","description":"The metric name that an alert rule must be enabled on"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/alertRules","existenceScope":"Subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/alertRules/isEnabled","equals":"true"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.metricName","equals":"[parameters(''metricName'')]"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.resourceUri","equals":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourcegroups/'', resourceGroup().name, - ''/providers/Microsoft.Batch/batchAccounts/'', field(''name''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7","type":"Microsoft.Authorization/policyDefinitions","name":"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7"},{"properties":{"displayName":"[Preview]: - Deploy default Microsoft IaaSAntimalware extension for Windows Server","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuraion - when a VM is not configured with the antimalware extension.","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"ExclusionsPaths":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file paths or locations to exclude from scanning"}},"ExclusionsExtensions":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file extensions to exclude from scanning"}},"ExclusionsProcesses":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of process names to exclude from scanning"}},"RealtimeProtectionEnabled":{"type":"string","defaultValue":"true","metadata":{"description":"Indicates - whether or not real time protection is enabled (default is true)"}},"ScheduledScanSettingsIsEnabled":{"type":"string","defaultValue":"false","metadata":{"description":"Indicates - whether or not custom scheduled scan settings are enabled (default is false)"}},"ScheduledScanSettingsScanType":{"type":"string","defaultValue":"Quick","metadata":{"description":"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)"}},"ScheduledScanSettingsDay":{"type":"string","defaultValue":"7","metadata":{"description":"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)"}},"ScheduledScanSettingsTime":{"type":"string","defaultValue":"120","metadata":{"description":"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM."}}},"resources":[{"name":"[concat(parameters(''vmName''),''/IaaSAntimalware'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.Azure.Security","type":"IaaSAntimalware","typeHandlerVersion":"1.3","autoUpgradeMinorVersion":true,"settings":{"AntimalwareEnabled":true,"RealtimeProtectionEnabled":"[parameters(''RealtimeProtectionEnabled'')]","ScheduledScanSettings":{"isEnabled":"[parameters(''ScheduledScanSettingsIsEnabled'')]","day":"[parameters(''ScheduledScanSettingsDay'')]","time":"[parameters(''ScheduledScanSettingsTime'')]","scanType":"[parameters(''ScheduledScanSettingsScanType'')]"},"Exclusions":{"Extensions":"[parameters(''ExclusionsExtensions'')]","Paths":"[parameters(''ExclusionsPaths'')]","Processes":"[parameters(''ExclusionsProcesses'')]"}}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"RealtimeProtectionEnabled":{"value":"true"},"ScheduledScanSettingsIsEnabled":{"value":"true"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc","type":"Microsoft.Authorization/policyDefinitions","name":"2835b622-407b-4114-9198-6f7064cbe0dc"},{"properties":{"displayName":"Apply - tag and its default value","policyType":"BuiltIn","description":"Applies a - required tag and its default value if it is not specified by the user. Does - not apply to resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498","type":"Microsoft.Authorization/policyDefinitions","name":"2a0e14a6-b0a6-4fab-991a-187a4f81c498"},{"properties":{"displayName":"Audit - unrestricted network access to storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - unrestricted network access in your storage account firewall settings. Instead, - configure network rules so only applications from allowed networks can access - the storage account. To allow connections from specific internet or on-premise - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","equals":"Allow"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","type":"Microsoft.Authorization/policyDefinitions","name":"34c877ad-507e-4c82-993e-3452a6e0ad3c"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Logic Apps","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Logic Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","type":"Microsoft.Authorization/policyDefinitions","name":"34f95f76-5386-4de7-b824-0d8478470c9d"},{"properties":{"displayName":"Audit - enablement of encryption of Automation account variables","policyType":"BuiltIn","mode":"All","description":"It - is important to enable encryption of Automation account variable assets when - storing sensitive data","metadata":{"category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts/variables"},{"field":"Microsoft.Automation/automationAccounts/variables/isEncrypted","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","type":"Microsoft.Authorization/policyDefinitions","name":"3657f5a0-770e-44a3-b44e-9431ba1e9735"},{"properties":{"displayName":"[Preview]: - Deploy Threat Detection on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Threat Detection is enabled on SQL Servers.","metadata":{"category":"SQL","preview":true},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"}},"variables":{},"resources":[{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}}]},"parameters":{"serverName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5","type":"Microsoft.Authorization/policyDefinitions","name":"36d49e87-48c4-4f2e-beed-ba4ed02b71f5"},{"properties":{"displayName":"Audit - use of classic storage accounts","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager v2 for your storage accounts to provide security - enhancements such as: stronger access control (RBAC), better auditing, Azure - Resource Manager based deployment and governance, access to managed identities, - access to key vault for secrets, Azure AD-based authentication and support - for tags and resource groups for easier security management","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.classicStorage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","type":"Microsoft.Authorization/policyDefinitions","name":"37e0d2fe-28a5-43d6-a273-67d37d1f5606"},{"properties":{"displayName":"[Preview]: - Deploy default OMS VM Extension for Ubuntu VMs.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys OMS VM Extensions on Ubuntu VMs, and connects to the selected - Log Analytics workspace","metadata":{"category":"Compute"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list","strongType":"omsWorkspace"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","in":["14.04.2-LTS","12.04.5-LTS"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"resources":[{"name":"[concat(parameters(''vmName''),''/omsPolicy'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.EnterpriseCloud.Monitoring","type":"OmsAgentForLinux","typeHandlerVersion":"1.4","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - monitoring for Linux VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38","type":"Microsoft.Authorization/policyDefinitions","name":"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38"},{"properties":{"displayName":"Audit - secure transfer to storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - requirment of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","type":"Microsoft.Authorization/policyDefinitions","name":"404c3081-a854-4457-ae30-26a93ef643f9"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","type":"Microsoft.Authorization/policyDefinitions","name":"428256e6-1fac-4f48-a757-df34c2b3336d"},{"properties":{"displayName":"[Preview]: - Monitor permissive network access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"permissiveNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed","type":"Microsoft.Authorization/policyDefinitions","name":"44452482-524f-4bf4-b852-0bff7cc4a3ed"},{"properties":{"displayName":"Require - SQL Server version 12.0","policyType":"BuiltIn","description":"This policy - ensures all SQL servers use version 12.0","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"not":{"field":"Microsoft.Sql/servers/version","equals":"12.0"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf","type":"Microsoft.Authorization/policyDefinitions","name":"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf"},{"properties":{"displayName":"Enforce - automatic OS upgrade with app health checks on VMSS","policyType":"BuiltIn","mode":"All","description":"This - policy enforces usage of automatic OS upgrade with application health checks - through health probes, which enables safer rollout by evaluating application - health after each OS upgrade batch.","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"not":{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade","equals":"True"}},{"field":"Microsoft.Compute/VirtualMachineScaleSets/networkProfile.healthProbe.id","exists":"False"}]}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"465f0161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"[Preview]: - Monitor possible app Whitelisting in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Possible - Application Whitelist configuration will be monitored by Azure Security Center","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"applicationWhitelisting","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","type":"Microsoft.Authorization/policyDefinitions","name":"47a6b606-51aa-4496-8bb7-64b11cf66adc"},{"properties":{"displayName":"Apply - tag and its default value to resource groups","policyType":"BuiltIn","mode":"All","description":"Applies - a required tag and its default value to resource groups if it is not specified - by the user.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","type":"Microsoft.Authorization/policyDefinitions","name":"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71"},{"properties":{"displayName":"Allow - resource creation only in India data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: West India, South India, - Central India","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["westindia","southindia","centralindia"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54","type":"Microsoft.Authorization/policyDefinitions","name":"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54"},{"properties":{"displayName":"Audit - the setting of ClusterProtectionLevel property to EncryptAndSign in Service - Fabric","policyType":"BuiltIn","mode":"Indexed","description":"Service Fabric - provides three levels of protection (None, Sign and EncryptAndSign) for node-to-node - communication using a primary cluster certificate. Set the protection level - to ensure that all node-to-node messages are encrypted and digitally signed","metadata":{"category":"Service - Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].name","notEquals":"Security"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name","notEquals":"ClusterProtectionLevel"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value","notEquals":"EncryptAndSign"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","type":"Microsoft.Authorization/policyDefinitions","name":"617c02be-7f02-4efd-8836-3180d47b6c68"},{"properties":{"displayName":"[Preview]: - Audit missing blob encryption for storage accounts","policyType":"BuiltIn","mode":"All","description":"This - policy audits storage accounts without blob encryption. It only applies to - Microsoft.Storage resource types, not other storage providers. Possible network - Just In Time access will be monitored by Azure Security Center as recommendations.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759","type":"Microsoft.Authorization/policyDefinitions","name":"655cb504-bcee-4362-bd4c-402e6aa38759"},{"properties":{"displayName":"Not - allowed resource types","policyType":"BuiltIn","description":"This policy - enables you to specify the resource types that your organization cannot deploy.","metadata":{"category":"General"},"parameters":{"listOfResourceTypesNotAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that cannot be deployed.","displayName":"Not allowed - resource types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypesNotAllowed'')]"},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749","type":"Microsoft.Authorization/policyDefinitions","name":"6c112d4e-5bc7-47ae-a041-ea2d9dccd749"},{"properties":{"displayName":"Allow - resource creation only in Japan data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fdb9205-3462-4cfc-87d8-16c7860b53f4","type":"Microsoft.Authorization/policyDefinitions","name":"6fdb9205-3462-4cfc-87d8-16c7860b53f4"},{"properties":{"displayName":"Allowed - storage account SKUs","policyType":"BuiltIn","description":"This policy enables - you to specify a set of storage account SKUs that your organization can deploy.","metadata":{"category":"Storage"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for storage accounts.","displayName":"Allowed - SKUs","strongType":"StorageSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1","type":"Microsoft.Authorization/policyDefinitions","name":"7433c107-6db4-4ad1-b57a-a76dce0154a1"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in App Services","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised","metadata":{"category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites/config"},{"field":"name","equals":"web"},{"anyOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac","type":"Microsoft.Authorization/policyDefinitions","name":"752c6934-9bcc-4749-b004-655e676ae2ac"},{"properties":{"displayName":"[Preview]: - Monitor VM Vulnerabilities in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"vulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c","type":"Microsoft.Authorization/policyDefinitions","name":"760a85ff-6162-42b3-8d70-698e268f648c"},{"properties":{"displayName":"Require - blob encryption for storage accounts","policyType":"BuiltIn","description":"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers.","metadata":{"category":"Storage"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f","type":"Microsoft.Authorization/policyDefinitions","name":"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f"},{"properties":{"displayName":"Audit - diagnostic setting","policyType":"BuiltIn","mode":"All","description":"Audit - diagnostic setting for selected resource types","metadata":{"category":"Monitoring"},"parameters":{"listOfResourceTypes":{"type":"Array","metadata":{"displayName":"Resource - Types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypes'')]"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9","type":"Microsoft.Authorization/policyDefinitions","name":"7f89b1eb-583c-429a-8828-af049802c1d9"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables recreation of - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","type":"Microsoft.Authorization/policyDefinitions","name":"83a214f7-d01a-484b-91a9-ed54470c9a6a"},{"properties":{"displayName":"Deploy - SQL DB transparent data encryption","policyType":"BuiltIn","mode":"Indexed","description":"Enables - transparent data encryption on SQL databases","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"Enabled"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullDbName":{"type":"string"}},"resources":[{"name":"[concat(parameters(''fullDbName''), - ''/current'')]","type":"Microsoft.Sql/servers/databases/transparentDataEncryption","apiVersion":"2014-04-01","properties":{"status":"Enabled"}}]},"parameters":{"fullDbName":{"value":"[field(''fullName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f","type":"Microsoft.Authorization/policyDefinitions","name":"86a912f6-9a06-4e26-b447-11b16ba8659f"},{"properties":{"displayName":"[Preview]: - Monitor missing system updates in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.OperationalInsights/workspaces"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"systemUpdates","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","type":"Microsoft.Authorization/policyDefinitions","name":"86b3d65f-7626-441e-b690-81a8b71cff60"},{"properties":{"displayName":"Enforce - tag and its value on resource groups","policyType":"BuiltIn","mode":"All","description":"Enforces - a required tag and its value on resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46","type":"Microsoft.Authorization/policyDefinitions","name":"8ce3da23-7156-49e4-b145-24f95f9dcb46"},{"properties":{"displayName":"Allow - resource creation only in European data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: North Europe, West Europe","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["northeurope","westeurope"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b","type":"Microsoft.Authorization/policyDefinitions","name":"94c19f19-8192-48cd-a11b-e37099d3e36b"},{"properties":{"displayName":"Allow - resource creation only in United States data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["centralus","eastus","eastus2","northcentralus","southcentralus","westus"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869","type":"Microsoft.Authorization/policyDefinitions","name":"983211ba-f348-4758-983b-21fa29294869"},{"properties":{"displayName":"[Preview]: - Monitor unprotected network endpoints in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - endpoints without a Next Generation Firewall''s protection will be monitored - by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Network/publicIPAddresses","Microsoft.ClassicCompute/domainNames"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedNetworkEndpoint","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","type":"Microsoft.Authorization/policyDefinitions","name":"9daedab3-fb2d-461e-b861-71790eead4f6"},{"properties":{"displayName":"Allowed - resource types","policyType":"BuiltIn","description":"This policy enables - you to specify the resource types that your organization can deploy.","metadata":{"category":"General"},"parameters":{"listOfResourceTypesAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that can be deployed.","displayName":"Allowed resource - types","strongType":"resourceTypes"}}},"policyRule":{"if":{"not":{"field":"type","in":"[parameters(''listOfResourceTypesAllowed'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","type":"Microsoft.Authorization/policyDefinitions","name":"a08ec900-254a-4555-9bf5-e42af04b5c5c"},{"properties":{"displayName":"Audit - authorization rules on Service Bus namespaces","policyType":"BuiltIn","mode":"All","description":"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least previlege - security model, you shoud create access policies at the entity level for queues - and topics to provide access to only the specific entity","metadata":{"category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee","type":"Microsoft.Authorization/policyDefinitions","name":"a1817ec0-a368-432a-8057-8371e17ac6ee"},{"properties":{"displayName":"Audit - usage of custom RBAC rules","policyType":"BuiltIn","mode":"All","description":"Audit - built-in roles such as ''Owner, Contributer, Reader'' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling","metadata":{"category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","type":"Microsoft.Authorization/policyDefinitions","name":"a451c1ef-c6ca-483d-87ed-f49761e3ffb5"},{"properties":{"displayName":"Audit - SQL server level Auditing settings","policyType":"BuiltIn","mode":"NotSpecified","description":"Audits - the existence of SQL Auditing at the server level","metadata":{"category":"SQL"},"parameters":{"setting":{"type":"String","metadata":{"displayName":"Desired - Auditing setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","type":"Microsoft.Authorization/policyDefinitions","name":"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9"},{"properties":{"displayName":"Enforce - encryption on Data Lake Store accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures encryption is enabled on all Data Lake Store accounts","metadata":{"category":"Data - Lake"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"field":"Microsoft.DataLakeStore/accounts/encryptionState","equals":"Disabled"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"a7ff3161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"[Preview]: - Monitor unencrypted SQL database in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Unencrypted - SQL servers or databases will be monitored by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers","Microsoft.SQL/servers/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16","type":"Microsoft.Authorization/policyDefinitions","name":"a8bef009-a5c9-4d0f-90d7-6018734e8a16"},{"properties":{"displayName":"[Preview]: - Deploy network watcher when virtual networks are created","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.","metadata":{"category":"Network"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"networkWatcherRG","existenceCondition":{"field":"location","equals":"[field(''location'')]"},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"}},"resources":[{"apiVersion":"2016-09-01","type":"Microsoft.Network/networkWatchers","name":"[concat(''networkWacher_'', - parameters(''location''))]","location":"[parameters(''location'')]"}]},"parameters":{"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9","type":"Microsoft.Authorization/policyDefinitions","name":"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"},{"properties":{"displayName":"[Preview]: - Automatic provisioning of security monitoring agent","policyType":"BuiltIn","mode":"All","description":"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.","metadata":{"category":"Security - Center","preview":true},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Security/complianceResults","name":"securityAgent","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24","type":"Microsoft.Authorization/policyDefinitions","name":"abcc6037-1fc4-47f6-aac5-89706589be24"},{"properties":{"displayName":"Allow - resource creation if ''environment'' tag value in allowed values","policyType":"BuiltIn","description":"Allows - resource creation if the ''environment'' tag is set to one of the following - values: production, dev, test, staging","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags.environment","in":["production","dev","test","staging"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9","type":"Microsoft.Authorization/policyDefinitions","name":"ac7e5fc0-c029-4b12-91d4-a8500ce697f9"},{"properties":{"displayName":"[Preview]: - Monitor missing Endpoint Protection in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.OperationalInsights/workspaces"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"endpointProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","type":"Microsoft.Authorization/policyDefinitions","name":"af6cd1bd-1635-48cb-bde7-5b15693900b9"},{"properties":{"displayName":"[Preview]: - Monitor unaudited SQL database in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"SQL - servers and databases which doesn''t have SQL auditing turned on will be monitored - by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers","Microsoft.SQL/servers/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"auditing","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d","type":"Microsoft.Authorization/policyDefinitions","name":"af8051bf-258b-44e2-a2bf-165330459f9d"},{"properties":{"displayName":"[Preview]: - Monitor possible network Just In Time (JIT) access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"jitNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","type":"Microsoft.Authorization/policyDefinitions","name":"b0f33259-77d7-4c9e-aac6-3aabcfae693c"},{"properties":{"displayName":"Audit - authorization rules on Event Hub namespaces","policyType":"BuiltIn","mode":"Indexed","description":"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least previlege - security model, you shoud create access policies at the entity level for queues - and topics to provide access to only the specific entity","metadata":{"category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"name","notEquals":"RootManageSharedAccessKey"},{"field":"type","equals":"Microsoft.EventHub/namespaces/authorizationRules"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7","type":"Microsoft.Authorization/policyDefinitions","name":"b278e460-7cfc-4451-8294-cccc40a940d7"},{"properties":{"displayName":"Audit - enabling of diagnostic logs for Search service","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","type":"Microsoft.Authorization/policyDefinitions","name":"b4330a05-a843-4bc8-bf9a-cacce50c67f4"},{"properties":{"displayName":"Audit - usage of Azure Active Directory for client authentication in Service Fabric","policyType":"BuiltIn","mode":"Indexed","description":"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric","metadata":{"category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","exists":"false"},{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","type":"Microsoft.Authorization/policyDefinitions","name":"b54ed75b-3e1a-44ac-a333-05ba39b99ff0"},{"properties":{"displayName":"Allow - resource creation only in Asia data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["eastasia","southeastasia","westindia","southindia","centralindia","japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94","type":"Microsoft.Authorization/policyDefinitions","name":"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Data Lake Analytics","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","type":"Microsoft.Authorization/policyDefinitions","name":"c95c74d9-38fe-4f0d-af86-0c7d626a315c"},{"properties":{"displayName":"[Preview]: - Apply Diagnostic Settings for Network Security Groups","policyType":"BuiltIn","mode":"Indexed","description":"This - policy automatically deploys diagnostic settings to network security groups.","metadata":{"category":"Monitoring"},"parameters":{"storagePrefix":{"type":"String","metadata":{"displayName":"Storage - Account Prefix for Regional Storage Account"}},"rgName":{"type":"String","metadata":{"displayName":"Resource - Group Name for Storage Account (must exist)","description":"This resource - group must already exist","strongType":"ExistingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"setbypolicy","existenceCondition":{"field":"name","notlike":"*"},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"},"nsgName":{"type":"string"},"rgName":{"type":"string"}},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings","name":"[concat(parameters(''nsgName''),''/Microsoft.Insights/setbypolicy'')]","apiVersion":"2017-05-01-preview","location":"[parameters(''location'')]","dependsOn":["deployStorageAccount"],"properties":{"storageAccountId":"[reference(''deployStorageAccount'').outputs.storageAccountId.value]","logs":[{"category":"NetworkSecurityGroupEvent","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"NetworkSecurityGroupRuleCounter","enabled":true,"retentionPolicy":{"enabled":false,"days":0}}]}},{"apiVersion":"2017-05-10","name":"deployStorageAccount","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''rgName'')]","properties":{"mode":"incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"}},"resources":[{"apiVersion":"2017-06-01","type":"Microsoft.Storage/storageAccounts","name":"[concat(parameters(''storageprefix''), - parameters(''location''))]","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"[parameters(''location'')]","tags":{"created-by":"policy"},"scale":null,"properties":{"networkAcls":{"bypass":"AzureServices","defaultAction":"Allow","ipRules":[],"virtualNetworkRules":[]},"supportsHttpsTrafficOnly":false}}],"outputs":{"storageAccountId":{"type":"string","value":"[resourceId(''Microsoft.Storage/storageAccounts'',concat(parameters(''storagePrefix''), - parameters(''location'')))]"}}}}}]},"parameters":{"location":{"value":"[field(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"},"rgName":{"value":"[parameters(''rgName'')]"},"nsgName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89","type":"Microsoft.Authorization/policyDefinitions","name":"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89"},{"properties":{"displayName":"Allowed - virtual machine SKUs","policyType":"BuiltIn","description":"This policy enables - you to specify a set of virtual machine SKUs that your organization can deploy.","metadata":{"category":"Compute"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for virtual machines.","displayName":"Allowed - SKUs","strongType":"VMSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"field":"Microsoft.Compute/virtualMachines/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3","type":"Microsoft.Authorization/policyDefinitions","name":"cccc23c7-8427-4f53-ad12-b6a63eb452b3"},{"properties":{"displayName":"Allow - resource creation if ''department'' tag set","policyType":"BuiltIn","description":"Allows - resource creation only if the ''department'' tag is set","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags","containsKey":"department"}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064","type":"Microsoft.Authorization/policyDefinitions","name":"cd8dc879-a2ae-43c3-8211-1877c5755064"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Key Vault","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Key Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","type":"Microsoft.Authorization/policyDefinitions","name":"cf820ca0-f99e-4f3e-84fb-66e913812d21"},{"properties":{"displayName":"Allow - resource creation only in Japan data centers","policyType":"BuiltIn","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e01598e8-6538-41ed-95e8-8b29746cd697","type":"Microsoft.Authorization/policyDefinitions","name":"e01598e8-6538-41ed-95e8-8b29746cd697"},{"properties":{"displayName":"[Preview]: - Monitor OS vulnerabilities in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.OperationalInsights/workspaces"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"osVulnerabilities","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","equals":"Monitored"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","type":"Microsoft.Authorization/policyDefinitions","name":"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15"},{"properties":{"displayName":"Allowed - locations","policyType":"BuiltIn","description":"This policy enables you to - restrict the locations your organization can specify when deploying resources. - Use to enforce your geo-compliance requirements. Excludes resource groups, - Microsoft.AzureActiveDirectory/b2cDirectories, and resources that use the - ''global'' region.","metadata":{"category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that can be specified when deploying resources.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"location","notEquals":"global"},{"field":"type","notEquals":"Microsoft.AzureActiveDirectory/b2cDirectories"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","type":"Microsoft.Authorization/policyDefinitions","name":"e56962a6-4747-49cd-b67b-bf8b01975c4c"},{"properties":{"displayName":"Allowed - locations for resource groups","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.","metadata":{"category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that resource groups can be created in.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988","type":"Microsoft.Authorization/policyDefinitions","name":"e765b5de-1225-4ba3-bd56-1ac6695af988"},{"properties":{"displayName":"Audit - existence of authorization rules on Event Hub entities","policyType":"BuiltIn","mode":"Indexed","description":"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access","metadata":{"category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces/eventhubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/eventHubs/authorizationRules"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d","type":"Microsoft.Authorization/policyDefinitions","name":"f4826e5f-6a27-407c-ae3e-9582eb39891d"},{"properties":{"displayName":"[Preview]: - Deploy Auditing on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Auditing is enabled on SQL Servers for enhanced security - and compliance. It will automatically create a storage account in the same - region as the SQL server to store audit records.","metadata":{"category":"SQL"},"parameters":{"retentionDays":{"type":"String","metadata":{"description":"The - value in days of the retention period (0 indicates unlimited retention)","displayName":"Retention - days (optional, 180 days if unspecified)"}},"storageAccountsResourceGroup":{"type":"String","metadata":{"displayName":"Resource - group name for storage accounts","description":"Auditing writes database events - to an audit log in your Azure Storage account (a storage account will be created - in each region where a SQL Server is created that will be shared by all servers - in that region). Important - for proper operation of Auditing do not delete - or rename the resource group or the storage accounts.","strongType":"existingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"Enabled"},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"auditRetentionDays":{"type":"string"},"storageAccountsResourceGroup":{"type":"string"},"location":{"type":"string"}},"variables":{"retentionDays":"[int(parameters(''auditRetentionDays''))]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - parameters(''location''), parameters(''storageAccountsResourceGroup''))]","locationCode":"[substring(parameters(''location''), - 0, 3)]","storageName":"[tolower(concat(''sqlaudit'', variables(''locationCode''), - variables(''uniqueStorage'')))]","createStorageAccountDeploymentName":"[concat(''sqlServerAuditingStorageAccount-'', - variables(''locationCode''))]"},"resources":[{"apiVersion":"2017-05-10","name":"[variables(''createStorageAccountDeploymentName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''storageAccountsResourceGroup'')]","properties":{"mode":"Incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storageName":{"value":"[variables(''storageName'')]"}},"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-policy/master/samples/SQL/deploy-sql-server-auditing/createStorage.template.json","contentVersion":"1.0.0.0"}}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/auditingSettings","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","storageEndpoint":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountEndPoint.value]","storageAccountAccessKey":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountKey.value]","retentionDays":"[variables(''retentionDays'')]","auditActionsAndGroups":null,"storageAccountSubscriptionId":"[subscription().subscriptionId]","isStorageSecondaryKeyInUse":false}}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"auditRetentionDays":{"value":"[parameters(''retentionDays'')]"},"storageAccountsResourceGroup":{"value":"[parameters(''storageAccountsResourceGroup'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036","type":"Microsoft.Authorization/policyDefinitions","name":"f4c68484-132f-41f9-9b6d-3e4b1cb55036"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Service Bus","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Service Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","type":"Microsoft.Authorization/policyDefinitions","name":"f8d36e2f-389b-4ee4-898d-21aeb69a0f45"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Azure Stream Analytics","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Stream Analytics"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingJobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","type":"Microsoft.Authorization/policyDefinitions","name":"f9be5368-9bf5-4b84-9e0a-7850da98bb46"}]}'} - headers: - cache-control: [no-cache] - content-length: ['84775'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:26:25 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 policyclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb?api-version=2016-12-01 - response: - body: {string: !!python/unicode '{"error":{"code":"PolicyDefinitionNotFound","message":"The - policy definition ''057ef27e-665e-4328-8ea3-04b3122bd9fb'' could not be found."}}'} - headers: - cache-control: [no-cache] - content-length: ['138'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:26:25 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - status: {code: 404, message: Not Found} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 policyclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb?api-version=2016-12-01 - response: - body: {string: !!python/unicode '{"properties":{"displayName":"Audit enabling - of diagnostic logs in Azure Data Lake Store","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of logs and retain them up to a year. This enables you to recreate - activity trails for investigation purposes when a security incident occurs - or your network is compromised","metadata":{"category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","type":"Microsoft.Authorization/policyDefinitions","name":"057ef27e-665e-4328-8ea3-04b3122bd9fb"}'} - headers: - cache-control: [no-cache] - content-length: ['1355'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:26:25 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_subscription_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_subscription_locks.yaml deleted file mode 100644 index e8b6f5ec7b2..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_subscription_locks.yaml +++ /dev/null @@ -1,386 +0,0 @@ -interactions: -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"level": - "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock create] - Connection: [keep-alive] - Content-Length: ['101'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:29 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock list] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['581'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:30 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['581'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:31 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:31 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['581'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:31 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:32 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['581'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:33 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:32 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"notes": - "notes000002", "level": "ReadOnly"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Length: ['130'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:33 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['608'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:34 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:34 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: !!python/unicode '{"name": "cli-test-lock000001", "properties": {"notes": - "notes000002", "level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Length: ['134'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:34 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock delete] - Connection: [keep-alive] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: !!python/unicode '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht","type":"Microsoft.Authorization/locks","name":"cli-test-lockuc7xssix6fnwzvp5tmddtbpf7nrzg2pfuht"},{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['612'] - content-type: [application/json; charset=utf-8] - date: ['Fri, 17 Aug 2018 17:21:34 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - User-Agent: [python/2.7.14 (Windows-10-10.0.17134) requests/2.19.1 msrest/0.5.4 - msrest_azure/0.4.34 managementlockclient/2.0.0 Azure-SDK-For-Python AZURECLI/2.0.45] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: !!python/unicode ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Fri, 17 Aug 2018 17:21:35 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 200, message: OK} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_tag_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_tag_scenario.yaml deleted file mode 100644 index 4d85dd71a9f..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/recordings/test_tag_scenario.yaml +++ /dev/null @@ -1,675 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":51}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":51}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29148' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - date: - - Mon, 29 Jun 2020 07:57:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":51}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":51}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":51},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29148' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[]}' - headers: - cache-control: - - no-cache - content-length: - - '154' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag add-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test","tagValue":"test","count":{"type":"Total","value":0}}' - headers: - cache-control: - - no-cache - content-length: - - '150' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag add-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2?api-version=2018-02-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}' - headers: - cache-control: - - no-cache - content-length: - - '152' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test","tagValue":"test","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29781' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag remove-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:57:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29630' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag remove-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:57:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29478' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-02-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:57:36 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-02-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:57:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_create_ui_definition.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_create_ui_definition.json deleted file mode 100644 index 006188d23fd..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_create_ui_definition.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#", - "handler": "Microsoft.Compute.MultiVm", - "version": "0.1.2-preview", - "parameters": { - "basics": [ - { - "name": "adminUsername", - "type": "Microsoft.Compute.UserNameTextBox", - "label": "Admin Username", - "toolTip": "Admin user name for the virtual machine", - "osPlatform": "Linux" - }, - { - "name": "adminPassword", - "type": "Microsoft.Common.PasswordBox", - "label": { - "password": "Admin Password", - "confirmPassword": "Confirm password" - }, - "toolTip": "Admin password for the virtual machine", - "constraints": { - "required": true, - "regex": "^(?:(?=.*[a-z])(?:(?=.*[A-Z])(?=.*[\\d\\W])|(?=.*\\W)(?=.*\\d))|(?=.*\\W)(?=.*[A-Z])(?=.*\\d)).{6,72}$", - "validationMessage": "The password must be between 6 and 72 characters long, and contain characters from at least 3 of the following groups: uppercase characters, lowercase characters, numbers, and special characters." - }, - "options": { - "hideConfirmation": false - } - } - ], - "steps": [ - { - "name": "ipConfig", - "label": "IP Config", - "subLabel": { - "preValidation": "Configure the public IP address", - "postValidation": "Done" - }, - "bladeTitle": "IP Settings", - "elements": [ - { - "name": "ipCombo", - "type": "Microsoft.Network.PublicIpAddressCombo", - "label": { - "publicIpAddress": "Public IP address", - "domainNameLabel": "Domain name label" - }, - "toolTip": { - "publicIpAddress": "", - "domainNameLabel": "" - }, - "defaultValue": { - "publicIpAddressName": "myPublicIP" - }, - "constraints": { - "required": { - "domainNameLabel": true - } - }, - "options": { - "hideNone": true, - "hideDomainNameLabel": false, - "hideExisting": true - }, - "visible": true - } - ] - } - ], - "outputs": { - "adminUsername": "[basics('adminUsername')]", - "adminPassword": "[basics('adminPassword')]", - "dnsLabelPrefix": "[steps('ipConfig').ipCombo.domainNameLabel]", - "applianceResourceNameForMainTemplate": "testappname" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_main_template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_main_template.json deleted file mode 100644 index 87adfe52d25..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_main_template.json +++ /dev/null @@ -1,187 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "adminUsername": { - "type": "string", - "metadata": { - "description": "User name for the Virtual Machine." - } - }, - "adminPassword": { - "type": "securestring", - "metadata": { - "description": "Password for the Virtual Machine." - } - }, - "dnsLabelPrefix": { - "type": "string", - "metadata": { - "description": "Unique DNS Name for the Public IP used to access the Virtual Machine." - } - }, - "ubuntuOSVersion": { - "type": "string", - "defaultValue": "16.04.0-LTS", - "allowedValues": [ - "12.04.5-LTS", - "14.04.5-LTS", - "15.10", - "16.04.0-LTS" - ], - "metadata": { - "description": "The Ubuntu version for the VM. This will pick a fully patched image of this given Ubuntu version." - } - } - }, - "variables": { - "storageAccountName": "[concat(uniquestring(resourceGroup().id), 'salinuxvm')]", - "imagePublisher": "Canonical", - "imageOffer": "UbuntuServer", - "nicName": "myVMNic", - "addressPrefix": "10.0.0.0/16", - "subnetName": "Subnet", - "subnetPrefix": "10.0.0.0/24", - "storageAccountType": "Standard_LRS", - "publicIPAddressName": "myPublicIP", - "publicIPAddressType": "Dynamic", - "vmName": "MyUbuntuVM", - "vmSize": "Standard_A1", - "virtualNetworkName": "MyVNET", - "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',variables('virtualNetworkName'))]", - "subnetRef": "[concat(variables('vnetID'),'/subnets/',variables('subnetName'))]" - }, - "resources": [ - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[variables('storageAccountName')]", - "apiVersion": "2017-06-01", - "location": "westus", - "sku": { - "name": "[variables('storageAccountType')]" - }, - "kind": "Storage", - "properties": {} - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/publicIPAddresses", - "name": "[variables('publicIPAddressName')]", - "location": "westus", - "properties": { - "publicIPAllocationMethod": "[variables('publicIPAddressType')]", - "dnsSettings": { - "domainNameLabel": "[parameters('dnsLabelPrefix')]" - } - } - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/virtualNetworks", - "name": "[variables('virtualNetworkName')]", - "location": "westus", - "properties": { - "addressSpace": { - "addressPrefixes": [ - "[variables('addressPrefix')]" - ] - }, - "subnets": [ - { - "name": "[variables('subnetName')]", - "properties": { - "addressPrefix": "[variables('subnetPrefix')]" - } - } - ] - } - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/networkInterfaces", - "name": "[variables('nicName')]", - "location": "westus", - "dependsOn": [ - "[resourceId('Microsoft.Network/publicIPAddresses/', variables('publicIPAddressName'))]", - "[resourceId('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]" - ], - "properties": { - "ipConfigurations": [ - { - "name": "ipconfig1", - "properties": { - "privateIPAllocationMethod": "Dynamic", - "publicIPAddress": { - "id": "[resourceId('Microsoft.Network/publicIPAddresses',variables('publicIPAddressName'))]" - }, - "subnet": { - "id": "[variables('subnetRef')]" - } - } - } - ] - } - }, - { - "apiVersion": "2017-03-30", - "type": "Microsoft.Compute/virtualMachines", - "name": "[variables('vmName')]", - "location": "westus", - "dependsOn": [ - "[resourceId('Microsoft.Storage/storageAccounts/', variables('storageAccountName'))]", - "[resourceId('Microsoft.Network/networkInterfaces/', variables('nicName'))]" - ], - "properties": { - "hardwareProfile": { - "vmSize": "[variables('vmSize')]" - }, - "osProfile": { - "computerName": "[variables('vmName')]", - "adminUsername": "[parameters('adminUsername')]", - "adminPassword": "[parameters('adminPassword')]" - }, - "storageProfile": { - "imageReference": { - "publisher": "[variables('imagePublisher')]", - "offer": "[variables('imageOffer')]", - "sku": "[parameters('ubuntuOSVersion')]", - "version": "latest" - }, - "osDisk": { - "createOption": "FromImage" - }, - "dataDisks": [ - { - "diskSizeGB": "1023", - "lun": 0, - "createOption": "Empty" - } - ] - }, - "networkProfile": { - "networkInterfaces": [ - { - "id": "[resourceId('Microsoft.Network/networkInterfaces',variables('nicName'))]" - } - ] - }, - "diagnosticsProfile": { - "bootDiagnostics": { - "enabled": "true", - "storageUri": "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('storageAccountName')), '2016-01-01').primaryEndpoints.blob)]" - } - } - } - } - ], - "outputs": { - "hostname": { - "type": "string", - "value": "[reference(variables('publicIPAddressName')).dnsSettings.fqdn]" - }, - "sshCommand": { - "type": "string", - "value": "[concat('ssh ', parameters('adminUsername'), '@', reference(variables('publicIPAddressName')).dnsSettings.fqdn)]" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param.json deleted file mode 100644 index a8a8df49f7f..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "allowedLocations": { - "value": [ - "australiaeast", - "eastus", - "japaneast", - "westus" - ] - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param_def.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param_def.json deleted file mode 100644 index a35854b9b18..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_param_def.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "allowedLocations": { - "type": "array", - "metadata": { - "description": "The list of locations that can be specified when deploying resources", - "strongType": "location", - "displayName": "Allowed locations" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_rule.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_rule.json deleted file mode 100644 index fbe0ed5d654..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_rule.json +++ /dev/null @@ -1,11 +0,0 @@ -{ - "if": { - "not": { - "field": "location", - "in": "[parameters('allowedLocations')]" - } - }, - "then": { - "effect": "deny" - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_set.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_set.json deleted file mode 100644 index 1abeb526f91..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/sample_policy_set.json +++ /dev/null @@ -1 +0,0 @@ -[{"policyDefinitionId": "/subscriptions/0b1f6471-1bf0-4dda-aec3-cb9272f09590/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2", "parameters": {"allowedLocations": {"value": ["australiaeast", "eastus", "japaneast", "westus"]}}}] \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy.json deleted file mode 100644 index f35114273a8..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "location": { - "type": "string", - "defaultValue": "[resourceGroup().location]", - "metadata": { - "description": "Location for the network security group." - } - }, - "name": { - "type": "string", - "metadata": { - "description": "Name of the network security group." - } - } - }, - "variables": { - }, - "resources": [ - { - "type": "Microsoft.Network/networkSecurityGroups", - "name": "[parameters('name')]", - "apiVersion": "2015-06-15", - "location": "[parameters('location')]", - "properties": { - "securityRules": [ - ] - }, - "dependsOn": [ ] - } - ], - "outputs": { - "NewNSG": { - "type": "object", - "value": "[reference(parameters('name'))]" - } - } -} diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy_parameters.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy_parameters.json deleted file mode 100644 index 40c143fbf58..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/simple_deploy_parameters.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "parameters": { - "location": { - "value": "westus" - }, - "name": { - "value": "azure-cli-deploy-test-nsg1" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-object.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-object.json deleted file mode 100644 index 64799c0ed6b..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-object.json +++ /dev/null @@ -1,8 +0,0 @@ -[ - { - "name": "bepool1" - }, - { - "name": "bepool2" - } -] \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-params.json deleted file mode 100644 index ef8b30fdcb3..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-params.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "name": { - "value": "test-lb" - }, - "location": { - "value": "westus" - }, - "privateIPAllocationMethod": { - "value": "Dynamic" - }, - "tags": { - "value": { - "key": "super=value" - } - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template-lite.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template-lite.json deleted file mode 100644 index 7df0aa57496..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template-lite.json +++ /dev/null @@ -1,5 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "resources": [] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template.json deleted file mode 100644 index cdd7f5a8b73..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test-template.json +++ /dev/null @@ -1,48 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "name": { - "type": "string" - }, - "location": { - "type": "string" - }, - "subnetId": { - "type": "string" - }, - "privateIPAllocationMethod": { - "type": "string" - }, - "backendAddressPools": { - "type": "array" - }, - "tags": { - "type": "object" - } - }, - "resources": [ - { - "apiVersion": "2016-03-30", - "dependsOn": [ ], - "location": "[parameters('location')]", - "name": "[parameters('name')]", - "properties": { - "frontendIPConfigurations": [ - { - "name": "LoadBalancerFrontEnd", - "properties": { - "privateIPAllocationMethod": "[parameters('privateIPAllocationMethod')]", - "subnet": { - "id": "[parameters('subnetId')]" - } - } - } - ], - "backendAddressPools": "[parameters('backendAddressPools')]" - }, - "tags": "[parameters('tags')]", - "type": "Microsoft.Network/loadBalancers" - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_api_check.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_api_check.py deleted file mode 100644 index 05bf47dc968..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_api_check.py +++ /dev/null @@ -1,97 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -from unittest.mock import MagicMock - -from knack.util import CLIError -from azure.cli.command_modules.resource.custom import (_ResourceUtils, _validate_resource_inputs, - parse_resource_id) - - -class TestApiCheck(unittest.TestCase): - @classmethod - def setUpClass(cls): - pass - - @classmethod - def tearDownClass(cls): - pass - - def setUp(self): - pass - - def tearDown(self): - pass - - def test_parse_resource(self): - parts = parse_resource_id('/subscriptions/00000/resourcegroups/bocconitestlabrg138089/' - 'providers/microsoft.devtestlab/labs/bocconitestlab/' - 'virtualmachines/tasktest1') - self.assertIsNotNone(parts.get('type')) - - def test_parse_resource_capital(self): - parts = parse_resource_id('/subscriptions/00000/resourceGroups/bocconitestlabrg138089/' - 'providers/microsoft.devtestlab/labs/bocconitestlab/' - 'virtualmachines/tasktest1') - self.assertIsNotNone(parts.get('type')) - - def test_validate_resource_inputs(self): - self.assertRaises(CLIError, _validate_resource_inputs, None, None, None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', None, None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', 'b', None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', 'b', 'c', None) - _validate_resource_inputs('a', 'b', 'c', 'd') - - def test_resolve_api_provider_backup(self): - # Verifies provider is used as backup if api-version not specified. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, resource_type='Mock/test', resource_name='vnet1', - resource_group_name='rg', rcf=rcf) - self.assertEqual(res_utils.api_version, "2016-01-01") - - def test_resolve_api_provider_with_parent_backup(self): - # Verifies provider (with parent) is used as backup if api-version not specified. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, parent_resource_path='foo/testfoo123', resource_group_name='rg', - resource_provider_namespace='Mock', resource_type='test', - resource_name='vnet1', - rcf=rcf) - self.assertEqual(res_utils.api_version, "1999-01-01") - - def test_resolve_api_all_previews(self): - # Verifies most recent preview version returned only if there are no non-preview versions. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, resource_type='Mock/preview', resource_name='vnet1', - resource_group_name='rg', rcf=rcf) - self.assertEqual(res_utils.api_version, "2005-01-01-preview") - - def _get_mock_client(self): - client = MagicMock() - provider = MagicMock() - provider.resource_types = [ - self._get_mock_resource_type('skip', ['2000-01-01-preview', '2000-01-01']), - self._get_mock_resource_type('test', ['2016-01-01-preview', '2016-01-01']), - self._get_mock_resource_type('foo', ['1999-01-01-preview', '1999-01-01']), - self._get_mock_resource_type('preview', ['2005-01-01-preview', '2004-01-01-preview']) - ] - client.providers.get.return_value = provider - return client - - def _get_mock_resource_type(self, name, api_versions): # pylint: disable=no-self-use - rt = MagicMock() - rt.resource_type = name - rt.api_versions = api_versions - return rt - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_locks.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_locks.py deleted file mode 100644 index ac0bb29a7d1..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_locks.py +++ /dev/null @@ -1,388 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -from time import sleep -import unittest -from azure.cli.testsdk import ScenarioTest, JMESPathCheck, ResourceGroupPreparer, record_only -from azure.cli.command_modules.resource.custom import _parse_lock_id - - -class ResourceLockTests(ScenarioTest): - def test_list_locks(self): - # just make sure this doesn't throw - self.cmd('az lock list').get_output_in_json() - - @record_only() - def test_generic_subscription_locks(self): - for lock_type in ['ReadOnly', 'CanNotDelete']: - lock_name = self.create_random_name('cli-test-lock', 48) - lock = self.cmd('az lock create -n {} --lock-type {}'.format(lock_name, lock_type)).get_output_in_json() - lock_id = lock.get('id') - self._sleep_for_lock_operation() - - locks_list = self.cmd('az lock list').get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, [lock['name'] for lock in locks_list]) - - lock = self.cmd('az lock show -n {}'.format(lock_name)).get_output_in_json() - lock_from_id = self.cmd('az lock show --ids {}'.format(lock_id)).get_output_in_json() - - self.assertEqual(lock.get('name', None), lock_name) - self.assertEqual(lock_from_id.get('name', None), lock_name) - self.assertEqual(lock.get('level', None), lock_type) - - notes = self.create_random_name('notes', 20) - new_lvl = 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - lock = self.cmd('az lock update -n {} --notes {} --lock-type {}' - .format(lock_name, notes, new_lvl)).get_output_in_json() - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), new_lvl) - - lock = self.cmd('az lock update --ids {} --lock-type {}' - .format(lock_id, lock_type)).get_output_in_json() - self.assertEqual(lock.get('level', None), lock_type) - - self.cmd('az lock delete -n {}'.format(lock_name)) - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_readonly_resource_group_lock') - def test_readonly_resource_group_lock(self, resource_group): - self._lock_operation_with_resource_group('ReadOnly', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_cannotdelete_resource_group_lock') - def test_cannotdelete_resource_group_lock(self, resource_group): - self._lock_operation_with_resource_group('CanNotDelete', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_readonly_resource_lock') - def test_readonly_resource_lock(self, resource_group): - self._lock_operation_with_resource('ReadOnly', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_cannotdelete_resource_lock') - def test_cannotdelete_resource_lock(self, resource_group): - self._lock_operation_with_resource('CanNotDelete', resource_group) - - def _lock_operation_with_resource_group(self, lock_type, resource_group): - - self.kwargs = { - 'rg': resource_group, - 'type': lock_type, - 'lock': self.create_random_name('cli-test-lock', 48) - } - - self.cmd('az lock create -n {lock} -g {rg} --lock-type {type}') - self._sleep_for_lock_operation() - - self.cmd('az lock show -g {rg} -n {lock}', checks=[ - self.check('name', '{lock}'), - self.check('level', '{type}') - ]) - - locks_list = self.cmd("az lock list -g {rg} --query '[].name'").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(self.kwargs['lock'], locks_list) - - self.kwargs.update({ - 'notes': self.create_random_name('notes', 20), - 'new_lvl': 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - }) - self.cmd('az lock update -n {lock} -g {rg} --notes {notes} --lock-type {new_lvl}', checks=[ - self.check('notes', '{notes}'), - self.check('level', '{new_lvl}') - ]).get_output_in_json() - - self.cmd('az lock delete -g {rg} -n {lock}') - self._sleep_for_lock_operation() - - def _lock_operation_with_resource(self, lock_type, resource_group): - rsrc_name = self.create_random_name('cli.lock.rsrc', 30) - rsrc_type = 'Microsoft.Network/virtualNetworks' - lock_name = self.create_random_name('cli-test-lock', 74) - - self.cmd('az network vnet create -n {} -g {}'.format(rsrc_name, resource_group)) - self.cmd('az lock create -n {} -g {} --resource-type {} --resource-name {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, lock_type)) - self._sleep_for_lock_operation() - - self.cmd('az lock show --name {} -g {} --resource-type {} --resource-name {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name)).assert_with_checks([ - JMESPathCheck('name', lock_name), - JMESPathCheck('level', lock_type)]) - - locks_list = self.cmd("az lock list --query '[].name' -ojson").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - notes = self.create_random_name('notes', 20) - new_lvl = 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - lock = self.cmd('az lock update -n {} -g {} --resource-type {} --resource-name {} --notes {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, notes, new_lvl)).get_output_in_json() - - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), new_lvl) - - self.cmd('az lock delete --name {} -g {} --resource-name {} --resource-type {}' - .format(lock_name, resource_group, rsrc_name, rsrc_type)) - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_group_lock') - def test_group_lock_commands(self, resource_group): - - self.kwargs = { - 'rg': resource_group, - 'lock': self.create_random_name('cli-test-lock', 48), - 'notes': self.create_random_name('notes', 20) - } - - self.cmd('group lock create -n {lock} -g {rg} --lock-type CanNotDelete') - self._sleep_for_lock_operation() - - self.cmd('group lock show -g {rg} -n {lock}', checks=[ - self.check('name', '{lock}'), - self.check('level', 'CanNotDelete') - ]) - - locks_list = self.cmd("group lock list -g {rg} --query [].name").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(self.kwargs['lock'], locks_list) - - self.cmd('group lock update -n {lock} -g {rg} --notes {notes} --lock-type ReadOnly', checks=[ - self.check('notes', '{notes}'), - self.check('level', 'ReadOnly') - ]) - - self.cmd('group lock delete -g {rg} -n {lock}') - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_resource_lock') - def test_resource_lock_commands(self, resource_group): - rsrc_name = self.create_random_name('cli.lock.rsrc', 30) - rsrc_type = 'Microsoft.Network/virtualNetworks' - lock_name = self.create_random_name('cli-test-lock', 74) - lock_type = 'CanNotDelete' - - self.cmd('network vnet create -n {} -g {}'.format(rsrc_name, resource_group)) - self.cmd('resource lock create -n {} -g {} --resource-type {} --resource-name {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, lock_type)) - self._sleep_for_lock_operation() - - self.cmd('resource lock show --name {} -g {} --resource-type {} --resource-name {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name)).assert_with_checks([ - JMESPathCheck('name', lock_name), - JMESPathCheck('level', lock_type)]) - - list_cmd = "resource lock list -g {} --resource-type {} --resource-name {} " \ - "--query [].name -ojson".format(resource_group, rsrc_type, rsrc_name) - locks_list = self.cmd(list_cmd).get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - notes = self.create_random_name('notes', 20) - lock = self.cmd('resource lock update -n {} -g {} --resource-type {} --resource-name {} --notes {} ' - '--lock-type ReadOnly' - .format(lock_name, resource_group, rsrc_type, rsrc_name, notes)).get_output_in_json() - - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), 'ReadOnly') - - self.cmd('resource lock delete --name {} -g {} --resource-name {} --resource-type {}' - .format(lock_name, resource_group, rsrc_name, rsrc_type)) - self._sleep_for_lock_operation() - - @record_only() - def test_subscription_locks(self): - lock_name = self.create_random_name('cli-test-lock', 48) - lock = self.cmd('az account lock create -n {} --lock-type CanNotDelete'.format(lock_name)).get_output_in_json() - lock_id = lock.get('id') - - locks_list = self.cmd('az account lock list --query [].name').get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - lock = self.cmd('az account lock show -n {}'.format(lock_name)).get_output_in_json() - lock_from_id = self.cmd('az account lock show --ids {}'.format(lock_id)).get_output_in_json() - - self.assertEqual(lock.get('name', None), lock_name) - self.assertEqual(lock_from_id.get('name', None), lock_name) - self.assertEqual(lock.get('level', None), 'CanNotDelete') - - notes = self.create_random_name('notes', 20) - lock = self.cmd('az account lock update -n {} --notes {} --lock-type {}' - .format(lock_name, notes, 'ReadOnly')).get_output_in_json() - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), 'ReadOnly') - - lock = self.cmd('az account lock update --ids {} --lock-type {}' - .format(lock_id, 'CanNotDelete')).get_output_in_json() - self.assertEqual(lock.get('level', None), 'CanNotDelete') - - self.cmd('az account lock delete -n {}'.format(lock_name)) - - @ResourceGroupPreparer(name_prefix='cli_test_lock_commands_with_ids') - def test_lock_commands_with_ids(self, resource_group): - vnet_name = self.create_random_name('cli-lock-vnet', 30) - subnet_name = self.create_random_name('cli-lock-subnet', 30) - group_lock_name = self.create_random_name('cli-test-lock', 50) - vnet_lock_name = self.create_random_name('cli-test-lock', 50) - subnet_lock_name = self.create_random_name('cli-test-lock', 20) - - vnet = self.cmd('az network vnet create -n {} -g {}'.format(vnet_name, resource_group)).get_output_in_json() - subnetaddress = vnet.get('newVNet').get('addressSpace').get('addressPrefixes')[0] - self.cmd('az network vnet subnet create -n {} --address-prefix {} --vnet-name {} -g {}' - .format(subnet_name, subnetaddress, vnet_name, resource_group)) - - locks = [] - locks.append(self.cmd('az lock create -n {} -g {} --lock-type CanNotDelete' - .format(group_lock_name, resource_group)).get_output_in_json()) - locks.append(self.cmd('az lock create -n {} -g {} --resource-type Microsoft.Network/virtualNetworks' - ' --resource-name {} --lock-type CanNotDelete' - .format(vnet_lock_name, resource_group, vnet_name)).get_output_in_json()) - locks.append(self.cmd('az lock create -n {} -g {} --resource-name {} --resource-type subnets ' - '--namespace Microsoft.Network --parent virtualNetworks/{} --lock-type CanNotDelete' - .format(subnet_lock_name, resource_group, subnet_name, vnet_name)).get_output_in_json()) - self._sleep_for_lock_operation() - - space_delimited_ids = ' '.join([lock.get('id', None) for lock in locks]) - - my_locks = self.cmd('az lock show --ids {} --query [].name'.format(space_delimited_ids)).get_output_in_json() - self.assertTrue(len(my_locks) == 3) - for lock in my_locks: - self.assertIn(lock, [group_lock_name, vnet_lock_name, subnet_lock_name]) - - my_locks = self.cmd('az lock update --ids {} --notes somenotes --lock-type ReadOnly' - .format(space_delimited_ids)).get_output_in_json() - self.assertTrue(len(my_locks) == 3) - for lock in my_locks: - self.assertEqual(lock.get('notes', None), 'somenotes') - self.assertEqual(lock.get('level', None), 'ReadOnly') - - self.cmd('az lock delete --ids {}'.format(space_delimited_ids)) - self._sleep_for_lock_operation() - - my_locks = self.cmd("az lock list -g {} -ojson".format(resource_group)).get_output_in_json() - self.assertFalse(my_locks) - - @ResourceGroupPreparer(name_prefix='cli_test_lock_with_resource_id') - def test_lock_with_resource_id(self, resource_group): - vnet_name = self.create_random_name('cli-lock-vnet', 30) - subnet_name = self.create_random_name('cli-lock-subnet', 30) - vnet_lock_name = self.create_random_name('cli-test-lock', 50) - subnet_lock_name = self.create_random_name('cli-test-lock', 20) - - vnet = self.cmd('network vnet create -n {} -g {}'.format(vnet_name, resource_group)).get_output_in_json() - vnet_id = vnet.get('newVNet').get('id') - subnetaddress = vnet.get('newVNet').get('addressSpace').get('addressPrefixes')[0] - subnet_id = self.cmd('network vnet subnet create -n {} --address-prefix {} --vnet-name {} -g {}' - .format(subnet_name, subnetaddress, - vnet_name, resource_group)).get_output_in_json().get('id') - - self.cmd('resource lock create -n {} --resource {} --lock-type CanNotDelete'.format(vnet_lock_name, vnet_id)) - self.cmd('lock create -n {} --resource {} --lock-type CanNotDelete'.format(subnet_lock_name, subnet_id)) - - self.cmd('resource lock show --name {} --resource {}' - .format(vnet_lock_name, vnet_id)).assert_with_checks([JMESPathCheck('name', vnet_lock_name)]) - self.cmd('lock show --name {} --resource {}' - .format(subnet_lock_name, subnet_id)).assert_with_checks([JMESPathCheck('name', subnet_lock_name)]) - - self.cmd('resource lock delete --name {} --resource {}'.format(vnet_lock_name, vnet_id)) - self.cmd('lock delete --name {} --resource {}'.format(subnet_lock_name, subnet_id)) - - self._sleep_for_lock_operation() - - def _sleep_for_lock_operation(self): - if self.is_live: - sleep(5) - - -class ParseIdTests(unittest.TestCase): - def test_parsing_lock_ids(self): - tests = [ - { - 'input': "/subscriptions/subId/providers/" - "Microsoft.Authorization/locks/sublock", - 'expected': { - 'resource_group': None, - 'resource_provider_namespace': None, - 'parent_resource_path': None, - 'resource_type': None, - 'resource_name': None, - 'lock_name': 'sublock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/examplegroup/providers/" - "Microsoft.Authorization/locks/grouplock", - 'expected': { - 'resource_group': 'examplegroup', - 'resource_provider_namespace': None, - 'parent_resource_path': None, - 'resource_type': None, - 'resource_name': None, - 'lock_name': 'grouplock' - } - }, - { - 'input': "/subscriptions/subId/resourcegroups/mygroup/providers/" - "Microsoft.Network/virtualNetworks/myvnet/providers/" - "Microsoft.Authorization/locks/vnetlock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Network', - 'parent_resource_path': None, - 'resource_type': 'virtualNetworks', - 'resource_name': 'myvnet', - 'lock_name': 'vnetlock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/mygroup/providers/" - "Microsoft.Network/virtualNetworks/myvnet/subnets/subnet/providers/" - "Microsoft.Authorization/locks/subnetlock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Network', - 'parent_resource_path': 'virtualNetworks/myvnet', - 'resource_type': 'subnets', - 'resource_name': 'subnet', - 'lock_name': 'subnetlock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/mygroup/providers/" - "Microsoft.Provider1/resourceType1/name1/providers/" - "Microsoft.Provider2/resourceType2/name2/providers/" - "Microsoft.Authorization/locks/somelock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Provider1', - 'parent_resource_path': 'resourceType1/name1/providers/Microsoft.Provider2', - 'resource_type': 'resourceType2', - 'resource_name': 'name2', - 'lock_name': 'somelock' - } - } - ] - for test in tests: - kwargs = _parse_lock_id(test['input']) - self.assertDictEqual(kwargs, test['expected']) - - fail_tests = [ - "/notsubscriptions/subId/providers/Microsoft.Authorization/locks/sublock", - "/subscriptions/subId/notResourceGroups/examplegroup/providers/Microsoft.Authorization/locks/grouplock", - "/subscriptions/subId/resourceGroups/examplegroup/providers/Microsoft.NotAuthorization/not_locks/grouplock", - "/subscriptions/subId/resourcegroups/mygroup/Microsoft.Network/virtualNetworks/myvnet/providers/" - "Microsoft.Authorization/locks/missingProvidersLock", - "/subscriptions/subId/resourcegroups/mygroup/providers/Microsoft.Network/myvnet/providers/" - "Microsoft.Authorization/locks/missingRsrcTypeLock", - "/subscriptions/subId/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/subnet/providers/" - "Microsoft.Authorization/locks/missingRsrcGroupLock", - "not_a_id_at_all" - ] - for test in fail_tests: - with self.assertRaises(AttributeError): - _parse_lock_id(test) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource.py deleted file mode 100644 index 24f0cfb8d96..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource.py +++ /dev/null @@ -1,542 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import json -import os -import time -import unittest - -from azure.cli.testsdk.scenario_tests import AllowLargeResponse -from azure.cli.testsdk import ScenarioTest, LiveScenarioTest, ResourceGroupPreparer, create_random_name, live_only -from azure.cli.core.util import get_file_json - - -class ResourceGroupScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_rg_scenario') - def test_resource_group(self, resource_group): - - self.cmd('group delete -n {rg} --yes') - self.cmd('group exists -n {rg}', - checks=self.check('@', False)) - - self.cmd('group create -n {rg} -l westus --tag a=b c', checks=[ - self.check('name', '{rg}'), - self.check('tags', {'a': 'b', 'c': ''}) - ]) - self.cmd('group exists -n {rg}', - checks=self.check('@', True)) - self.cmd('group show -n {rg}', checks=[ - self.check('name', '{rg}'), - self.check('tags', {'a': 'b', 'c': ''}) - ]) - self.cmd('group list --tag a=b', checks=[ - self.check('[0].name', '{rg}'), - self.check('[0].tags', {'a': 'b', 'c': ''}) - ]) - - -class ResourceGroupNoWaitScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_rg_nowait_test') - def test_resource_group_no_wait(self, resource_group): - - self.cmd('group delete -n {rg} --no-wait --yes', - checks=self.is_empty()) - self.cmd('group wait --deleted -n {rg}', - checks=self.is_empty()) - self.cmd('group exists -n {rg}', - checks=self.check('@', False)) - self.cmd('group create -n {rg} -l westus', - checks=self.check('name', '{rg}')) - self.cmd('group exists -n {rg}', - checks=self.check('@', True)) - self.cmd('group wait --exists -n {rg}', - checks=self.is_empty()) - - -class ResourceScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_scenario', location='southcentralus') - @AllowLargeResponse() - def test_resource_scenario(self, resource_group, resource_group_location): - self.kwargs.update({ - 'loc': resource_group_location, - 'vnet': self.create_random_name('vnet-', 30), - 'subnet': self.create_random_name('subnet-', 30), - 'rt': 'Microsoft.Network/virtualNetworks' - }) - vnet_count = self.cmd("resource list --query \"length([?name=='{vnet}'])\"").get_output_in_json() or 0 - self.cmd('network vnet create -g {rg} -n {vnet} --subnet-name {subnet} --tags cli-test=test') - vnet_count += 1 - - self.cmd('resource list', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list -l {loc}', - checks=self.check("length([?location == '{loc}']) == length(@)", True)) - self.cmd('resource list --resource-type {rt}', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list --name {vnet}', checks=[ - self.check("length([?name=='{vnet}'])", vnet_count), - self.check('[0].provisioningState', 'Succeeded') - ]) - self.cmd('resource list --tag cli-test', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list --tag cli-test=test', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - - # check for simple resource with tag - self.cmd('resource show -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks', checks=[ - self.check('name', '{vnet}'), - self.check('location', '{loc}'), - self.check('resourceGroup', '{rg}'), - self.check('tags', {'cli-test': 'test'}) - ]) - # check for child resource - self.cmd('resource show -n {subnet} -g {rg} --namespace Microsoft.Network --parent virtualNetworks/{vnet} --resource-type subnets', checks=[ - self.check('name', '{subnet}'), - self.check('resourceGroup', '{rg}') - ]) - - # clear tag and verify - self.cmd('resource tag -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks --tags') - self.cmd('resource show -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks', - checks=self.check('tags', {})) - - # delete and verify - self.cmd('resource delete -n {vnet} -g {rg} --resource-type {rt}') - time.sleep(10) - self.cmd('resource list', checks=self.check("length([?name=='{vnet}'])", 0)) - - -class ResourceIDScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_id') - def test_resource_id_scenario(self, resource_group): - - self.kwargs.update({ - 'vnet': 'cli_test_resource_id_vnet', - 'subnet': 'cli_test_resource_id_subnet' - }) - - self.cmd('network vnet create -g {rg} -n {vnet} --subnet-name {subnet}') - - self.kwargs['sub'] = self.get_subscription_id() - - self.kwargs['vnet_id'] = '/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Network/virtualNetworks/{vnet}'.format( - **self.kwargs) - self.cmd('resource tag --id {vnet_id} --tags tag-vnet') - self.cmd('resource show --id {vnet_id}', checks=[ - self.check('name', '{vnet}'), - self.check('resourceGroup', '{rg}'), - self.check('tags', {'tag-vnet': ''}) - ]) - - self.kwargs['subnet_id'] = '/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Network/virtualNetworks/{vnet}/subnets/{subnet}'.format( - **self.kwargs) - self.cmd('resource show --id {subnet_id}', checks=[ - self.check('name', '{subnet}'), - self.check('resourceGroup', '{rg}'), - self.check('properties.addressPrefix', '10.0.0.0/24') - ]) - - self.cmd('resource update --id {subnet_id} --set properties.addressPrefix=10.0.0.0/22', - checks=self.check('properties.addressPrefix', '10.0.0.0/22')) - - self.cmd('resource delete --id {subnet_id}', checks=self.is_empty()) - self.cmd('resource delete --id {vnet_id}', checks=self.is_empty()) - - -class ResourceCreateAndShowScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_create') - def test_resource_create_and_show(self, resource_group, resource_group_location): - - self.kwargs.update({ - 'plan': 'cli_res_create_plan', - 'app': 'clirescreateweb', - 'loc': resource_group_location - }) - - self.cmd('resource create -g {rg} -n {plan} --resource-type Microsoft.web/serverFarms --is-full-object --properties "{{\\"location\\":\\"{loc}\\",\\"sku\\":{{\\"name\\":\\"B1\\",\\"tier\\":\\"BASIC\\"}}}}"', - checks=self.check('name', '{plan}')) - - result = self.cmd('resource create -g {rg} -n {app} --resource-type Microsoft.web/sites --properties "{{\\"serverFarmId\\":\\"{plan}\\"}}"', - checks=self.check('name', '{app}')).get_output_in_json() - - self.kwargs['app_settings_id'] = result['id'] + '/config/appsettings' - self.kwargs['app_config_id'] = result['id'] + '/config/web' - self.cmd('resource create --id {app_settings_id} --properties "{{\\"key2\\":\\"value12\\"}}"', - checks=[self.check('properties.key2', 'value12')]) - - self.cmd('resource show --id {app_config_id}', - checks=self.check('properties.publishingUsername', '${app}')) - self.cmd('resource show --id {app_config_id} --include-response-body', - checks=self.check('responseBody.properties.publishingUsername', '${app}')) - - -class TagScenarioTest(ScenarioTest): - - def test_tag_scenario(self): - - self.kwargs.update({ - 'tag': 'cli_test_tag' - }) - - tag_values = self.cmd('tag list --query "[?tagName == \'{tag}\'].values[].tagValue"').get_output_in_json() - for tag_value in tag_values: - self.cmd('tag remove-value --value {} -n {{tag}}'.format(tag_value)) - self.cmd('tag delete -n {tag} -y') - - self.cmd('tag list --query "[?tagName == \'{tag}\']"', checks=self.is_empty()) - self.cmd('tag create -n {tag}', checks=[ - self.check('tagName', '{tag}'), - self.check('values', []), - self.check('count.value', 0) - ]) - self.cmd('tag add-value -n {tag} --value test') - self.cmd('tag add-value -n {tag} --value test2') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', ['test', 'test2'])) - self.cmd('tag remove-value -n {tag} --value test') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', ['test2'])) - self.cmd('tag remove-value -n {tag} --value test2') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', [])) - self.cmd('tag delete -n {tag} -y') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.is_empty()) - - -class ProviderRegistrationTest(ScenarioTest): - - def test_provider_registration(self): - - self.kwargs.update({'prov': 'Microsoft.ClassicInfrastructureMigrate'}) - - result = self.cmd('provider show -n {prov}').get_output_in_json() - if result['registrationState'] == 'Unregistered': - self.cmd('provider register -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Registering', 'Registered']) - self.cmd('provider unregister -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Unregistering', 'Unregistered']) - else: - self.cmd('provider unregister -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Unregistering', 'Unregistered']) - self.cmd('provider register -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Registering', 'Registered']) - - -class ProviderOperationTest(ScenarioTest): - - def test_provider_operation(self): - self.cmd('provider operation show --namespace microsoft.compute', checks=[ - self.check('id', '/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute'), - self.check('type', 'Microsoft.Authorization/providerOperations') - ]) - self.cmd('provider operation show --namespace microsoft.compute', checks=[ - self.check('id', '/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute'), - self.check('type', 'Microsoft.Authorization/providerOperations') - ]) - self.cmd('provider operation show --namespace microsoft.storage') - - -class DeploymentTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_deployment_lite') - def test_group_deployment_lite(self, resource_group): - # ensures that a template that is missing "parameters" or "resources" still deploys - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template-lite.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-deployment', 30) - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}') - ]) - - @ResourceGroupPreparer(name_prefix='cli_test_deployment') - def test_group_deployment(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'test-params.json').replace('\\', '\\\\'), - 'of': os.path.join(curr_dir, 'test-object.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment' - }) - self.kwargs['subnet_id'] = self.cmd('network vnet create -g {rg} -n vnet1 --subnet-name subnet1').get_output_in_json()['newVNet']['subnets'][0]['id'] - - self.cmd('group deployment validate -g {rg} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}') - ]) - self.cmd('network lb show -g {rg} -n test-lb', - checks=self.check('tags', {'key': 'super=value'})) - - self.cmd('group deployment list -g {rg}', checks=[ - self.check('[0].name', '{dn}'), - self.check('[0].resourceGroup', '{rg}') - ]) - self.cmd('group deployment show -g {rg} -n {dn}', checks=[ - self.check('name', '{dn}'), - self.check('resourceGroup', '{rg}') - ]) - self.cmd('group deployment operation list -g {rg} -n {dn}', checks=[ - self.check('length([])', 2), - self.check('[0].resourceGroup', '{rg}') - ]) - - -class DeploymentLiveTest(LiveScenarioTest): - @ResourceGroupPreparer() - def test_group_deployment_progress(self, resource_group): - from azure.cli.testsdk.utilities import force_progress_logging - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'test-params.json').replace('\\', '\\\\'), - 'of': os.path.join(curr_dir, 'test-object.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment2' - }) - - self.kwargs['subnet_id'] = self.cmd('network vnet create -g {rg} -n vnet1 --subnet-name subnet1').get_output_in_json()['newVNet']['subnets'][0]['id'] - - with force_progress_logging() as test_io: - self.cmd('group deployment create --verbose -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"') - - # very the progress - lines = test_io.getvalue().splitlines() - for line in lines: - self.assertTrue(line.split(':')[0] in ['Accepted', 'Succeeded']) - self.assertTrue('Succeeded: {} (Microsoft.Resources/deployments)'.format(self.kwargs['dn']), lines) - - -class DeploymentNoWaitTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_group_deployment_no_wait') - def test_group_deployment_no_wait(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'simple_deploy.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'simple_deploy_parameters.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment' - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --no-wait', - checks=self.is_empty()) - - self.cmd('group deployment wait -g {rg} -n {dn} --created', - checks=self.is_empty()) - - self.cmd('group deployment show -g {rg} -n {dn}', - checks=self.check('properties.provisioningState', 'Succeeded')) - - -# TODO: convert back to ScenarioTest when #5740 is fixed. -class DeploymentThruUriTest(LiveScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_deployment_uri') - def test_group_deployment_thru_uri(self, resource_group): - self.resource_group = resource_group - curr_dir = os.path.dirname(os.path.realpath(__file__)) - # same copy of the sample template file under current folder, but it is uri based now - self.kwargs.update({ - 'tf': 'https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json', - 'params': os.path.join(curr_dir, 'simple_deploy_parameters.json').replace('\\', '\\\\') - }) - self.kwargs['dn'] = self.cmd('group deployment create -g {rg} --template-uri "{tf}" --parameters @"{params}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - ]).get_output_in_json()['name'] - - self.cmd('group deployment show -g {rg} -n {dn}', - checks=self.check('name', '{dn}')) - - self.cmd('group deployment delete -g {rg} -n {dn}') - self.cmd('group deployment list -g {rg}', - checks=self.is_empty()) - - -class ResourceMoveScenarioTest(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_resource_move_dest', parameter_name='resource_group_dest', key='rg2') - @ResourceGroupPreparer(name_prefix='cli_test_resource_move_source', key='rg1') - def test_resource_move(self, resource_group, resource_group_dest): - self.kwargs.update({ - 'nsg1': self.create_random_name('nsg-move', 20), - 'nsg2': self.create_random_name('nsg-move', 20) - }) - - self.kwargs['nsg1_id'] = self.cmd('network nsg create -n {nsg1} -g {rg1}').get_output_in_json()['NewNSG']['id'] - self.kwargs['nsg2_id'] = self.cmd('network nsg create -n {nsg2} -g {rg1}').get_output_in_json()['NewNSG']['id'] - - self.cmd('resource move --ids {nsg1_id} {nsg2_id} --destination-group {rg2}') - - self.cmd('network nsg show -g {rg2} -n {nsg1}', checks=[ - self.check('name', '{nsg1}')]) - self.cmd('network nsg show -g {rg2} -n {nsg2}', checks=[ - self.check('name', '{nsg2}')]) - - -class PolicyScenarioTest(ScenarioTest): - - @AllowLargeResponse(8192) - @ResourceGroupPreparer(name_prefix='cli_test_policy') - def test_resource_policy(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'pn': self.create_random_name('azure-cli-test-policy', 30), - 'pdn': self.create_random_name('test_policy', 20), - 'desc': 'desc_for_test_policy_123', - 'rf': os.path.join(curr_dir, 'sample_policy_rule.json').replace('\\', '\\\\'), - 'pdf': os.path.join(curr_dir, 'sample_policy_param_def.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'sample_policy_param.json').replace('\\', '\\\\'), - 'mode': 'Indexed', - }) - - # create a policy - self.cmd('policy definition create -n {pn} --rules {rf} --params {pdf} --display-name {pdn} --description {desc} --mode {mode}', checks=[ - self.check('name', '{pn}'), - self.check('displayName', '{pdn}'), - self.check('description', '{desc}'), - self.check('mode', '{mode}') - ]) - - # update it - self.kwargs['desc'] = self.kwargs['desc'] + '_new' - self.cmd('policy definition update -n {pn} --description {desc}', checks=[ - self.check('description', '{desc}') - ]) - - # list and show it - self.cmd('policy definition list', - checks=self.check("length([?name=='{pn}'])", 1)) - self.cmd('policy definition show -n {pn}', checks=[ - self.check('name', '{pn}'), - self.check('displayName', '{pdn}') - ]) - - # create a policy assignment on a resource group - self.kwargs.update({ - 'pan': self.create_random_name('azurecli-test-policy-assignment', 40), - 'padn': self.create_random_name('test_assignment', 20) - }) - self.cmd('policy assignment create --policy {pn} -n {pan} --display-name {padn} -g {rg} --params {params}', checks=[ - self.check('name', '{pan}'), - self.check('displayName', '{padn}') - ]) - - # create a policy assignment with not scopes and standard sku - self.kwargs.update({ - 'vnet': self.create_random_name('azurecli-test-policy-vnet', 40), - 'subnet': self.create_random_name('azurecli-test-policy-subnet', 40), - 'sub': self.get_subscription_id() - }) - - self.cmd('network vnet create -g {rg} -n {vnet} --subnet-name {subnet}') - self.kwargs['notscope'] = '/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Network/virtualNetworks'.format(**self.kwargs) - self.cmd('policy assignment create --policy {pn} -n {pan} --display-name {padn} -g {rg} --not-scopes {notscope} --params {params}', checks=[ - self.check('name', '{pan}'), - self.check('displayName', '{padn}') - ]) - - # listing at subscription level won't find the assignment made at a resource group - import jmespath - try: - self.cmd('policy assignment list', - checks=self.check("length([?name=='{pan}'])", 0)) - except jmespath.exceptions.JMESPathTypeError: # ok if query fails on None result - pass - - # but enable --show-all works - self.cmd('policy assignment list --disable-scope-strict-match', - checks=self.check("length([?name=='{pan}'])", 1)) - - # delete the assignment - self.cmd('policy assignment delete -n {pan} -g {rg}') - self.cmd('policy assignment list --disable-scope-strict-match') - - # delete the policy - self.cmd('policy definition delete -n {pn}') - time.sleep(10) # ensure the policy is gone when run live. - self.cmd('policy definition list', - checks=self.check("length([?name=='{pn}'])", 0)) - - -# TODO: Change back to ScenarioTest and re-record when issue #5110 is fixed. -class CrossRGDeploymentScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_cross_rg_alt', parameter_name='resource_group_cross') - @ResourceGroupPreparer(name_prefix='cli_test_cross_rg_deploy') - def test_group_deployment_crossrg(self, resource_group, resource_group_cross): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'rg1': resource_group, - 'rg2': resource_group_cross, - 'tf': os.path.join(curr_dir, 'crossrg_deploy.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-crossrgdeployment', 40), - 'sa1': create_random_name(prefix='crossrg'), - 'sa2': create_random_name(prefix='crossrg') - }) - - self.cmd('group deployment validate -g {rg1} --template-file "{tf}" --parameters CrossRg={rg2} StorageAccountName1={sa1} StorageAccountName2={sa2}', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - self.cmd('group deployment create -g {rg1} -n {dn} --template-file "{tf}" --parameters CrossRg={rg2}', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg1}'), - ]) - self.cmd('group deployment list -g {rg1}', checks=[ - self.check('[0].name', '{dn}'), - self.check('[0].resourceGroup', '{rg1}') - ]) - self.cmd('group deployment show -g {rg1} -n {dn}', checks=[ - self.check('name', '{dn}'), - self.check('resourceGroup', '{rg1}') - ]) - self.cmd('group deployment operation list -g {rg1} -n {dn}', checks=[ - self.check('length([])', 3), - self.check('[0].resourceGroup', '{rg1}') - ]) - - -class InvokeActionTest(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_invoke_action', location='eastus') - def test_invoke_action(self, resource_group): - - self.kwargs.update({ - 'vm': self.create_random_name('cli-test-vm', 30), - 'user': 'ubuntu', - 'pass': self.create_random_name('Longpassword#1', 30) - }) - - self.kwargs['vm_id'] = self.cmd('vm create -g {rg} -n {vm} --use-unmanaged-disk --image Canonical:UbuntuServer:18.04-LTS:latest --admin-username {user} --admin-password {pass} --authentication-type password --nsg-rule None').get_output_in_json()['id'] - - self.cmd('resource invoke-action --action powerOff --ids {vm_id}') - self.cmd('resource invoke-action --action generalize --ids {vm_id}') - self.cmd('resource invoke-action --action deallocate --ids {vm_id}') - - self.kwargs['request_body'] = '{\\"vhdPrefix\\":\\"myPrefix\\",\\"destinationContainerName\\":\\"container\\",\\"overwriteVhds\\":\\"true\\"}' - - self.cmd('resource invoke-action --action capture --ids {vm_id} --request-body {request_body}') - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_custom.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_custom.py deleted file mode 100644 index 74471a70ff0..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_custom.py +++ /dev/null @@ -1,351 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import os -import tempfile -import unittest - -from urllib.request import pathname2url -from urllib.parse import urljoin - -from unittest import mock - -from azure.cli.core.util import CLIError, get_file_json, shell_safe_json_parse -from azure.cli.command_modules.resource.custom import \ - (_get_missing_parameters, _extract_lock_params, _process_parameters, _find_missing_parameters, - _prompt_for_parameters, _load_file_string_or_uri) - - -def _simulate_no_tty(): - from knack.prompting import NoTTYException - raise NoTTYException - - -@mock.patch('knack.prompting.verify_is_a_tty', _simulate_no_tty) -class TestCustom(unittest.TestCase): - def test_file_string_or_uri(self): - data = '{ "some": "data here"}' - with tempfile.NamedTemporaryFile(delete=False) as tmp: - tmp.write(data.encode('utf-8')) - tmp.close() - - output = _load_file_string_or_uri(tmp.name, 'test') - self.assertEqual(get_file_json(tmp.name), output) - - uri = urljoin('file:', pathname2url(tmp.name)) - output = _load_file_string_or_uri(uri, 'test') - self.assertEqual(get_file_json(tmp.name), output) - - os.unlink(tmp.name) - - output = _load_file_string_or_uri(data, 'test') - self.assertEqual(shell_safe_json_parse(data), output) - - self.assertEqual(None, _load_file_string_or_uri(None, 'test', required=False)) - self.assertRaises(CLIError, _load_file_string_or_uri, None, 'test') - - def test_extract_parameters(self): - tests = [ - { - 'input': {}, - 'expected': {}, - 'name': 'empty' - }, - { - 'input': { - 'resource_group_name': 'foo', - }, - 'expected': { - 'resource_group_name': 'foo', - }, - 'name': 'resource_group' - }, - { - 'input': { - 'resource_type': 'foo', - }, - 'expected': {}, - 'name': 'missing resource_group' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_type': 'bar', - }, - 'expected': { - 'resource_group_name': 'foo', - }, - 'name': 'missing resource_name' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar', - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar', - }, - 'name': 'missing resource_name' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar/blah', - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'name': 'slashes' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'name': 'separate' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah/bug', - 'resource_provider_namespace': 'bar' - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah/bug', - 'resource_provider_namespace': 'bar' - }, - 'name': 'separate' - } - - ] - - for test in tests: - resource_group_name = test['input'].get('resource_group_name', None) - resource_type = test['input'].get('resource_type', None) - resource_name = test['input'].get('resource_name', None) - resource_provider_namespace = test['input'].get('resource_provider_namespace', None) - - output = _extract_lock_params(resource_group_name, resource_provider_namespace, - resource_type, resource_name) - - resource_group_name = test['expected'].get('resource_group_name', None) - resource_type = test['expected'].get('resource_type', None) - resource_name = test['expected'].get('resource_name', None) - resource_provider_namespace = test['expected'].get('resource_provider_namespace', None) - - self.assertEqual(resource_group_name, output[0], test['name']) - self.assertEqual(resource_name, output[1], test['name']) - self.assertEqual(resource_provider_namespace, output[2], test['name']) - self.assertEqual(resource_type, output[3], test['name']) - - def test_resource_missing_parameters(self): - template = { - "parameters": { - "def": { - "type": "string", - "defaultValue": "default" - }, - "present": { - "type": "string", - }, - "missing": { - "type": "string", - } - } - } - parameters = { - "present": { - "value": "foo" - } - } - out_params = _get_missing_parameters(parameters, template, lambda x: {"missing": "baz"}) - - expected = { - "present": { - "value": "foo" - }, - "missing": { - "value": "baz" - } - } - - self.assertDictEqual(out_params, expected) - - def test_deployment_parameters(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - # test different ways of passing in parameters - tests = [ - { # empty parameters works - "parameter_list": [], - "expected": {}, - }, - { # loading from file - "parameter_list": [[parameters_path]], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { # KEY=VALUE syntax with extra equal sign - "parameter_list": [['stringParam=foo=bar']], - "expected": {"stringParam": {"value": "foo=bar"}}, - }, - { # raw JSON (same as @file) - "parameter_list": [['{\"stringParam\": {\"value\": \"foo\"}}']], - "expected": {"stringParam": {"value": "foo"}}, - }, - { # multiple KEY=VALUE - "parameter_list": [['stringParam=foo', 'intParam=3']], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 3}}, - }, - { # KEY=VALUE where last in wins - "parameter_list": [['stringParam=foo', 'stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}}, - }, - { # file loading overriden by KEY=VALUE - "parameter_list": [[parameters_path], ['stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - } - ] - - for test in tests: - parameter_list = test['parameter_list'] - result_parameters = _process_parameters(template, parameter_list) - self.assertEqual(result_parameters, test['expected']) - - def test_deployment_parameters_with_type_references(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template-$ref-indirection.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - # test different ways of passing in parameters - tests = [ - { # empty JSON works - "parameter_list": [["{}"]], - "expected": {}, - }, - { # empty parameters works - "parameter_list": [], - "expected": {}, - }, - { # loading from file - "parameter_list": [[parameters_path]], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { # KEY=VALUE syntax with extra equal sign - "parameter_list": [['stringParam=foo=bar']], - "expected": {"stringParam": {"value": "foo=bar"}}, - }, - { # raw JSON (same as @file) - "parameter_list": [['{\"stringParam\": {\"value\": \"foo\"}}']], - "expected": {"stringParam": {"value": "foo"}}, - }, - { # multiple KEY=VALUE - "parameter_list": [['stringParam=foo', 'intParam=3']], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 3}}, - }, - { # KEY=VALUE where last in wins - "parameter_list": [['stringParam=foo', 'stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}}, - }, - { # file loading overriden by KEY=VALUE - "parameter_list": [[parameters_path], ['stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { - "parameter_list": [['boolParam=true', 'tupleParam=[21]']], - "expected": {"boolParam": {"value": True}, "tupleParam": {"value": [21]}}, - } - ] - - for i, test in enumerate(tests): - parameter_list = test['parameter_list'] - result_parameters = _process_parameters(template, parameter_list) - self.assertEqual(result_parameters, test['expected'], i) - - def test_deployment_missing_values(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - template_param_defs = template.get('parameters', {}) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - # ensure that parameters with default values are not considered missing - params_with_defaults = [x for x in template_param_defs if 'defaultValue' in template_param_defs[x]] - for item in params_with_defaults: - self.assertTrue(item not in missing_parameters) - - # ensure that a parameter that specifies a reference does not prompt - self.assertTrue('secretReference' not in missing_parameters) - self.assertTrue('secretReference' in result_parameters) - - def test_deployment_prompt_file_order(self): - # check that params are prompted for in file order when the file is loaded with preserve_order=True - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - param_file_order = ["['secureParam', 'boolParam', 'enumParam', 'arrayParam', 'objectParam']"] - results = _prompt_for_parameters(missing_parameters, fail_on_no_tty=False) - self.assertTrue(str(list(results.keys())) in param_file_order) - - def test_deployment_prompt_alphabetical_order(self): - # check that params are prompted for in alphabetical order when the file is loaded with preserve_order=False - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=False) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - param_alpha_order = ["['arrayParam', 'boolParam', 'enumParam', 'objectParam', 'secureParam']"] - results = _prompt_for_parameters(dict(missing_parameters), fail_on_no_tty=False) - self.assertTrue(str(list(results.keys())) in param_alpha_order) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_id_deletes.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_id_deletes.py deleted file mode 100644 index 85abe72fc28..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_id_deletes.py +++ /dev/null @@ -1,29 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -from azure.cli.testsdk import ScenarioTest, JMESPathCheck, ResourceGroupPreparer, live_only - - -@live_only() -class ResourceDeleteTests(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_delete_dependent_resources', location='southcentralus') - def test_delete_dependent_resources(self, resource_group): - vm_name = self.create_random_name('cli-test-vm', 30) - tag_name = self.create_random_name('cli-test-tag', 20) - username = 'ubuntu' - password = self.create_random_name('Password#1', 30) - - self.cmd('vm create -n {} -g {} --image Canonical:UbuntuServer:18.04-LTS:latest --tag {} ' - '--admin-username {} --admin-password {} --authentication-type {} --nsg-rule None' - .format(vm_name, resource_group, tag_name, username, password, 'password')) - - rsrc_list = self.cmd('resource list --tag {} --query [].id'.format(tag_name)).get_output_in_json() - self.cmd('resource delete --ids {}'.format(' '.join(rsrc_list))) - self.cmd('resource wait --ids {} --deleted --timeout 300'.format(''.join(rsrc_list))) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_list_odata_filter.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_list_odata_filter.py deleted file mode 100644 index d497f5063da..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_list_odata_filter.py +++ /dev/null @@ -1,77 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -from azure.cli.command_modules.resource.custom import (_list_resources_odata_filter_builder, - _find_missing_parameters) -from azure.cli.core.parser import IncorrectUsageError - - -class TestDeployResource(unittest.TestCase): - def test_find_missing_parameters_none(self): - template = { - "parameters": { - "foo": { - "defaultValue": "blah" - }, - "bar": {}, - "baz": {}, - } - } - - missing = _find_missing_parameters(None, template) - self.assertEqual(2, len(missing)) - - def test_find_missing_parameters(self): - parameters = { - "foo": "value1", - "bar": "value2" - } - - template = { - "parameters": { - "foo": { - "defaultValue": "blah" - }, - "bar": {}, - "baz": {}, - } - } - - missing = _find_missing_parameters(parameters, template) - self.assertEqual(1, len(missing)) - - -class TestListResources(unittest.TestCase): - def test_tag_name(self): - odata_filter = _list_resources_odata_filter_builder(tag='foo') - self.assertEqual(odata_filter, "tagname eq 'foo'") - - def test_tag_name_starts_with(self): - odata_filter = _list_resources_odata_filter_builder(tag='f*') - self.assertEqual(odata_filter, "startswith(tagname, 'f')") - - def test_tag_name_value_equals(self): - odata_filter = _list_resources_odata_filter_builder(tag={'foo': 'bar'}) - self.assertEqual(odata_filter, "tagname eq 'foo' and tagvalue eq 'bar'") - - def test_name_location_equals_resource_type_equals(self): - odata_filter = _list_resources_odata_filter_builder( - name='wonky', location='dory', resource_provider_namespace='resource', - resource_type='type') # pylint: disable=line-too-long - self.assertEqual(odata_filter, - "name eq 'wonky' and location eq 'dory' and resourceType eq 'resource/type'") # pylint: disable=line-too-long - - def test_name_location_equals(self): - odata_filter = _list_resources_odata_filter_builder(name='wonky', location='dory') - self.assertEqual(odata_filter, "name eq 'wonky' and location eq 'dory'") - - def test_tag_and_name_fails(self): - with self.assertRaises(IncorrectUsageError): - _list_resources_odata_filter_builder(tag='foo=bar', name='should not work') - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_validators.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_validators.py deleted file mode 100644 index 2536cb57466..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2018_03_01/test_resource_validators.py +++ /dev/null @@ -1,146 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -import os.path -from unittest import mock -from io import StringIO - -from knack.util import CLIError -from azure.cli.command_modules.resource._validators import ( - _validate_deployment_name, - validate_lock_parameters, -) - - -class NamespaceObject: - pass - - -class TestResourceValidators(unittest.TestCase): - def setUp(self): - self.io = StringIO() - - def tearDown(self): - self.io.close() - - def test_validate_lock_params(self): - valid = [ - { - 'test': 'just name', - 'name': 'foo' - }, - { - 'test': 'name and group', - 'name': 'foo', - 'resource_group': 'foo', - }, - { - 'test': 'name, group, type [compact]', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'Microsoft.Compute/VirtualMachines' - }, - { - 'test': 'name, group, type, namespace', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - }, - { - 'test': 'name, group, type, namespace, parent', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - 'parent_resource_path': 'Foo.Bar/baz', - } - ] - for valid_namespace in valid: - namespace_obj = NamespaceObject() - for key in valid_namespace: - setattr(namespace_obj, key, valid_namespace[key]) - try: - # If unexpected invalid, this throws, so no need for asserts - validate_lock_parameters(namespace_obj) - except CLIError as ex: - self.fail('Test {} failed. {}'.format(valid_namespace['test'], ex)) - - def test_validate_lock_params_invalid(self): - invalid = [ - { - 'test': 'just name and type', - 'name': 'foo', - 'resource_type': 'baz' - }, - { - 'test': 'name and group and type', - 'name': 'foo', - 'resource_group': 'foo', - 'resource_type': 'bar', - }, - { - 'test': 'name, group, no type', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - }, - { - 'test': 'name, group, type, namespace', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_provider_namespace': 'Microsoft.Compute', - }, - { - 'test': 'name, group, type, namespace, parent', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - 'parent_resource_path': 'Foo.Bar/baz', - } - ] - for invalid_namespace in invalid: - with self.assertRaises(CLIError): - namespace_obj = NamespaceObject() - for key in invalid_namespace: - setattr(namespace_obj, key, invalid_namespace[key]) - validate_lock_parameters(namespace_obj) - - def test_generate_deployment_name_from_file(self): - # verify auto-gen from uri - namespace = mock.MagicMock() - namespace.template_uri = 'https://templates/template123.json?foo=bar' - namespace.template_file = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - self.assertEqual('template123', namespace.deployment_name) - - namespace = mock.MagicMock() - namespace.template_file = __file__ - namespace.template_uri = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - - file_base_name = os.path.basename(__file__) - file_base_name = file_base_name[:str.find(file_base_name, '.')] - self.assertEqual(file_base_name, namespace.deployment_name) - - # verify use default if get a file content - namespace = mock.MagicMock() - namespace.template_file = '{"foo":"bar"}' - namespace.template_uri = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - self.assertEqual('deployment1', namespace.deployment_name) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/__init__.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/__init__.py deleted file mode 100644 index 34913fb394d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/__init__.py +++ /dev/null @@ -1,4 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/crossrg_deploy.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/crossrg_deploy.json deleted file mode 100644 index dc9825b3936..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/crossrg_deploy.json +++ /dev/null @@ -1,63 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "StorageAccountName1": { - "type": "string", - "defaultValue": "test1ddosdatest72" - }, - "StorageAccountName2": { - "type": "string", - "defaultValue": "test1ddfosatdest73" - }, - "CrossRg": { - "type": "string", - "defaultValue": "crossrg5" - } - }, - "variables": {}, - "resources": [ - { - "apiVersion": "2017-05-10", - "name": "nestedTemplate", - "type": "Microsoft.Resources/deployments", - "resourceGroup": "[parameters('CrossRg')]", - "properties": { - "mode": "Incremental", - "template": { - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": {}, - "variables": {}, - "resources": [ - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[parameters('StorageAccountName2')]", - "apiVersion": "2015-06-15", - "location": "West US", - "properties": { - "accountType": "Standard_LRS" - } - } - ], - "outputs": { - "result": { - "value": "Hello World", - "type": "string" - } - } - }, - "parameters": {} - } - }, - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[parameters('StorageAccountName1')]", - "apiVersion": "2015-06-15", - "location": "West US", - "properties": { - "accountType": "Standard_LRS" - } - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-params.json deleted file mode 100644 index 65314592608..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-params.json +++ /dev/null @@ -1,15 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "stringParam": { - "value": "foo" - }, - "intParam": { - "value": 10 - }, - "madeupParam": { - "value": "bar" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-ref-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-ref-params.json deleted file mode 100644 index d21f959362c..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-ref-params.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "secretReference": { - "reference": { - "keyVault": { - "id": "some-random-id-goes-here" - }, - "secretName": "magicalSecret" - } - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template-$ref-indirection.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template-$ref-indirection.json deleted file mode 100644 index 8d3e8020c55..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template-$ref-indirection.json +++ /dev/null @@ -1,45 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "languageVersion": "2.0", - "contentVersion": "1.0.0.0", - "definitions": { - "objectType": { - "type": "object" - }, - "object&type~/with~weird name": { - "$ref": "#/definitions/object", - "properties": { - "foo": { - "type": "string" - } - } - } - }, - "parameters": { - "stringParam": { - "$ref": "#/definitions/object%26type~~1with~0weird%20name/properties/foo" - }, - "intParam": { - "$ref": "#/parameters/tupleParam/prefixItems/0" - }, - "boolParam": { - "$ref": "#/outputs/anOutput/additionalProperties" - }, - "tupleParam": { - "type": "array", - "prefixItems": [ - {"type": "int"} - ], - "defaultValue": [1] - } - }, - "resources": {}, - "outputs": { - "anOutput": { - "type": "object", - "additionalProperties": { - "type": "bool" - } - } - } -} diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template.json deleted file mode 100644 index acc098b630d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/param-validation-template.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "stringParam": { - "type": "string" - }, - "intParam": { - "type": "int" - }, - "secureParam": { - "type": "securestring" - }, - "boolParam": { - "type": "bool" - }, - "enumParam": { - "type": "string", - "allowedValues": [ "value1", "value2" ] - }, - "arrayParam": { - "type": "array" - }, - "objectParam": { - "type": "object" - }, - "secretReference": { - "type": "string" - }, - "defaultString": { - "type": "string", - "defaultValue": "default" - }, - "defaultNull": { - "type": "string", - "defaultValue": null - } - }, - "resources": [ - { - "apiVersion": "2016-03-30", - "dependsOn": [ ], - "location": "westus", - "name": "vnet", - "properties": { - }, - "type": "Microsoft.Network/virtualNetworks" - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_group_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_group_lock.yaml deleted file mode 100644 index 4ca4e7e496c..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_group_lock.yaml +++ /dev/null @@ -1,304 +0,0 @@ -interactions: -- request: - body: '{"location": "westus", "tags": {"date": "2019-02-28T00:01:56Z", "product": - "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_group_lock000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001","name":"cli_test_cannotdelete_resource_group_lock000001","location":"westus","tags":{"date":"2019-02-28T00:01:56Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:56 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock create] - Connection: [keep-alive] - Content-Length: ['41'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n -g --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}'} - headers: - cache-control: [no-cache] - content-length: ['375'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-g -n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}'} - headers: - cache-control: [no-cache] - content-length: ['387'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-g -n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}'} - headers: - cache-control: [no-cache] - content-length: ['375'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:57 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock list] - Connection: [keep-alive] - ParameterSetName: [-g --query] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}'} - headers: - cache-control: [no-cache] - content-length: ['387'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n -g --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}'} - headers: - cache-control: [no-cache] - content-length: ['387'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:59 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n -g --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}'} - headers: - cache-control: [no-cache] - content-length: ['375'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "ReadOnly", "notes": "notes000003"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['70'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n -g --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}'} - headers: - cache-control: [no-cache] - content-length: ['402'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:59 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - ParameterSetName: [-g -n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}'} - headers: - cache-control: [no-cache] - content-length: ['414'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:59 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-g -n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 28 Feb 2019 00:02:00 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14998'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_group_lock000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 28 Feb 2019 00:02:01 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGQ0FOTk9UREVMRVRFOjVGUkVTT1VSQ0U6NUZHUk9VUDo1RnwwMEI4QzU5NUM4NkM2ODdFLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14998'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_lock.yaml deleted file mode 100644 index fc746427b24..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_cannotdelete_resource_lock.yaml +++ /dev/null @@ -1,658 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001","name":"cli_test_cannotdelete_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:33:11Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"ffb816f9-a781-4ee7-8e42-b7c25e16f51d\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"53d420ec-31d1-498a-ba9c-7f1de42cde70\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/f52be557-c713-4475-8a06-285c59192284?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - e171aa44-c506-41e3-9ad2-db5b5525fec6 - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/f52be557-c713-4475-8a06-285c59192284?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a74caabf-6e61-4f29-a268-89040f11be47 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"42a31a06-ee9d-4eb7-a8ce-8bead73c15c7\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"53d420ec-31d1-498a-ba9c-7f1de42cde70\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:26 GMT - etag: - - W/"42a31a06-ee9d-4eb7-a8ce-8bead73c15c7" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f6e596ad-a101-4f25-9662-d5526f0181c0 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/providers/Microsoft.Authorization/locks/cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/subnets/cli-lock-subnetikbcktgaltagnh4/providers/Microsoft.Authorization/locks/cli-test-locksypn2od\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locksypn2od\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Authorization/locks/cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/providers/Microsoft.Authorization/locks/cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '17200' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/providers/Microsoft.Authorization/locks/cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/subnets/cli-lock-subnetikbcktgaltagnh4/providers/Microsoft.Authorization/locks/cli-test-locksypn2od\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locksypn2od\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Authorization/locks/cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/providers/Microsoft.Authorization/locks/cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/subnets/cli-lock-subnetzspp4td5u7oils5/providers/Microsoft.Authorization/locks/cli-test-lockuqk4kwl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockuqk4kwl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '17634' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/providers/Microsoft.Authorization/locks/cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockog32ioghue2k7luyxsccybwnp57627yyvbrgl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/subnets/cli-lock-subnetikbcktgaltagnh4/providers/Microsoft.Authorization/locks/cli-test-locksypn2od\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locksypn2od\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Authorization/locks/cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/providers/Microsoft.Authorization/locks/cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/subnets/cli-lock-subnetzspp4td5u7oils5/providers/Microsoft.Authorization/locks/cli-test-lockuqk4kwl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockuqk4kwl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '17634' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz/subnets/cli-lock-subnetikbcktgaltagnh4/providers/Microsoft.Authorization/locks/cli-test-locksypn2od\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locksypn2od\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Authorization/locks/cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockndnocwyxs4xdp5xjivonubgz6ihvrsz6l7oyj\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/providers/Microsoft.Authorization/locks/cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockbrv2ubmahs4shkgqukbl5hrbwvww2v5oerenq\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3/subnets/cli-lock-subnetzspp4td5u7oils5/providers/Microsoft.Authorization/locks/cli-test-lockuqk4kwl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockuqk4kwl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '17206' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_delete_group_managementgroup.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_delete_group_managementgroup.yaml deleted file mode 100644 index 36614b91d9a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_delete_group_managementgroup.yaml +++ /dev/null @@ -1,505 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:34 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - ce0d54b1-c1dd-4b18-b1f2-00131ca016f9 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:45 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 1a45fb49-2fa0-4644-aadf-b738228964d5 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":166,"updatedTime":"2022-02-09T00:56:40.7380149Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:56 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - dfe56f4d-9496-4714-9e71-f65022ff8431 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":166,"updatedTime":"2022-02-09T00:56:40.7380149Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:56 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 0518ab5e-ee81-4793-a14f-75e5bf9caffd - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:56:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:57:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:57:09 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - b527495b-df7c-464e-b660-7f1d05cabe04 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:57:20 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 81ec84c8-ed98-4290-8c99-a52a6b62c681 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup.yaml deleted file mode 100644 index 9c148347d8d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup.yaml +++ /dev/null @@ -1,505 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:01:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:04 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 08ec58b7-2f68-4460-a8fa-211dcd6905fd - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1198' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:14 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 8e40aae5-0be1-498b-b34e-b50ab5edeb2e - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":168,"updatedTime":"2022-02-09T01:02:09.9365611Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:24 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 011f0d00-afb8-474c-acda-b4cc80a60d12 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":168,"updatedTime":"2022-02-09T01:02:09.9365611Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:24 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 5fee887f-b63b-4557-9140-591698c78c7f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:36 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:38 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 716f2909-d8ba-4631-9473-209752a32c22 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:02:48 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 50d9a30b-b543-4d7f-a667-6db2b6b5d1c6 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname.yaml deleted file mode 100644 index d8d02e8de18..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname.yaml +++ /dev/null @@ -1,506 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:09:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:09:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"displayName": "TestCliDisplayName", - "details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '104' - Content-Type: - - application/json - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:09:51 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - dedd904e-ebdc-4ee9-86a4-1aa1185d08ea - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:01 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - f121b47b-c48b-4441-bab4-4167be7d02c2 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"TestCliDisplayName","details":{"version":170,"updatedTime":"2022-02-09T01:09:56.9833674Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '381' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:11 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 3f55f108-299e-4401-b89f-3640f1e911a7 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"TestCliDisplayName","details":{"version":170,"updatedTime":"2022-02-09T01:09:56.9833674Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '549' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:12 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 574bee45-45e5-4a8a-b11e-c26293fb9e37 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:24 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 6a4ea97c-0c36-4793-963b-62c4c0bf643c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:10:34 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 67dd292c-8132-4d3a-8e6a-31515122a9ef - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname_and_parentid.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname_and_parentid.yaml deleted file mode 100644 index 04f169daffb..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_displayname_and_parentid.yaml +++ /dev/null @@ -1,1062 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:58:36 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:58:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:58:47 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 8e76f390-fbff-4ced-b8da-8bb9eae4fdee - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:58:57 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 2d49cb26-af93-425f-9715-53b755f87cc2 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":167,"updatedTime":"2022-02-09T00:58:52.8268296Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:07 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - f1977dae-2e2f-4c53-9236-276ef6bcddb4 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":167,"updatedTime":"2022-02-09T00:58:52.8268296Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:08 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 5fbb50da-72b3-4d9a-a3bf-519097b0f8ce - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroupchild", "properties": {"displayName": "testcligroupchildDisplayName", - "details": {"parent": {"id": "/providers/Microsoft.Management/managementGroups/testcligroup"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '188' - Content-Type: - - application/json - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:20 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - b055d5d1-cb0e-48bb-830f-bedaeb40ac78 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:31 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 33cee053-1f11-4b40-9b4f-ab3b833787bc - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:41 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 6a25803f-8df4-4f84-9fa5-758d16364c98 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchildDisplayName","details":{"version":104,"updatedTime":"2022-02-09T00:59:27.7315944Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '401' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 57b1de9b-637e-4f63-823f-bd0c7d084a33 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchildDisplayName","details":{"version":104,"updatedTime":"2022-02-09T00:59:27.7315944Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","name":"testcligroup","displayName":"testcligroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '512' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 54cb1480-81e0-4379-8afb-bfa3c9354104 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:59:53 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:05 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 794b2ade-8701-4c5c-8575-8960d8f7eeef - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:15 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - ef7e3de5-aa29-4c82-bc21-92662e76c5cb - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:28 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 1352988c-6b73-40b3-a36c-47828299158c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:00:38 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 305868a6-c89f-4590-af75-60a604d1ed5e - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_parentid.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_parentid.yaml deleted file mode 100644 index 27b4fe04fad..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_create_managementgroup_with_parentid.yaml +++ /dev/null @@ -1,1008 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:45 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:56 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - b64767ce-ae78-44bb-97a6-4d126c736c1d - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:07 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 67664c94-dd43-4495-bb43-3276a7b05820 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":177,"updatedTime":"2022-02-09T01:26:02.5828886Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:17 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 99cb4616-6b39-46eb-9f28-12d430e98d24 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":177,"updatedTime":"2022-02-09T01:26:02.5828886Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:17 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - f6795721-0a1c-4be2-ae14-6aef058602e5 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroupchild", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligroup"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '141' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:29 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - b4b5a26b-d78f-469d-959a-e2f3a3292b78 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '58' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:40 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 57f22e46-396f-4aac-b886-84c1afbf3bf8 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":112,"updatedTime":"2022-02-09T01:26:36.1782913Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '390' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - e1043c29-1a8a-4e16-a9e9-4a00706bd8f8 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":112,"updatedTime":"2022-02-09T01:26:36.1782913Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","name":"testcligroup","displayName":"testcligroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '501' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 5d0d3e3e-b512-4959-8c5a-b0d2409a8845 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:04 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - bce0288a-f652-4d03-9d43-46aa3809aa30 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:14 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - abb0ed00-919c-4e22-92cd-0fe4c9bea795 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:16 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:27 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 7e4b6385-bb8e-404f-9046-0f958734db40 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:37 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - bfdf2228-f67d-490c-b381-f159af44a059 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_delete_dependent_resources.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_delete_dependent_resources.yaml deleted file mode 100644 index a5a24ca0e2d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_delete_dependent_resources.yaml +++ /dev/null @@ -1,359 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001","name":"cli_test_delete_dependent_resources000001","location":"southcentralus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:35:30Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '392' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - Connection: - - keep-alive - User-Agent: - - python-requests/2.25.1 - method: GET - uri: https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/arm-compute/quickstart-templates/aliases.json - response: - body: - string: "{\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\n - \ \"contentVersion\": \"1.0.0.0\",\n \"parameters\": {},\n \"variables\": - {},\n \"resources\": [],\n \"outputs\": {\n \"aliases\": {\n \"type\": - \"object\",\n \"value\": {\n \"Linux\": {\n \"CentOS\": - {\n \"publisher\": \"OpenLogic\",\n \"offer\": \"CentOS\",\n - \ \"sku\": \"7.5\",\n \"version\": \"latest\"\n },\n - \ \"CoreOS\": {\n \"publisher\": \"CoreOS\",\n \"offer\": - \"CoreOS\",\n \"sku\": \"Stable\",\n \"version\": \"latest\"\n - \ },\n \"Debian\": {\n \"publisher\": \"Debian\",\n - \ \"offer\": \"debian-10\",\n \"sku\": \"10\",\n \"version\": - \"latest\"\n },\n \"openSUSE-Leap\": {\n \"publisher\": - \"SUSE\",\n \"offer\": \"openSUSE-Leap\",\n \"sku\": - \"42.3\",\n \"version\": \"latest\"\n },\n \"RHEL\": - {\n \"publisher\": \"RedHat\",\n \"offer\": \"RHEL\",\n - \ \"sku\": \"7-LVM\",\n \"version\": \"latest\"\n },\n - \ \"SLES\": {\n \"publisher\": \"SUSE\",\n \"offer\": - \"SLES\",\n \"sku\": \"15\",\n \"version\": \"latest\"\n - \ },\n \"UbuntuLTS\": {\n \"publisher\": \"Canonical\",\n - \ \"offer\": \"UbuntuServer\",\n \"sku\": \"18.04-LTS\",\n - \ \"version\": \"latest\"\n }\n },\n \"Windows\": - {\n \"Win2019Datacenter\": {\n \"publisher\": \"MicrosoftWindowsServer\",\n - \ \"offer\": \"WindowsServer\",\n \"sku\": \"2019-Datacenter\",\n - \ \"version\": \"latest\"\n },\n \"Win2016Datacenter\": - {\n \"publisher\": \"MicrosoftWindowsServer\",\n \"offer\": - \"WindowsServer\",\n \"sku\": \"2016-Datacenter\",\n \"version\": - \"latest\"\n },\n \"Win2012R2Datacenter\": {\n \"publisher\": - \"MicrosoftWindowsServer\",\n \"offer\": \"WindowsServer\",\n \"sku\": - \"2012-R2-Datacenter\",\n \"version\": \"latest\"\n },\n - \ \"Win2012Datacenter\": {\n \"publisher\": \"MicrosoftWindowsServer\",\n - \ \"offer\": \"WindowsServer\",\n \"sku\": \"2012-Datacenter\",\n - \ \"version\": \"latest\"\n },\n \"Win2008R2SP1\": - {\n \"publisher\": \"MicrosoftWindowsServer\",\n \"offer\": - \"WindowsServer\",\n \"sku\": \"2008-R2-SP1\",\n \"version\": - \"latest\"\n }\n }\n }\n }\n }\n}\n" - headers: - accept-ranges: - - bytes - access-control-allow-origin: - - '*' - cache-control: - - max-age=300 - connection: - - keep-alive - content-length: - - '2501' - content-security-policy: - - default-src 'none'; style-src 'unsafe-inline'; sandbox - content-type: - - text/plain; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:34 GMT - etag: - - W/"540044b4084c3c314537f1baa1770f248628b2bc9ba0328f1004c33862e049da" - expires: - - Mon, 19 Apr 2021 09:40:34 GMT - source-age: - - '194' - strict-transport-security: - - max-age=31536000 - vary: - - Authorization,Accept-Encoding - via: - - 1.1 varnish - x-cache: - - HIT - x-cache-hits: - - '1' - x-content-type-options: - - nosniff - x-fastly-request-id: - - 487c47245a0f1ca4cc59e179532501913feee455 - x-frame-options: - - deny - x-github-request-id: - - 14AA:2B35:16FBB5:1F1AF3:607D43E2 - x-served-by: - - cache-qpg1268-QPG - x-timer: - - S1618824934.001112,VS0,VE0 - x-xss-protection: - - 1; mode=block - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks?api-version=2017-10-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"template": {"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", "parameters": {"adminPassword": {"type": "securestring", - "metadata": {"description": "Secure adminPassword"}}}, "variables": {}, "resources": - [{"name": "cli-test-vm000002VNET", "type": "Microsoft.Network/virtualNetworks", - "location": "southcentralus", "apiVersion": "2015-06-15", "dependsOn": [], "tags": - {"cli-test-tag000003": ""}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "subnets": [{"name": "cli-test-vm000002Subnet", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}, {"type": "Microsoft.Network/networkSecurityGroups", - "name": "cli-test-vm000002NSG", "apiVersion": "2015-06-15", "location": "southcentralus", - "tags": {"cli-test-tag000003": ""}, "dependsOn": []}, {"apiVersion": "2017-10-01", - "type": "Microsoft.Network/publicIPAddresses", "name": "cli-test-vm000002PublicIP", - "location": "southcentralus", "tags": {"cli-test-tag000003": ""}, "dependsOn": - [], "properties": {"publicIPAllocationMethod": null}}, {"apiVersion": "2015-06-15", - "type": "Microsoft.Network/networkInterfaces", "name": "cli-test-vm000002VMNic", - "location": "southcentralus", "tags": {"cli-test-tag000003": ""}, "dependsOn": - ["Microsoft.Network/virtualNetworks/cli-test-vm000002VNET", "Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG", - "Microsoft.Network/publicIpAddresses/cli-test-vm000002PublicIP"], "properties": - {"ipConfigurations": [{"name": "ipconfigcli-test-vm000002", "properties": {"privateIPAllocationMethod": - "Dynamic", "subnet": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"}, - "publicIPAddress": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"}}}], - "networkSecurityGroup": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"}}}, - {"apiVersion": "2017-12-01", "type": "Microsoft.Compute/virtualMachines", "name": - "cli-test-vm000002", "location": "southcentralus", "tags": {"cli-test-tag000003": - ""}, "dependsOn": ["Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"], - "properties": {"hardwareProfile": {"vmSize": "Standard_DS1_v2"}, "networkProfile": - {"networkInterfaces": [{"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"}]}, - "storageProfile": {"osDisk": {"createOption": "fromImage", "name": null, "caching": - "ReadWrite", "managedDisk": {"storageAccountType": null}}, "imageReference": - {"publisher": "Canonical", "offer": "UbuntuServer", "sku": "18.04-LTS", "version": - "latest"}}, "osProfile": {"computerName": "cli-test-vm000002", "adminUsername": - "ubuntu", "adminPassword": "[parameters(''adminPassword'')]"}, "securityProfile": - {}}}], "outputs": {}}, "parameters": {"adminPassword": {"value": "Password#1000004"}}, - "mode": "incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - Content-Length: - - '3702' - Content-Type: - - application/json - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/vm_deploy_PEGjZCxiBFjJQofiFfL2XcHIOHOVDDxd","name":"vm_deploy_PEGjZCxiBFjJQofiFfL2XcHIOHOVDDxd","properties":{"templateHash":"6742745474280070638","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:35:38.5043478Z","duration":"PT2.4412925S","correlationId":"cfdd672f-ea63-4ae8-a848-fd973b684390","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["southcentralus"]},{"resourceType":"networkSecurityGroups","locations":["southcentralus"]},{"resourceType":"publicIPAddresses","locations":["southcentralus"]},{"resourceType":"networkInterfaces","locations":["southcentralus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["southcentralus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/vm_deploy_PEGjZCxiBFjJQofiFfL2XcHIOHOVDDxd/operationStatuses/08585827819494145899?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '3104' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819494145899?api-version=2018-05-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -n -g --image --tag --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_delete_dependent_resources000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819494145899?api-version=2018-05-01 - response: - body: - string: '{"status":"Failed","error":{"code":"DeploymentFailed","message":"At - least one resource deployment operation failed. Please list deployment operations - for details. Please see https://aka.ms/DeployOperations for usage details.","details":[{"code":"BadRequest","message":"{\r\n \"error\": - {\r\n \"code\": \"BadRequest\",\r\n \"message\": \"Could not find member - ''securityProfile'' on object of type ''Properties''. Path ''properties.securityProfile'', - line 1, position 790.\",\r\n \"target\": \"vm.properties.securityProfile\"\r\n }\r\n}"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '545' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_generic_subscription_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_generic_subscription_locks.yaml deleted file mode 100644 index f7ad4f7c72a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_generic_subscription_locks.yaml +++ /dev/null @@ -1,768 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "ReadOnly"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock create] - Connection: [keep-alive] - Content-Length: ['37'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:03 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1198'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock list] - Connection: [keep-alive] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:04 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:04 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:04 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:05 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:05 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['292'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:05 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['280'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:05 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "CanNotDelete", "notes": "notes000002"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['74'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:06 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['327'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:06 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:06 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "ReadOnly", "notes": "notes000002"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['70'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:07 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:07 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 28 Feb 2019 00:01:08 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 200, message: OK} -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock create] - Connection: [keep-alive] - Content-Length: ['41'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:08 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock list] - Connection: [keep-alive] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:08 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:09 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:09 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:09 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:09 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:10 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:10 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "ReadOnly", "notes": "notes000004"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['70'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:11 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:11 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:12 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "CanNotDelete", "notes": "notes000004"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock update] - Connection: [keep-alive] - Content-Length: ['74'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:12 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1198'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['327'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:12 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 28 Feb 2019 00:01:12 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 200, message: OK} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_global_ids.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_global_ids.yaml deleted file mode 100644 index 8e4d7e3c680..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_global_ids.yaml +++ /dev/null @@ -1,275 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_global_ids000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001","name":"cli_test_global_ids000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:35:36Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"594034aa-d490-43eb-8792-120a75bc764f\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"408cf5f6-0b16-404a-af9f-1895d9819a5a\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/2cafa071-b2bb-45c7-9046-5fdcc83eb123?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '732' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - bf03c82f-3e94-4aaa-b5ad-a5b42aac567b - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/2cafa071-b2bb-45c7-9046-5fdcc83eb123?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f9499027-0564-472c-b9f5-8e283f01face - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"b05f6d8c-8e88-4ec3-89da-065c9ec4e4db\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"408cf5f6-0b16-404a-af9f-1895d9819a5a\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '733' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:48 GMT - etag: - - W/"b05f6d8c-8e88-4ec3-89da-065c9ec4e4db" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - bb779ba2-9633-4ae2-b702-1632ab58b9eb - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet show - Connection: - - keep-alive - ParameterSetName: - - --subscription --resource-group -n --ids - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_global_ids000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"b05f6d8c-8e88-4ec3-89da-065c9ec4e4db\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"408cf5f6-0b16-404a-af9f-1895d9819a5a\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '733' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:49 GMT - etag: - - W/"b05f6d8c-8e88-4ec3-89da-065c9ec4e4db" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - b31d1eb7-c137-4261-988b-c05cf8eff921 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment.yaml deleted file mode 100644 index e3b6f190612..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment.yaml +++ /dev/null @@ -1,858 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001","name":"cli_test_deployment000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:33:45Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": [{"name": "subnet1", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '205' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"3ec662d3-6ed9-4b13-bafe-f11aee129aef\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"2ded1fe0-7504-45f7-bc7b-68ae6dc3d7f9\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet1\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\",\r\n - \ \"etag\": \"W/\\\"3ec662d3-6ed9-4b13-bafe-f11aee129aef\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/593d76e6-7b78-4a92-b76b-15db8431f9b8?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1258' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - ec72b0b1-66f5-46f7-93c2-9470e6b25a21 - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/593d76e6-7b78-4a92-b76b-15db8431f9b8?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 480de92d-5530-42d7-8331-8aa1d73c03d6 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1\",\r\n - \ \"etag\": \"W/\\\"77782f41-38fa-4890-a5d6-ae4ddfbece06\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"2ded1fe0-7504-45f7-bc7b-68ae6dc3d7f9\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet1\",\r\n \"id\": - \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\",\r\n - \ \"etag\": \"W/\\\"77782f41-38fa-4890-a5d6-ae4ddfbece06\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1260' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:57 GMT - etag: - - W/"77782f41-38fa-4890-a5d6-ae4ddfbece06" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 8f1bea16-9064-4521-ab05-baf4e245f6ee - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment validate - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/deployment_dry_run","name":"deployment_dry_run","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:33:59.6110239Z","duration":"PT0S","correlationId":"7075b76b-e72c-49a2-86d0-038f6326c76c","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2016-03-30","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","tags":{"key":"super=value"},"properties":{"frontendIPConfigurations":[{"name":"LoadBalancerFrontEnd","properties":{"privateIPAllocationMethod":"Dynamic","subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"}}}],"backendAddressPools":[{"name":"bepool1"},{"name":"bepool2"}]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1936' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Connection: - - close - Host: - - raw.githubusercontent.com - User-Agent: - - Python-urllib/3.8 - method: GET - uri: https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/test-params.json - response: - body: - string: "{\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#\",\n - \ \"contentVersion\": \"1.0.0.0\",\n \"parameters\": {\n \"name\": {\n - \ \"value\": \"test-lb\"\n },\n \"location\": {\n \"value\": - \"westus\"\n },\n \"privateIPAllocationMethod\": {\n \"value\": - \"Dynamic\"\n },\n \"tags\": {\n \"value\": {\n \"key\": - \"super=value\"\n }\n }\n }\n}" - headers: - accept-ranges: - - bytes - access-control-allow-origin: - - '*' - cache-control: - - max-age=300 - connection: - - close - content-length: - - '390' - content-security-policy: - - default-src 'none'; style-src 'unsafe-inline'; sandbox - content-type: - - text/plain; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:00 GMT - etag: - - '"1c23f331a1fb7e4cfba7c70e002f81f4096234811e9470479a537be84a009123"' - expires: - - Mon, 19 Apr 2021 09:39:00 GMT - source-age: - - '0' - strict-transport-security: - - max-age=31536000 - vary: - - Authorization,Accept-Encoding - via: - - 1.1 varnish - x-cache: - - MISS - x-cache-hits: - - '0' - x-content-type-options: - - nosniff - x-fastly-request-id: - - b469248745311a6fb175c3f20441a55a5708682c - x-frame-options: - - deny - x-github-request-id: - - 2074:8819:6F9AC:8DBF7:607D4E88 - x-served-by: - - cache-qpg1234-QPG - x-timer: - - S1618824840.280208,VS0,VE331 - x-xss-protection: - - 1; mode=block - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment validate - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/deployment_dry_run","name":"deployment_dry_run","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:01.5386498Z","duration":"PT0S","correlationId":"6c5366fe-85b3-4ef8-a3b2-d05a28867dcd","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2016-03-30","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","tags":{"key":"super=value"},"properties":{"frontendIPConfigurations":[{"name":"LoadBalancerFrontEnd","properties":{"privateIPAllocationMethod":"Dynamic","subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"}}}],"backendAddressPools":[{"name":"bepool1"},{"name":"bepool2"}]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1936' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:03.5597715Z","duration":"PT0S","correlationId":"eb303480-0526-48f7-9f7d-c38bf374a102","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2016-03-30","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","tags":{"key":"super=value"},"properties":{"frontendIPConfigurations":[{"name":"LoadBalancerFrontEnd","properties":{"privateIPAllocationMethod":"Dynamic","subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"}}}],"backendAddressPools":[{"name":"bepool1"},{"name":"bepool2"}]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1940' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"name\": {\"value\": \"test-lb\"}, - \"location\": {\"value\": \"westus\"}, \"privateIPAllocationMethod\": {\"value\": - \"Dynamic\"}, \"tags\": {\"value\": {\"key\": \"super=value\"}}, \"subnetId\": - {\"value\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"}, - \"backendAddressPools\": {\"value\": [{\"name\": \"bepool1\"}, {\"name\": \"bepool2\"}]}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"name\": {\r\n - \ \"type\": \"string\"\r\n },\r\n \"location\": {\r\n \"type\": - \"string\"\r\n },\r\n \"subnetId\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"privateIPAllocationMethod\": {\r\n \"type\": \"string\"\r\n - \ },\r\n \"backendAddressPools\": {\r\n \"type\": \"array\"\r\n },\r\n - \ \"tags\": {\r\n \"type\": \"object\"\r\n }\r\n },\r\n \"resources\": - [\r\n {\r\n \"apiVersion\": \"2016-03-30\",\r\n \"dependsOn\": - [ ],\r\n \"location\": \"[parameters('location')]\",\r\n \"name\": - \"[parameters('name')]\",\r\n \"properties\": {\r\n \"frontendIPConfigurations\": - [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"[parameters('privateIPAllocationMethod')]\",\r\n - \ \"subnet\": {\r\n \"id\": \"[parameters('subnetId')]\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - \"[parameters('backendAddressPools')]\"\r\n },\r\n \"tags\": \"[parameters('tags')]\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers\"\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1740' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:06.376677Z","duration":"PT1.8779031S","correlationId":"445f8634-394c-48a7-9fdf-d27ce29f4cb8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operationStatuses/08585827820409788524?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '1170' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827820409788524?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters --parameters --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:16.0487311Z","duration":"PT11.5499572S","correlationId":"445f8634-394c-48a7-9fdf-d27ce29f4cb8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network lb show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"test-lb\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb\",\r\n - \ \"etag\": \"W/\\\"5fdf04ad-1a0f-4fe6-8efa-e6acedc08dc0\\\"\",\r\n \"type\": - \"Microsoft.Network/loadBalancers\",\r\n \"location\": \"westus\",\r\n \"tags\": - {\r\n \"key\": \"super=value\"\r\n },\r\n \"properties\": {\r\n \"provisioningState\": - \"Succeeded\",\r\n \"resourceGuid\": \"11c28f74-d22f-48ec-b2e1-126775ce3ec5\",\r\n - \ \"frontendIPConfigurations\": [\r\n {\r\n \"name\": \"LoadBalancerFrontEnd\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/frontendIPConfigurations/LoadBalancerFrontEnd\",\r\n - \ \"etag\": \"W/\\\"5fdf04ad-1a0f-4fe6-8efa-e6acedc08dc0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/loadBalancers/frontendIPConfigurations\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"privateIPAddress\": \"10.0.0.4\",\r\n \"privateIPAllocationMethod\": - \"Dynamic\",\r\n \"subnet\": {\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1\"\r\n - \ }\r\n }\r\n }\r\n ],\r\n \"backendAddressPools\": - [\r\n {\r\n \"name\": \"bepool1\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/backendAddressPools/bepool1\",\r\n - \ \"etag\": \"W/\\\"5fdf04ad-1a0f-4fe6-8efa-e6acedc08dc0\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\"\r\n - \ },\r\n \"type\": \"Microsoft.Network/loadBalancers/backendAddressPools\"\r\n - \ },\r\n {\r\n \"name\": \"bepool2\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb/backendAddressPools/bepool2\",\r\n - \ \"etag\": \"W/\\\"5fdf04ad-1a0f-4fe6-8efa-e6acedc08dc0\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\"\r\n - \ },\r\n \"type\": \"Microsoft.Network/loadBalancers/backendAddressPools\"\r\n - \ }\r\n ],\r\n \"loadBalancingRules\": [],\r\n \"probes\": [],\r\n - \ \"inboundNatRules\": [],\r\n \"inboundNatPools\": []\r\n },\r\n \"sku\": - {\r\n \"name\": \"Basic\"\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2651' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:39 GMT - etag: - - W/"5fdf04ad-1a0f-4fe6-8efa-e6acedc08dc0" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 1fd8c832-8212-4183-bed0-62e65e946104 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:16.0487311Z","duration":"PT11.5499572S","correlationId":"445f8634-394c-48a7-9fdf-d27ce29f4cb8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1407' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"16281834986780566039","parameters":{"name":{"type":"String","value":"test-lb"},"location":{"type":"String","value":"westus"},"subnetId":{"type":"String","value":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/virtualNetworks/vnet1/subnets/subnet1"},"privateIPAllocationMethod":{"type":"String","value":"Dynamic"},"backendAddressPools":{"type":"Array","value":[{"name":"bepool1"},{"name":"bepool2"}]},"tags":{"type":"Object","value":{"key":"super=value"}}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:16.0487311Z","duration":"PT11.5499572S","correlationId":"445f8634-394c-48a7-9fdf-d27ce29f4cb8","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"loadBalancers","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment operation list - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment000001/deployments/mock-deployment/operations?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operations/D3FE5C819382E2C2","operationId":"D3FE5C819382E2C2","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:15.9419434Z","duration":"PT8.4098792S","trackingId":"77f39d67-517a-44d3-a9b3-42adb7f2a3dd","serviceRequestId":"020052c3-3d8b-46df-b373-c7a8a9f472b0","statusCode":"Created","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Network/loadBalancers/test-lb","resourceType":"Microsoft.Network/loadBalancers","resourceName":"test-lb"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operations/08585827820409788524","operationId":"08585827820409788524","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:16.0287002Z","duration":"PT8.496636S","trackingId":"ba42d126-e900-4ec6-954c-2e6dd057a69f","statusCode":"OK"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1382' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_crossrg.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_crossrg.yaml deleted file mode 100644 index fd4350fd68d..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_crossrg.yaml +++ /dev/null @@ -1,484 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}, - \"StorageAccountName1\": {\"value\": \"crossrgfz2mi633zvqyzmdho\"}, \"StorageAccountName2\": - {\"value\": \"crossrglpu2czqw2ygl3gbp4\"}}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment validate - Connection: - - keep-alive - Content-Length: - - '2072' - Content-Type: - - application/json - ParameterSetName: - - -g --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/deployment_dry_run","name":"deployment_dry_run","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"crossrgfz2mi633zvqyzmdho"},"storageAccountName2":{"type":"String","value":"crossrglpu2czqw2ygl3gbp4"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:36:12.7058286Z","duration":"PT0S","correlationId":"c6adbf48-8e32-4fc8-84f4-02f46f69adc5","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2017-05-10","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","name":"nestedTemplate","type":"Microsoft.Resources/deployments","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"crossrglpu2czqw2ygl3gbp4","apiVersion":"2015-06-15","location":"West - US","properties":{"accountType":"Standard_LRS"}}],"outputs":{"result":{"value":"Hello - World","type":"string"}}},"parameters":{}}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/crossrgfz2mi633zvqyzmdho","name":"crossrgfz2mi633zvqyzmdho","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/crossrglpu2czqw2ygl3gbp4","name":"crossrglpu2czqw2ygl3gbp4","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '2546' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:14 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1948' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:36:16.1614488Z","duration":"PT0S","correlationId":"5bf5cc37-afa8-4ad7-983b-2f1402fa3023","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2017-05-10","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","name":"nestedTemplate","type":"Microsoft.Resources/deployments","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"test1ddfosatdest73","apiVersion":"2015-06-15","location":"West - US","properties":{"accountType":"Standard_LRS"}}],"outputs":{"result":{"value":"Hello - World","type":"string"}}},"parameters":{}}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72","name":"test1ddosdatest72","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}},{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73","name":"test1ddfosatdest73","type":"Microsoft.Storage/storageAccounts","location":"West - US","properties":{"accountType":"Standard_LRS"}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '2545' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"CrossRg\": {\"value\": \"cli_test_cross_rg_alt000001\"}}, - \"mode\": \"Incremental\", template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"StorageAccountName1\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"test1ddosdatest72\"\r\n - \ },\r\n \"StorageAccountName2\": {\r\n \"type\": \"string\",\r\n - \ \"defaultValue\": \"test1ddfosatdest73\"\r\n },\r\n \"CrossRg\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"crossrg5\"\r\n - \ }\r\n },\r\n \"variables\": {},\r\n \"resources\": [\r\n {\r\n \"apiVersion\": - \"2017-05-10\",\r\n \"name\": \"nestedTemplate\",\r\n \"type\": \"Microsoft.Resources/deployments\",\r\n - \ \"resourceGroup\": \"[parameters('CrossRg')]\",\r\n \"properties\": - {\r\n \"mode\": \"Incremental\",\r\n \"template\": {\r\n \"$schema\": - \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {},\r\n - \ \"variables\": {},\r\n \"resources\": [\r\n {\r\n - \ \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName2')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n - \ \"accountType\": \"Standard_LRS\"\r\n }\r\n }\r\n - \ ],\r\n \"outputs\": {\r\n \"result\": {\r\n \"value\": - \"Hello World\",\r\n \"type\": \"string\"\r\n }\r\n - \ }\r\n },\r\n \"parameters\": {}\r\n }\r\n },\r\n - \ {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[parameters('StorageAccountName1')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"West US\",\r\n \"properties\": {\r\n \"accountType\": - \"Standard_LRS\"\r\n }\r\n }\r\n ]\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1948' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:36:20.7462884Z","duration":"PT1.8996469S","correlationId":"557dd6c2-7784-4701-a649-061d34ffe45b","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operationStatuses/08585827819066309830?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '1023' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819066309830?api-version=2018-05-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819066309830?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:37:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:37:05.8269641Z","duration":"PT46.9803226S","correlationId":"557dd6c2-7784-4701-a649-061d34ffe45b","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1474' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:37:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:37:05.8269641Z","duration":"PT46.9803226S","correlationId":"557dd6c2-7784-4701-a649-061d34ffe45b","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1486' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:37:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003","name":"azure-cli-crossrgdeployment000003","properties":{"templateHash":"364931828683175221","parameters":{"storageAccountName1":{"type":"String","value":"test1ddosdatest72"},"storageAccountName2":{"type":"String","value":"test1ddfosatdest73"},"crossRg":{"type":"String","value":"cli_test_cross_rg_alt000001"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:37:05.8269641Z","duration":"PT46.9803226S","correlationId":"557dd6c2-7784-4701-a649-061d34ffe45b","providers":[{"namespace":"Microsoft.Resources","resourceTypes":[{"resourceType":"deployments","locations":[null]}]},{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]}],"dependencies":[],"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Storage/storageAccounts/test1ddfosatdest73"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1474' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:37:25 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment operation list - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cross_rg_deploy000002/deployments/mock-deployment/operations?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/925D9922F477F2AD","operationId":"925D9922F477F2AD","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-19T09:36:51.1168972Z","duration":"PT28.8760097S","trackingId":"2ed9160d-4968-4dca-a85b-07aaf1ecb7c0","serviceRequestId":"f8a1a52d-f86a-4b68-aa41-a8696bbae8a6","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Storage/storageAccounts/test1ddosdatest72","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"test1ddosdatest72"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/DC23C86003222811","operationId":"DC23C86003222811","properties":{"provisioningOperation":"Create","provisioningState":"Succeeded","timestamp":"2021-04-19T09:37:04.6180811Z","duration":"PT42.3771936S","trackingId":"b927b68d-43c3-4466-8cd8-4f3813daf77b","serviceRequestId":"569d7454-f01b-441b-9a36-39ad37fe3d07","statusCode":"OK","targetResource":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_alt000001/providers/Microsoft.Resources/deployments/nestedTemplate","resourceType":"Microsoft.Resources/deployments","resourceName":"nestedTemplate"}}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_rg_deploy000002/providers/Microsoft.Resources/deployments/azure-cli-crossrgdeployment000003/operations/08585827819066309830","operationId":"08585827819066309830","properties":{"provisioningOperation":"EvaluateDeploymentOutput","provisioningState":"Succeeded","timestamp":"2021-04-19T09:37:05.6118425Z","duration":"PT0.55296S","trackingId":"91643dce-13b2-495f-8a86-b24b32715f23","statusCode":"OK"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '2322' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:37:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_lite.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_lite.yaml deleted file mode 100644 index 48fb2851ebe..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_lite.yaml +++ /dev/null @@ -1,188 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:33:47.5690463Z","duration":"PT0S","correlationId":"d6652be0-6f3a-42b1-a7ce-f0f78138e54b","providers":[],"dependencies":[],"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '542' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:33:50.0097291Z","duration":"PT1.7532632S","correlationId":"61869cfc-7d31-4296-9225-7e0b952d7aa5","providers":[],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002/operationStatuses/08585827820572211241?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '525' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827820572211241?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_lite000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:33:51.7186598Z","duration":"PT3.4621939S","correlationId":"61869cfc-7d31-4296-9225-7e0b952d7aa5","providers":[],"dependencies":[],"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '547' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_no_wait.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_no_wait.yaml deleted file mode 100644 index 747fa585428..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_no_wait.yaml +++ /dev/null @@ -1,268 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {\"location\": {\"value\": \"westus\"}, - \"name\": {\"value\": \"azure-cli-deploy-test-nsg1\"}}, \"mode\": \"Incremental\", - template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"location\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"[resourceGroup().location]\",\r\n - \ \"metadata\": {\r\n \"description\": \"Location for the network - security group.\"\r\n }\r\n },\r\n \"name\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Name of the - network security group.\"\r\n }\r\n }\r\n },\r\n \"variables\": {\r\n - \ },\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Network/networkSecurityGroups\",\r\n - \ \"name\": \"[parameters('name')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"[parameters('location')]\",\r\n \"properties\": {\r\n - \ \"securityRules\": [\r\n ]\r\n },\r\n \"dependsOn\": - [ ]\r\n }\r\n ],\r\n \"outputs\": {\r\n \"NewNSG\": {\r\n \"type\": - \"object\",\r\n \"value\": \"[reference(parameters('name'))]\"\r\n }\r\n - \ }\r\n}\r\n}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1106' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --no-wait - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:33:56.7763085Z","duration":"PT0S","correlationId":"6608ee2d-98bb-4d5d-841d-cee4e56b044e","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1","name":"azure-cli-deploy-test-nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","properties":{"securityRules":[]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1154' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {\"location\": {\"value\": \"westus\"}, - \"name\": {\"value\": \"azure-cli-deploy-test-nsg1\"}}, \"mode\": \"Incremental\", - template:{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"location\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"[resourceGroup().location]\",\r\n - \ \"metadata\": {\r\n \"description\": \"Location for the network - security group.\"\r\n }\r\n },\r\n \"name\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Name of the - network security group.\"\r\n }\r\n }\r\n },\r\n \"variables\": {\r\n - \ },\r\n \"resources\": [\r\n {\r\n \"type\": \"Microsoft.Network/networkSecurityGroups\",\r\n - \ \"name\": \"[parameters('name')]\",\r\n \"apiVersion\": \"2015-06-15\",\r\n - \ \"location\": \"[parameters('location')]\",\r\n \"properties\": {\r\n - \ \"securityRules\": [\r\n ]\r\n },\r\n \"dependsOn\": - [ ]\r\n }\r\n ],\r\n \"outputs\": {\r\n \"NewNSG\": {\r\n \"type\": - \"object\",\r\n \"value\": \"[reference(parameters('name'))]\"\r\n }\r\n - \ }\r\n}\r\n}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '1106' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --parameters --no-wait - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:00.2510319Z","duration":"PT2.3510456S","correlationId":"5b647072-b71c-4ad3-80bb-427411360dcc","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment/operationStatuses/08585827820475776992?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '744' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment wait - Connection: - - keep-alive - ParameterSetName: - - -g -n --created - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Running","timestamp":"2021-04-19T09:34:01.8688989Z","duration":"PT3.9689126S","correlationId":"5b647072-b71c-4ad3-80bb-427411360dcc","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '743' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment wait - Connection: - - keep-alive - ParameterSetName: - - -g -n --created - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:13.511484Z","duration":"PT15.6114977S","correlationId":"5b647072-b71c-4ad3-80bb-427411360dcc","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"81d10e2d-c1c6-4a7a-96b4-6d9330838f77","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5455' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Resources/deployments/azure-cli-deployment","name":"azure-cli-deployment","properties":{"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:13.511484Z","duration":"PT15.6114977S","correlationId":"5b647072-b71c-4ad3-80bb-427411360dcc","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"81d10e2d-c1c6-4a7a-96b4-6d9330838f77","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"ca7ed7e2-33d9-4d83-bc1c-5631c23c2763\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_wait000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5455' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_thru_uri.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_thru_uri.yaml deleted file mode 100644 index 69887e5e0fc..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_deployment_thru_uri.yaml +++ /dev/null @@ -1,443 +0,0 @@ -interactions: -- request: - body: null - headers: - Connection: - - close - Host: - - raw.githubusercontent.com - User-Agent: - - Python-urllib/3.8 - method: GET - uri: https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json - response: - body: - string: "{\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\n - \ \"contentVersion\": \"1.0.0.0\",\n \"parameters\": {\n \"location\": - {\n \"type\": \"string\",\n \"defaultValue\": \"[resourceGroup().location]\",\n - \ \"metadata\": {\n \"description\": \"Location for the network - security group.\"\n }\n },\n \"name\": {\n \"type\": \"string\",\n - \ \"metadata\": {\n \"description\": \"Name of the network security - group.\"\n }\n }\n },\n \"variables\": {\n },\n \"resources\": - [\n {\n \"type\": \"Microsoft.Network/networkSecurityGroups\",\n \"name\": - \"[parameters('name')]\",\n \"apiVersion\": \"2015-06-15\",\n \"location\": - \"[parameters('location')]\",\n \"properties\": {\n \"securityRules\": - [\n ]\n },\n \"dependsOn\": [ ]\n }\n ],\n \"outputs\": - {\n \"NewNSG\": {\n /** comment1\n comment2\n comment3\n - \ **/\n // comment\n /** comment **/\n \"type\": \"object\", - /** comment **/\n \"value\": \"[reference(parameters('name'))]\" // comment\n - \ // comment\n /** comment **/\n /** comment1\n comment2\n - \ comment3\n **/\n }\n } // comment\n}\n" - headers: - accept-ranges: - - bytes - access-control-allow-origin: - - '*' - cache-control: - - max-age=300 - connection: - - close - content-length: - - '1168' - content-security-policy: - - default-src 'none'; style-src 'unsafe-inline'; sandbox - content-type: - - text/plain; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:38 GMT - etag: - - '"9d646ce8531dcaff13075823af333033fe651237e2bb9e0b816aeae683142e31"' - expires: - - Mon, 19 Apr 2021 09:39:38 GMT - source-age: - - '0' - strict-transport-security: - - max-age=31536000 - vary: - - Authorization,Accept-Encoding - via: - - 1.1 varnish - x-cache: - - MISS - x-cache-hits: - - '0' - x-content-type-options: - - nosniff - x-fastly-request-id: - - b880d47e19f68b4b9b022c715efff9b985f35902 - x-frame-options: - - deny - x-github-request-id: - - E7BE:2147:1EA106:2F22E0:607D4D3A - x-served-by: - - cache-qpg1273-QPG - x-timer: - - S1618824878.098483,VS0,VE294 - x-xss-protection: - - 1; mode=block - status: - code: 200 - message: OK -- request: - body: '{"properties": {"templateLink": {"uri": "https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json"}, - "parameters": {"location": {"value": "westus"}, "name": {"value": "azure-cli-deploy-test-nsg1"}}, - "mode": "Incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '300' - Content-Type: - - application/json - ParameterSetName: - - -g --template-uri --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/simple_deploy","name":"simple_deploy","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json","contentVersion":"1.0.0.0"},"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:39.5610074Z","duration":"PT0S","correlationId":"691ddf9f-23e9-4e64-9f78-dead4127535a","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"validatedResources":[{"apiVersion":"2015-06-15","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1","name":"azure-cli-deploy-test-nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","properties":{"securityRules":[]}}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: '{"properties": {"templateLink": {"uri": "https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json"}, - "parameters": {"location": {"value": "westus"}, "name": {"value": "azure-cli-deploy-test-nsg1"}}, - "mode": "Incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '300' - Content-Type: - - application/json - ParameterSetName: - - -g --template-uri --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/simple_deploy","name":"simple_deploy","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json","contentVersion":"1.0.0.0"},"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:43.4572274Z","duration":"PT2.0662102S","correlationId":"3211b92f-9b37-48df-aca3-0890955bd030","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/simple_deploy/operationStatuses/08585827820040866030?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '917' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:44 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g --template-uri --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827820040866030?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g --template-uri --parameters - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/simple_deploy","name":"simple_deploy","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json","contentVersion":"1.0.0.0"},"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:52.5530097Z","duration":"PT11.1619925S","correlationId":"3211b92f-9b37-48df-aca3-0890955bd030","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"ab5f92eb-bf4a-486e-a902-1fcd0ea20711","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5629' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/simple_deploy","name":"simple_deploy","properties":{"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json","contentVersion":"1.0.0.0"},"templateHash":"18214098974183646216","parameters":{"location":{"type":"String","value":"westus"},"name":{"type":"String","value":"azure-cli-deploy-test-nsg1"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:52.5530097Z","duration":"PT11.1619925S","correlationId":"3211b92f-9b37-48df-aca3-0890955bd030","providers":[{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"networkSecurityGroups","locations":["westus"]}]}],"dependencies":[],"outputs":{"newNSG":{"type":"Object","value":{"provisioningState":"Succeeded","resourceGuid":"ab5f92eb-bf4a-486e-a902-1fcd0ea20711","securityRules":[],"defaultSecurityRules":[{"name":"AllowVnetInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Inbound"}},{"name":"AllowAzureLoadBalancerInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowAzureLoadBalancerInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - inbound traffic from azure load balancer","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"AzureLoadBalancer","destinationAddressPrefix":"*","access":"Allow","priority":65001,"direction":"Inbound"}},{"name":"DenyAllInBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllInBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all inbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Inbound"}},{"name":"AllowVnetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowVnetOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to all VMs in VNET","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"VirtualNetwork","destinationAddressPrefix":"VirtualNetwork","access":"Allow","priority":65000,"direction":"Outbound"}},{"name":"AllowInternetOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/AllowInternetOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Allow - outbound traffic from all VMs to Internet","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"Internet","access":"Allow","priority":65001,"direction":"Outbound"}},{"name":"DenyAllOutBound","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1/defaultSecurityRules/DenyAllOutBound","etag":"W/\"f879c9e7-18f3-4360-b75c-2c7d6158f82e\"","type":"Microsoft.Network/networkSecurityGroups/defaultSecurityRules","properties":{"provisioningState":"Succeeded","description":"Deny - all outbound traffic","protocol":"*","sourcePortRange":"*","destinationPortRange":"*","sourceAddressPrefix":"*","destinationAddressPrefix":"*","access":"Deny","priority":65500,"direction":"Outbound"}}]}}},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployment_uri000001/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '5629' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:21 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IkRlcGxveW1lbnREZWxldGlvbkpvYi1HTlMtQ0xJOjVGVEVTVDo1RkRFUExPWU1FTlQ6NUZVUklSVDNEMkMzUkVEM1M2T0JGNDR8QTUyNzIxQUVDMjlCQzQ5MS1TSU1QTEU6NUZERVBMT1ktIiwiam9iTG9jYXRpb24iOiJ3ZXN0dXMifQ?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IkRlcGxveW1lbnREZWxldGlvbkpvYi1HTlMtQ0xJOjVGVEVTVDo1RkRFUExPWU1FTlQ6NUZVUklSVDNEMkMzUkVEM1M2T0JGNDR8QTUyNzIxQUVDMjlCQzQ5MS1TSU1QTEU6NUZERVBMT1ktIiwiam9iTG9jYXRpb24iOiJ3ZXN0dXMifQ?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - date: - - Mon, 19 Apr 2021 09:35:36 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_deployment_uri000001/providers/Microsoft.Resources/deployments/?api-version=2018-05-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_lock_commands.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_lock_commands.yaml deleted file mode 100644 index f694fa7a73f..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_lock_commands.yaml +++ /dev/null @@ -1,434 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:16 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockoco22yzq4gfcphgl45vztesaaqzyhvkgxh26po/providers/Microsoft.Authorization/locks/cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock list - Connection: - - keep-alive - ParameterSetName: - - -g --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}' - headers: - cache-control: - - no-cache - content-length: - - '387' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockoco22yzq4gfcphgl45vztesaaqzyhvkgxh26po/providers/Microsoft.Authorization/locks/cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000003"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '402' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"notes7zfe6fzgajajg2v\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockoco22yzq4gfcphgl45vztesaaqzyhvkgxh26po/providers/Microsoft.Authorization/locks/cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockq6mdxcay6atgoipz4jn3vol2xehwb2psukg\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000003\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes6jp7vozgbgpmsd5\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16186' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_lastsuccessful.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_lastsuccessful.yaml deleted file mode 100644 index 59b499ca51e..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_lastsuccessful.yaml +++ /dev/null @@ -1,374 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:29.8782702Z","duration":"PT0S","correlationId":"ec23ac63-f642-44e1-ab55-977ad7e85d43","providers":[],"dependencies":[],"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '542' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:32.7570359Z","duration":"PT2.2292063S","correlationId":"ed2c1f1d-84a7-46d6-b1b6-6dcc4427786e","providers":[],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002/operationStatuses/08585827820149498298?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '525' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827820149498298?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:35.3828241Z","duration":"PT4.8549945S","correlationId":"ed2c1f1d-84a7-46d6-b1b6-6dcc4427786e","providers":[],"dependencies":[],"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '547' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", \"onErrorDeployment\": - {\"type\": \"LastSuccessful\"}, template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '268' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:35:06.7130121Z","duration":"PT0S","correlationId":"e631ac15-8c24-409f-85b9-02ff4ff5cc4c","providers":[],"dependencies":[],"onErrorDeployment":{"type":"LastSuccessful","deploymentName":"azure-cli-deployment000002"},"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '638' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", \"onErrorDeployment\": - {\"type\": \"LastSuccessful\"}, template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '268' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:35:09.3180726Z","duration":"PT1.6130334S","correlationId":"bb19f521-ba37-414b-9b57-f1573ab54c2e","providers":[],"dependencies":[],"onErrorDeployment":{"type":"LastSuccessful","deploymentName":"azure-cli-deployment000002"}}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003/operationStatuses/08585827819777725572?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '621' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819777725572?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_lastsuccessful000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:35:10.5375955Z","duration":"PT2.8325563S","correlationId":"bb19f521-ba37-414b-9b57-f1573ab54c2e","providers":[],"dependencies":[],"onErrorDeployment":{"type":"LastSuccessful","deploymentName":"azure-cli-deployment000002"},"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '643' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_specificdeployment.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_specificdeployment.yaml deleted file mode 100644 index 4003541d8f4..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_group_on_error_deployment_specificdeployment.yaml +++ /dev/null @@ -1,376 +0,0 @@ -interactions: -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:16.506473Z","duration":"PT0S","correlationId":"3828d97e-3253-474f-ac9f-157aee5a90c9","providers":[],"dependencies":[],"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '541' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:16 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", template:{\r\n - \ \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '219' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:19.0450351Z","duration":"PT1.8260474S","correlationId":"3069ea02-4a77-42f9-9d14-cb346ad29c71","providers":[],"dependencies":[]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002/operationStatuses/08585827820282586056?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '525' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827820282586056?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000002","name":"azure-cli-deployment000002","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:20.8575609Z","duration":"PT3.6385732S","correlationId":"3069ea02-4a77-42f9-9d14-cb346ad29c71","providers":[],"dependencies":[],"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '547' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", \"onErrorDeployment\": - {\"type\": \"SpecificDeployment\", \"deploymentName\": \"azure-cli-deployment000002\"}, - template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '324' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment/validate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:53.5794775Z","duration":"PT0S","correlationId":"8433c307-7689-4306-baca-77be0e73e4b7","providers":[],"dependencies":[],"onErrorDeployment":{"type":"SpecificDeployment","deploymentName":"azure-cli-deployment000002"},"validatedResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '642' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 200 - message: OK -- request: - body: "{\"properties\": {\"parameters\": {}, \"mode\": \"Incremental\", \"onErrorDeployment\": - {\"type\": \"SpecificDeployment\", \"deploymentName\": \"azure-cli-deployment000002\"}, - template:{\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"resources\": []\r\n}}}" - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - Content-Length: - - '324' - Content-Type: - - application/json - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Accepted","timestamp":"2021-04-19T09:34:56.3248219Z","duration":"PT1.7403904S","correlationId":"50de2f5f-478a-4362-b83d-8fed547539e3","providers":[],"dependencies":[],"onErrorDeployment":{"type":"SpecificDeployment","deploymentName":"azure-cli-deployment000002"}}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003/operationStatuses/08585827819908931652?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '625' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08585827819908931652?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group deployment create - Connection: - - keep-alive - ParameterSetName: - - -g -n --template-file --rollback-on-error - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_on_error_deployment_specificdeployment000001/providers/Microsoft.Resources/deployments/azure-cli-deployment000003","name":"azure-cli-deployment000003","properties":{"templateHash":"9698913895792634932","mode":"Incremental","provisioningState":"Succeeded","timestamp":"2021-04-19T09:34:58.199433Z","duration":"PT3.6150015S","correlationId":"50de2f5f-478a-4362-b83d-8fed547539e3","providers":[],"dependencies":[],"onErrorDeployment":{"type":"SpecificDeployment","deploymentName":"azure-cli-deployment000002"},"outputResources":[]}}' - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_invoke_action.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_invoke_action.yaml deleted file mode 100644 index 7c74e740297..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_invoke_action.yaml +++ /dev/null @@ -1,4830 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001","name":"cli_test_invoke_action000001","location":"westus","tags":{"product":"azurecli","cause":"automation","test":"test_invoke_action","date":"2024-09-29T08:18:20Z","module":"resource"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '338' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 93B78ABE31B247CAB59EF67BF1337A70 Ref B: TYO201100117011 Ref C: 2024-09-29T08:18:26Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/publishers/Canonical/artifacttypes/vmimage/offers/UbuntuServer/skus/18.04-LTS/versions?$top=1&$orderby=name%20desc&api-version=2017-12-01 - response: - body: - string: "[\r\n {\r\n \"location\": \"westus\",\r\n \"name\": \"18.04.202401161\",\r\n - \ \"id\": \"/Subscriptions/00000000-0000-0000-0000-000000000000/Providers/Microsoft.Compute/Locations/westus/Publishers/Canonical/ArtifactTypes/VMImage/Offers/UbuntuServer/Skus/18.04-LTS/Versions/18.04.202401161\"\r\n - \ }\r\n]" - headers: - cache-control: - - no-cache - content-length: - - '286' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/ListVMImagesVersionsFromLocation3Min;15999,Microsoft.Compute/ListVMImagesVersionsFromLocation30Min;43999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: B4A29243DC834B9DA5678199DEDC910E Ref B: TYO201100116049 Ref C: 2024-09-29T08:18:26Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/publishers/Canonical/artifacttypes/vmimage/offers/UbuntuServer/skus/18.04-LTS/versions/18.04.202401161?api-version=2017-12-01 - response: - body: - string: "{\r\n \"properties\": {\r\n \"hyperVGeneration\": \"V1\",\r\n \"architecture\": - \"x64\",\r\n \"replicaType\": \"Unmanaged\",\r\n \"disallowed\": {\r\n - \ \"vmDiskType\": \"None\"\r\n },\r\n \"automaticOSUpgradeProperties\": - {\r\n \"automaticOSUpgradeSupported\": true\r\n },\r\n \"imageDeprecationStatus\": - {\r\n \"imageState\": \"Active\"\r\n },\r\n \"features\": [\r\n - \ {\r\n \"name\": \"IsAcceleratedNetworkSupported\",\r\n \"value\": - \"True\"\r\n },\r\n {\r\n \"name\": \"DiskControllerTypes\",\r\n - \ \"value\": \"SCSI, NVMe\"\r\n },\r\n {\r\n \"name\": - \"IsHibernateSupported\",\r\n \"value\": \"True\"\r\n }\r\n ],\r\n - \ \"osDiskImage\": {\r\n \"operatingSystem\": \"Linux\",\r\n \"sizeInBytes\": - 32213303808\r\n },\r\n \"dataDiskImages\": []\r\n },\r\n \"location\": - \"westus\",\r\n \"name\": \"18.04.202401161\",\r\n \"id\": \"/Subscriptions/00000000-0000-0000-0000-000000000000/Providers/Microsoft.Compute/Locations/westus/Publishers/Canonical/ArtifactTypes/VMImage/Offers/UbuntuServer/Skus/18.04-LTS/Versions/18.04.202401161\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1025' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetVMImageFromLocation3Min;12999,Microsoft.Compute/GetVMImageFromLocation30Min;73999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 5FE53233B11F4E9E9D18ABD4717A653E Ref B: TYO201151002023 Ref C: 2024-09-29T08:18:28Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts?api-version=2017-10-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 8BA5C8186F13485381F4D0D664F8B410 Ref B: TYO201151006031 Ref C: 2024-09-29T08:18:28Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks?api-version=2017-10-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 122B9004737B4E42AB21BF4CC5B5D7EE Ref B: TYO201100113029 Ref C: 2024-09-29T08:18:29Z' - status: - code: 200 - message: OK -- request: - body: '{"properties": {"template": {"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", "parameters": {"adminPassword": {"type": "securestring", - "metadata": {"description": "Secure adminPassword"}}}, "variables": {}, "resources": - [{"type": "Microsoft.Storage/storageAccounts", "name": "vhdstorage7ab8152019cc85", - "apiVersion": "2015-06-15", "location": "westus", "tags": {}, "dependsOn": [], - "properties": {"accountType": "Premium_LRS"}}, {"name": "cli-test-vm000002VNET", - "type": "Microsoft.Network/virtualNetworks", "location": "westus", "apiVersion": - "2015-06-15", "dependsOn": [], "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "subnets": [{"name": "cli-test-vm000002Subnet", "properties": - {"addressPrefix": "10.0.0.0/24"}}]}}, {"type": "Microsoft.Network/networkSecurityGroups", - "name": "cli-test-vm000002NSG", "apiVersion": "2015-06-15", "location": "westus", - "tags": {}, "dependsOn": []}, {"apiVersion": "2017-10-01", "type": "Microsoft.Network/publicIPAddresses", - "name": "cli-test-vm000002PublicIP", "location": "westus", "tags": {}, "dependsOn": - [], "properties": {"publicIPAllocationMethod": "Static"}, "sku": {"name": "Standard"}}, - {"apiVersion": "2015-06-15", "type": "Microsoft.Network/networkInterfaces", - "name": "cli-test-vm000002VMNic", "location": "westus", "tags": {}, "dependsOn": - ["Microsoft.Network/virtualNetworks/cli-test-vm000002VNET", "Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG", - "Microsoft.Network/publicIpAddresses/cli-test-vm000002PublicIP"], "properties": - {"ipConfigurations": [{"name": "ipconfigcli-test-vm000002", "properties": {"privateIPAllocationMethod": - "Dynamic", "subnet": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"}, - "publicIPAddress": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"}}}], - "networkSecurityGroup": {"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"}}}, - {"apiVersion": "2017-12-01", "type": "Microsoft.Compute/virtualMachines", "name": - "cli-test-vm000002", "location": "westus", "tags": {}, "dependsOn": ["Microsoft.Storage/storageAccounts/vhdstorage7ab8152019cc85", - "Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"], "properties": - {"hardwareProfile": {"vmSize": "Standard_DS1_v2"}, "networkProfile": {"networkInterfaces": - [{"id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic", - "properties": {"deleteOption": null}}]}, "storageProfile": {"osDisk": {"createOption": - "fromImage", "name": "osdisk_7ab8152019", "caching": "ReadWrite", "vhd": {"uri": - "https://vhdstorage7ab8152019cc85.blob.core.windows.net/vhds/osdisk_7ab8152019.vhd"}}, - "imageReference": {"publisher": "Canonical", "offer": "UbuntuServer", "sku": - "18.04-LTS", "version": "latest"}}, "osProfile": {"computerName": "cli-test-vm000002", - "adminUsername": "ubuntu", "adminPassword": "[parameters(''adminPassword'')]"}}}], - "outputs": {}}, "parameters": {"adminPassword": {"value": "Longpassword#1000003"}}, - "mode": "incremental"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - Content-Length: - - '3502' - Content-Type: - - application/json - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_B0HuS0WoDMklGjrhTgCS6CCKlDEsgslu","name":"vm_deploy_B0HuS0WoDMklGjrhTgCS6CCKlDEsgslu","properties":{"templateHash":"9738880249902130230","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Accepted","timestamp":"2024-09-29T08:18:34.2766863Z","duration":"PT0.0006231S","correlationId":"71f41984-77d6-40d9-9688-d4412dea3fbb","providers":[{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]},{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["westus"]},{"resourceType":"networkSecurityGroups","locations":["westus"]},{"resourceType":"publicIPAddresses","locations":["westus"]},{"resourceType":"networkInterfaces","locations":["westus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["westus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage7ab8152019cc85","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"vhdstorage7ab8152019cc85"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}]}}' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_B0HuS0WoDMklGjrhTgCS6CCKlDEsgslu/operationStatuses/08584740089735880005?api-version=2018-05-01 - cache-control: - - no-cache - content-length: - - '2956' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-deployment-engine-version: - - 1.109.0 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: A60EE66D73B44298893DDDC70963A93A Ref B: TYO201151002062 Ref C: 2024-09-29T08:18:30Z' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740089735880005?api-version=2018-05-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:18:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 0698211EBF904BA68ED3190F68472E00 Ref B: TYO201151002062 Ref C: 2024-09-29T08:18:35Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740089735880005?api-version=2018-05-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:19:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: A11AC5DA9C714506B57F2F3E4FE601E4 Ref B: TYO201151002062 Ref C: 2024-09-29T08:19:05Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740089735880005?api-version=2018-05-01 - response: - body: - string: '{"status":"Running"}' - headers: - cache-control: - - no-cache - content-length: - - '20' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:19:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 63AA10CB0D56481E899EDC303B510386 Ref B: TYO201151002062 Ref C: 2024-09-29T08:19:37Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment/operationStatuses/08584740089735880005?api-version=2018-05-01 - response: - body: - string: '{"status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '22' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 0E2EADFE8E0743F9A1226C83B5DA4AC0 Ref B: TYO201151002062 Ref C: 2024-09-29T08:20:08Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/mock-deployment?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Resources/deployments/vm_deploy_B0HuS0WoDMklGjrhTgCS6CCKlDEsgslu","name":"vm_deploy_B0HuS0WoDMklGjrhTgCS6CCKlDEsgslu","properties":{"templateHash":"9738880249902130230","parameters":{"adminPassword":{"type":"SecureString"}},"mode":"Incremental","provisioningState":"Succeeded","timestamp":"2024-09-29T08:19:48.336372Z","duration":"PT1M14.0603088S","correlationId":"71f41984-77d6-40d9-9688-d4412dea3fbb","providers":[{"namespace":"Microsoft.Storage","resourceTypes":[{"resourceType":"storageAccounts","locations":["westus"]}]},{"namespace":"Microsoft.Network","resourceTypes":[{"resourceType":"virtualNetworks","locations":["westus"]},{"resourceType":"networkSecurityGroups","locations":["westus"]},{"resourceType":"publicIPAddresses","locations":["westus"]},{"resourceType":"networkInterfaces","locations":["westus"]}]},{"namespace":"Microsoft.Compute","resourceTypes":[{"resourceType":"virtualMachines","locations":["westus"]}]}],"dependencies":[{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET","resourceType":"Microsoft.Network/virtualNetworks","resourceName":"cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG","resourceType":"Microsoft.Network/networkSecurityGroups","resourceName":"cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","resourceType":"Microsoft.Network/publicIPAddresses","resourceName":"cli-test-vm000002PublicIP"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"},{"dependsOn":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage7ab8152019cc85","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"vhdstorage7ab8152019cc85"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","resourceType":"Microsoft.Network/networkInterfaces","resourceName":"cli-test-vm000002VMNic"}],"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002","resourceType":"Microsoft.Compute/virtualMachines","resourceName":"cli-test-vm000002"}],"outputs":{},"outputResources":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Storage/storageAccounts/vhdstorage7ab8152019cc85"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '4031' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: F900DF7017984ED3B34676B78C8E4E52 Ref B: TYO201151002062 Ref C: 2024-09-29T08:20:08Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002?$expand=instanceView&api-version=2017-12-01 - response: - body: - string: "{\r\n \"name\": \"cli-test-vm000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002\",\r\n - \ \"type\": \"Microsoft.Compute/virtualMachines\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"hardwareProfile\": {\r\n \"vmSize\": - \"Standard_DS1_v2\"\r\n },\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"vmId\": \"cec0e22a-ef0d-4bd6-bb56-a717e577d0f7\",\r\n \"storageProfile\": - {\r\n \"imageReference\": {\r\n \"publisher\": \"Canonical\",\r\n - \ \"offer\": \"UbuntuServer\",\r\n \"sku\": \"18.04-LTS\",\r\n - \ \"version\": \"latest\"\r\n },\r\n \"osDisk\": {\r\n \"osType\": - \"Linux\",\r\n \"name\": \"osdisk_7ab8152019\",\r\n \"createOption\": - \"FromImage\",\r\n \"vhd\": {\r\n \"uri\": \"https://vhdstorage7ab8152019cc85.blob.core.windows.net/vhds/osdisk_7ab8152019.vhd\"\r\n - \ },\r\n \"caching\": \"ReadWrite\",\r\n \"diskSizeGB\": - 30\r\n },\r\n \"dataDisks\": []\r\n },\r\n \"osProfile\": - {\r\n \"computerName\": \"cli-test-vm000002\",\r\n \"adminUsername\": - \"ubuntu\",\r\n \"linuxConfiguration\": {\r\n \"disablePasswordAuthentication\": - false\r\n },\r\n \"secrets\": []\r\n },\r\n \"networkProfile\": - {\"networkInterfaces\":[{\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic\"}]},\r\n - \ \"instanceView\": {\r\n \"computerName\": \"cli-test-vm000002\",\r\n - \ \"osName\": \"ubuntu\",\r\n \"osVersion\": \"18.04\",\r\n \"vmAgent\": - {\r\n \"vmAgentVersion\": \"2.11.1.12\",\r\n \"statuses\": [\r\n - \ {\r\n \"code\": \"ProvisioningState/succeeded\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"Ready\",\r\n - \ \"message\": \"Guest Agent is running\",\r\n \"time\": - \"2024-09-29T08:19:54+00:00\"\r\n }\r\n ],\r\n \"extensionHandlers\": - []\r\n },\r\n \"disks\": [\r\n {\r\n \"name\": \"osdisk_7ab8152019\",\r\n - \ \"statuses\": [\r\n {\r\n \"code\": \"ProvisioningState/succeeded\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"Provisioning - succeeded\",\r\n \"time\": \"2024-09-29T08:19:04.0387112+00:00\"\r\n - \ }\r\n ]\r\n }\r\n ],\r\n \"statuses\": - [\r\n {\r\n \"code\": \"ProvisioningState/succeeded\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"Provisioning - succeeded\",\r\n \"time\": \"2024-09-29T08:19:44.0398194+00:00\"\r\n - \ },\r\n {\r\n \"code\": \"PowerState/running\",\r\n - \ \"level\": \"Info\",\r\n \"displayStatus\": \"VM running\"\r\n - \ }\r\n ]\r\n }\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2708' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/LowCostGetSubscriptionMaximum;23997,Microsoft.Compute/LowCostGetResource;33 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 9CD2E9FF98924768B681C497FC307BF2 Ref B: TYO201100114021 Ref C: 2024-09-29T08:20:09Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic?api-version=2017-10-01 - response: - body: - string: '{"name":"cli-test-vm000002VMNic","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic","etag":"W/\"0c57b7aa-56b3-410f-9f11-75f84107eb97\"","tags":{},"properties":{"provisioningState":"Succeeded","resourceGuid":"72101e2b-c37c-4548-b2d6-652d88c160fe","ipConfigurations":[{"name":"ipconfigcli-test-vm000002","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic/ipConfigurations/ipconfigcli-test-vm000002","etag":"W/\"0c57b7aa-56b3-410f-9f11-75f84107eb97\"","type":"Microsoft.Network/networkInterfaces/ipConfigurations","properties":{"provisioningState":"Succeeded","privateIPAddress":"10.0.0.4","privateIPAllocationMethod":"Dynamic","publicIPAddress":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP"},"subnet":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/virtualNetworks/cli-test-vm000002VNET/subnets/cli-test-vm000002Subnet"},"primary":true,"privateIPAddressVersion":"IPv4"}}],"dnsSettings":{"dnsServers":[],"appliedDnsServers":[],"internalDomainNameSuffix":"jtjxy1zkdpnuhnrcbmfghxk2zc.dx.internal.cloudapp.net"},"macAddress":"00-22-48-0B-7E-FF","enableIPForwarding":false,"networkSecurityGroup":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkSecurityGroups/cli-test-vm000002NSG"},"primary":true,"virtualMachine":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002"}},"type":"Microsoft.Network/networkInterfaces","location":"westus"}' - headers: - cache-control: - - no-cache - content-length: - - '1984' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:10 GMT - etag: - - W/"0c57b7aa-56b3-410f-9f11-75f84107eb97" - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 539c85e1-2470-403a-8975-61d0d17a09d1 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 4860D21C30A24734A651E86227731E06 Ref B: TYO201100113031 Ref C: 2024-09-29T08:20:10Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - vm create - Connection: - - keep-alive - ParameterSetName: - - -g -n --use-unmanaged-disk --image --admin-username --admin-password --authentication-type - --nsg-rule - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP?api-version=2017-10-01 - response: - body: - string: '{"name":"cli-test-vm000002PublicIP","id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/publicIPAddresses/cli-test-vm000002PublicIP","etag":"W/\"ca5fc469-7e1e-4c78-975f-9d08671c6079\"","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded","resourceGuid":"78615a91-32e5-4f85-ac33-81fb2eda1f5a","ipAddress":"13.83.11.6","publicIPAddressVersion":"IPv4","publicIPAllocationMethod":"Static","idleTimeoutInMinutes":4,"ipTags":[],"ipConfiguration":{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Network/networkInterfaces/cli-test-vm000002VMNic/ipConfigurations/ipconfigcli-test-vm000002"}},"type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"}}' - headers: - cache-control: - - no-cache - content-length: - - '830' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:11 GMT - etag: - - W/"ca5fc469-7e1e-4c78-975f-9d08671c6079" - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 3db6f5dc-4dad-47b3-b3f0-bebf7ad10528 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 58FE4B1F2C514D15B43A32D6A7666927 Ref B: TYO201151003052 Ref C: 2024-09-29T08:20:11Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2023-07-03","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03"},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2022-03-02","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"defaultApiVersion":"2022-03-02","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"],"defaultApiVersion":"2022-03-02"},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '97293' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 2175533EB8FA4966B690C42B44AA9573 Ref B: TYO201151003023 Ref C: 2024-09-29T08:20:12Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/powerOff?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/8b15905e-3771-4498-ba05-98384422b455?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948139934554&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-hZvdFs6dEoFghfmRS4WsmTQCAWQCAQcwggHLBggrBgEFBQcBAQSCAb0wggG5MGMGCCsGAQUFBzAChldodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpaW5mcmEvQ2VydHMvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmwxLmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MFMGCCsGAQUFBzAChkdodHRwOi8vY3JsMi5hbWUuZ2JsL2FpYS9DTzFQS0lJTlRDQTAxLkFNRS5HQkxfQU1FJTIwSW5mcmElMjBDQSUyMDA1LmNydDBTBggrBgEFBQcwAoZHaHR0cDovL2NybDMuYW1lLmdibC9haWEvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmw0LmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MB0GA1UdDgQWBBR539nE3pOaYqC09YY5sInoMk2T-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Gw_bpG_e_9GwFwG3ufEno_2uhNfVcWKpuI1D-uMHaH2cd3qLBbk9e_0OkyFLKmAFQUiMPHJDDiz6OY_tlRLMX45nkrwbU1zjLglWIQ5Fl5AqOofxnY9gdBuOd0n_ha2TYS4t4bUVPWVMK88vcG2vjwF5YI-1L5P7twQ7iUnek73wDggTSHGZ9euz4eI4mVgO63Vit8TBhnkZdFYod38XunJequD_mSJT69sRQHeJa4BsihosMSV4EBV4v_SMP0yi4y-HqOZD6gQ3Ti82N5_Wg2O22MqGJEu8w2XyDBNywzR1PorInFGulp0HrlPbv6UIIifFSGZgkK2LwBkcDnObIw&h=-HnkKhONBnE7I1_mjFJN817lMHPTLukOl9K37W9jT88 - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:20:13 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/8b15905e-3771-4498-ba05-98384422b455?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948139934554&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Gw_bpG_e_9GwFwG3ufEno_2uhNfVcWKpuI1D-uMHaH2cd3qLBbk9e_0OkyFLKmAFQUiMPHJDDiz6OY_tlRLMX45nkrwbU1zjLglWIQ5Fl5AqOofxnY9gdBuOd0n_ha2TYS4t4bUVPWVMK88vcG2vjwF5YI-1L5P7twQ7iUnek73wDggTSHGZ9euz4eI4mVgO63Vit8TBhnkZdFYod38XunJequD_mSJT69sRQHeJa4BsihosMSV4EBV4v_SMP0yi4y-HqOZD6gQ3Ti82N5_Wg2O22MqGJEu8w2XyDBNywzR1PorInFGulp0HrlPbv6UIIifFSGZgkK2LwBkcDnObIw&h=-HnkKhONBnE7I1_mjFJN817lMHPTLukOl9K37W9jT88 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1499,Microsoft.Compute/UpdateVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: A85781B147724B1D85A358EC7A519CE2 Ref B: TYO201151003023 Ref C: 2024-09-29T08:20:13Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/8b15905e-3771-4498-ba05-98384422b455?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948139934554&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Gw_bpG_e_9GwFwG3ufEno_2uhNfVcWKpuI1D-uMHaH2cd3qLBbk9e_0OkyFLKmAFQUiMPHJDDiz6OY_tlRLMX45nkrwbU1zjLglWIQ5Fl5AqOofxnY9gdBuOd0n_ha2TYS4t4bUVPWVMK88vcG2vjwF5YI-1L5P7twQ7iUnek73wDggTSHGZ9euz4eI4mVgO63Vit8TBhnkZdFYod38XunJequD_mSJT69sRQHeJa4BsihosMSV4EBV4v_SMP0yi4y-HqOZD6gQ3Ti82N5_Wg2O22MqGJEu8w2XyDBNywzR1PorInFGulp0HrlPbv6UIIifFSGZgkK2LwBkcDnObIw&h=-HnkKhONBnE7I1_mjFJN817lMHPTLukOl9K37W9jT88 - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:20:13.8686584+00:00\",\r\n \"status\": - \"InProgress\",\r\n \"name\": \"8b15905e-3771-4498-ba05-98384422b455\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '134' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14997 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: C18C1ED9BB6B456BB98D0B93A6A0406A Ref B: TYO201151003023 Ref C: 2024-09-29T08:20:14Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/8b15905e-3771-4498-ba05-98384422b455?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948139934554&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Gw_bpG_e_9GwFwG3ufEno_2uhNfVcWKpuI1D-uMHaH2cd3qLBbk9e_0OkyFLKmAFQUiMPHJDDiz6OY_tlRLMX45nkrwbU1zjLglWIQ5Fl5AqOofxnY9gdBuOd0n_ha2TYS4t4bUVPWVMK88vcG2vjwF5YI-1L5P7twQ7iUnek73wDggTSHGZ9euz4eI4mVgO63Vit8TBhnkZdFYod38XunJequD_mSJT69sRQHeJa4BsihosMSV4EBV4v_SMP0yi4y-HqOZD6gQ3Ti82N5_Wg2O22MqGJEu8w2XyDBNywzR1PorInFGulp0HrlPbv6UIIifFSGZgkK2LwBkcDnObIw&h=-HnkKhONBnE7I1_mjFJN817lMHPTLukOl9K37W9jT88 - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:20:13.8686584+00:00\",\r\n \"endTime\": - \"2024-09-29T08:20:24.9627153+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"name\": \"8b15905e-3771-4498-ba05-98384422b455\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '184' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:43 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;42,Microsoft.Compute/GetOperationSubscriptionMaximum;14995 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 4E5E28C4FF3A4100B271E654FF46C24B Ref B: TYO201151003023 Ref C: 2024-09-29T08:20:44Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/8b15905e-3771-4498-ba05-98384422b455?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948139934554&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-hZvdFs6dEoFghfmRS4WsmTQCAWQCAQcwggHLBggrBgEFBQcBAQSCAb0wggG5MGMGCCsGAQUFBzAChldodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpaW5mcmEvQ2VydHMvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmwxLmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MFMGCCsGAQUFBzAChkdodHRwOi8vY3JsMi5hbWUuZ2JsL2FpYS9DTzFQS0lJTlRDQTAxLkFNRS5HQkxfQU1FJTIwSW5mcmElMjBDQSUyMDA1LmNydDBTBggrBgEFBQcwAoZHaHR0cDovL2NybDMuYW1lLmdibC9haWEvQ08xUEtJSU5UQ0EwMS5BTUUuR0JMX0FNRSUyMEluZnJhJTIwQ0ElMjAwNS5jcnQwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcmw0LmFtZS5nYmwvYWlhL0NPMVBLSUlOVENBMDEuQU1FLkdCTF9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3J0MB0GA1UdDgQWBBR539nE3pOaYqC09YY5sInoMk2T-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=Gw_bpG_e_9GwFwG3ufEno_2uhNfVcWKpuI1D-uMHaH2cd3qLBbk9e_0OkyFLKmAFQUiMPHJDDiz6OY_tlRLMX45nkrwbU1zjLglWIQ5Fl5AqOofxnY9gdBuOd0n_ha2TYS4t4bUVPWVMK88vcG2vjwF5YI-1L5P7twQ7iUnek73wDggTSHGZ9euz4eI4mVgO63Vit8TBhnkZdFYod38XunJequD_mSJT69sRQHeJa4BsihosMSV4EBV4v_SMP0yi4y-HqOZD6gQ3Ti82N5_Wg2O22MqGJEu8w2XyDBNywzR1PorInFGulp0HrlPbv6UIIifFSGZgkK2LwBkcDnObIw&h=-HnkKhONBnE7I1_mjFJN817lMHPTLukOl9K37W9jT88 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:20:44 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;41,Microsoft.Compute/GetOperationSubscriptionMaximum;14994 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 20C7EE2A06CD4DCBAC51FDF3E8C4A2C7 Ref B: TYO201151003023 Ref C: 2024-09-29T08:20:44Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2023-07-03","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03"},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2022-03-02","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"defaultApiVersion":"2022-03-02","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"],"defaultApiVersion":"2022-03-02"},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '97293' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:45 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 552ED881E20C48628A245975FC8E7327 Ref B: TYO201100113031 Ref C: 2024-09-29T08:20:45Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/generalize?api-version=2024-07-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:20:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1498,Microsoft.Compute/UpdateVMResource;10 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: D5D2A26538074537B5B5F5562CD0942C Ref B: TYO201100113031 Ref C: 2024-09-29T08:20:46Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2023-07-03","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03"},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2022-03-02","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"defaultApiVersion":"2022-03-02","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"],"defaultApiVersion":"2022-03-02"},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '97293' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:47 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 335C77488A3340A7B1673A78C705A7B4 Ref B: TYO201100117011 Ref C: 2024-09-29T08:20:47Z' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '0' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/deallocate?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/b18ba0f8-3ef6-417f-805c-53c8871673bc?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948492230400&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lcEJOYPzem4htbaTMrd25nbIf3Y9HnJfY_Nnn7HIKR6lqQHNrzDUuPVhGWllj5R68gwXYyAC0Ba9HqZKFGOsBsoJw64A8kItCuYnk4Hu582tZvw2u1dqrPlYu_VXnKH6BBpcjfyHogW_zhQcvAlZ1xHGysK7Q_IbNWNkByvMwln3NKwVVLDie0uNKv1rdt-EotV6kWaTFIpy1BGQbtRvIKoVN0iLcWAHzr4lruMZqoWNxtrFNm1FpYkB-RGlPCQllxbeJbmlEYZZ9YctO17T5580ALujqY_9HOrfI1V3CDKYfZPeawNvBlvO0zVkM8YzcoYyKKGL0m9nZoEdsypF8g&h=Tw_wGKqTzHL2983Qpc7Mf1AsjjPE5So3BIiIhC_cYds - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:20:48 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/b18ba0f8-3ef6-417f-805c-53c8871673bc?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948492386645&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=o6L5ru6cGCWeev90zLHkIVBe_mbXVcBGpijrAJNulYqsBY_c87zZLlBKm_kSDB_9IrRh4J43dxX8aqP1JXMJAY0rB-RPMefHaPsPldIPRdj_AwIzNjpDhqTU_g0Z8ahdS-Cq1HMUzfvP3F0XRG6TME71POoSTn-7F-UrL3gc5jzCs-LJsn0YFdcrP-q9XFvYA0Y9tqCAG-jHVN9U5A8kjOsndbnYwUidEu0AdSijic-EotdyUKhA0d9uE-yHGX2AOMfa0J_lGd9q_JddF_GIiLaoNJmn36NZglN46-b_dRDU4OaeDJJ1l2y-mUems71eGKMEEqAb3qcimoqaky2t1g&h=7cDaeR4__RUHGG41xhEi0LrkowG6UA7oOaMoINXbtSc - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/DeleteVMSubscriptionMaximum;1499,Microsoft.Compute/DeleteVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: AD43A39A104C4B38BDBE91984D21C8D3 Ref B: TYO201100117011 Ref C: 2024-09-29T08:20:48Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/b18ba0f8-3ef6-417f-805c-53c8871673bc?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948492230400&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lcEJOYPzem4htbaTMrd25nbIf3Y9HnJfY_Nnn7HIKR6lqQHNrzDUuPVhGWllj5R68gwXYyAC0Ba9HqZKFGOsBsoJw64A8kItCuYnk4Hu582tZvw2u1dqrPlYu_VXnKH6BBpcjfyHogW_zhQcvAlZ1xHGysK7Q_IbNWNkByvMwln3NKwVVLDie0uNKv1rdt-EotV6kWaTFIpy1BGQbtRvIKoVN0iLcWAHzr4lruMZqoWNxtrFNm1FpYkB-RGlPCQllxbeJbmlEYZZ9YctO17T5580ALujqY_9HOrfI1V3CDKYfZPeawNvBlvO0zVkM8YzcoYyKKGL0m9nZoEdsypF8g&h=Tw_wGKqTzHL2983Qpc7Mf1AsjjPE5So3BIiIhC_cYds - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:20:49.135058+00:00\",\r\n \"status\": - \"InProgress\",\r\n \"name\": \"b18ba0f8-3ef6-417f-805c-53c8871673bc\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '133' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:20:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14999 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: DE97EB559657424882BC09D21D7D46B1 Ref B: TYO201100117011 Ref C: 2024-09-29T08:20:49Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/b18ba0f8-3ef6-417f-805c-53c8871673bc?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948492230400&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lcEJOYPzem4htbaTMrd25nbIf3Y9HnJfY_Nnn7HIKR6lqQHNrzDUuPVhGWllj5R68gwXYyAC0Ba9HqZKFGOsBsoJw64A8kItCuYnk4Hu582tZvw2u1dqrPlYu_VXnKH6BBpcjfyHogW_zhQcvAlZ1xHGysK7Q_IbNWNkByvMwln3NKwVVLDie0uNKv1rdt-EotV6kWaTFIpy1BGQbtRvIKoVN0iLcWAHzr4lruMZqoWNxtrFNm1FpYkB-RGlPCQllxbeJbmlEYZZ9YctO17T5580ALujqY_9HOrfI1V3CDKYfZPeawNvBlvO0zVkM8YzcoYyKKGL0m9nZoEdsypF8g&h=Tw_wGKqTzHL2983Qpc7Mf1AsjjPE5So3BIiIhC_cYds - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:20:49.135058+00:00\",\r\n \"endTime\": - \"2024-09-29T08:21:00.5259161+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"name\": \"b18ba0f8-3ef6-417f-805c-53c8871673bc\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '183' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:21:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;42,Microsoft.Compute/GetOperationSubscriptionMaximum;14997 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 0C7CEE0C8A1D4E22A99523689CA940C1 Ref B: TYO201100117011 Ref C: 2024-09-29T08:21:20Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/b18ba0f8-3ef6-417f-805c-53c8871673bc?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948492386645&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=o6L5ru6cGCWeev90zLHkIVBe_mbXVcBGpijrAJNulYqsBY_c87zZLlBKm_kSDB_9IrRh4J43dxX8aqP1JXMJAY0rB-RPMefHaPsPldIPRdj_AwIzNjpDhqTU_g0Z8ahdS-Cq1HMUzfvP3F0XRG6TME71POoSTn-7F-UrL3gc5jzCs-LJsn0YFdcrP-q9XFvYA0Y9tqCAG-jHVN9U5A8kjOsndbnYwUidEu0AdSijic-EotdyUKhA0d9uE-yHGX2AOMfa0J_lGd9q_JddF_GIiLaoNJmn36NZglN46-b_dRDU4OaeDJJ1l2y-mUems71eGKMEEqAb3qcimoqaky2t1g&h=7cDaeR4__RUHGG41xhEi0LrkowG6UA7oOaMoINXbtSc - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:21:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;41,Microsoft.Compute/GetOperationSubscriptionMaximum;14996 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 30BB364822264674A23E1A7FF326DF9D Ref B: TYO201100117011 Ref C: 2024-09-29T08:21:20Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute","namespace":"Microsoft.Compute","authorizations":[{"applicationId":"60e6cd67-9c8c-4951-9b3c-23c25a2169af","roleDefinitionId":"e4770acb-272e-4dc8-87f3-12f44a612224"},{"applicationId":"a303894e-f1d8-4a37-bf10-67aa654a0596","roleDefinitionId":"903ac751-8ad5-4e5a-bfc2-5e49f450a241"},{"applicationId":"a8b6bf88-1d1a-4626-b040-9a729ea93c65","roleDefinitionId":"274dd4a6-9687-462d-9bee-4f973b07ce46"},{"applicationId":"184909ca-69f1-4368-a6a7-c558ee6eb0bd","roleDefinitionId":"45c8267c-80ba-4b96-9a43-115b8f49fccd"},{"applicationId":"5e5e43d4-54da-4211-86a4-c6e7f3715801","roleDefinitionId":"ffcd6e5b-8772-457d-bb17-89703c03428f"},{"applicationId":"ce6ff14a-7fdc-4685-bbe0-f6afdfcfa8e0","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"372140e0-b3b7-4226-8ef9-d57986796201","roleDefinitionId":"cb17cddc-dbac-4ae0-ae79-8db34eddfca0"},{"applicationId":"579d9c9d-4c83-4efc-8124-7eba65ed3356","roleDefinitionId":"8c99c4ce-d744-4597-a2f0-0a0044d67560"},{"applicationId":"b9a92e36-2cf8-4f4e-bcb3-9d99e00e14ab","roleDefinitionId":"6efa92ca-56b6-40af-a468-5e3d2b5232f0"}],"resourceTypes":[{"resourceType":"availabilitySets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"virtualMachineScaleSets/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2015-06-15","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/extensions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/virtualMachines/networkInterfaces","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"virtualMachineScaleSets/publicIPAddresses","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"locations/operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-10-30-preview","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/vmSizes","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachines","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/virtualMachineScaleSets","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"operations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-03-30","2015-06-15","2015-05-01-preview"]},{"resourceType":"virtualMachines/runCommands","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualMachineScaleSets/applications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"virtualMachines/VMApplications","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"locations/edgeZones","locations":[],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/vmimages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"locations/edgeZones/publishers","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01"]},{"resourceType":"restorePointCollections","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30"]},{"resourceType":"proximityPlacementGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":[]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":[]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sshPublicKeys","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01"],"defaultApiVersion":"2023-09-01","capabilities":"None"},{"resourceType":"capacityReservationGroups","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"capacityReservationGroups/capacityReservations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"virtualMachines/metricDefinitions","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","West US 3","Jio India West","Sweden Central","Qatar Central","Israel - Central","Poland Central","Italy North","Mexico Central","Spain Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2014-04-01"]},{"resourceType":"locations/spotEvictionRates","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/spotPriceHistory","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/recommendations","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01"],"defaultApiVersion":"2023-09-01"},{"resourceType":"locations/sharedGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"locations/communityGalleries","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-03","2024-03-01","2023-09-01","2023-07-03","2023-07-01","2023-03-01","2022-11-01","2022-08-03","2022-08-01","2022-03-03","2022-03-01","2022-01-03","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-09-30","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"sharedVMImages","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"sharedVMImages/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"],"defaultApiVersion":"2017-10-15-preview","capabilities":"None"},{"resourceType":"locations/artifactPublishers","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2017-10-15-preview"]},{"resourceType":"locations/capsoperations","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01","2017-10-15-preview"]},{"resourceType":"galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2023-07-03","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"galleries/images","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/images/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"locations/galleries","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01","2018-06-01"],"defaultApiVersion":"2022-03-03"},{"resourceType":"payloadGroups","locations":["South - Central US","West Europe"],"apiVersions":["2024-03-03","2023-07-03"]},{"resourceType":"galleries/applications","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"galleries/applications/versions","locations":["West - Central US","South Central US","East US 2","Southeast Asia","West Europe","West - US","East US","Canada Central","North Europe","North Central US","Brazil South","UK - West","West India","East Asia","Australia East","Japan East","Korea South","West - US 2","Canada East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01","2019-07-01","2019-03-01"],"defaultApiVersion":"2022-03-03","capabilities":"None"},{"resourceType":"disks","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"snapshots","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diskoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"diskEncryptionSets","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01"],"defaultApiVersion":"2022-03-02","capabilities":"SystemAssignedResourceIdentity"},{"resourceType":"diskAccesses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01"],"defaultApiVersion":"2022-03-02","capabilities":"None"},{"resourceType":"restorePointCollections/restorePoints/diskRestorePoints","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30"],"defaultApiVersion":"2022-03-02"},{"resourceType":"virtualMachineScaleSets/disks","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-03-02","2023-10-02","2023-04-02","2023-01-02","2022-07-02","2022-03-02","2021-12-01","2021-08-01","2021-04-01","2020-12-01","2020-09-30","2020-06-30","2020-05-01","2019-11-01","2019-07-01","2019-03-01","2018-09-30","2018-06-01","2018-04-01","2017-03-30","2016-04-30-preview"],"defaultApiVersion":"2022-03-02","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}]},{"resourceType":"cloudServices","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"cloudServices/roles","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/roleInstances","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/csoperations","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/cloudServiceOsVersions","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"locations/cloudServiceOsFamilies","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2022-09-04","2022-04-04","2021-03-01"],"defaultApiVersion":"2021-03-01"},{"resourceType":"cloudServices/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/roleInstances/networkInterfaces","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"cloudServices/publicIPAddresses","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2021-03-01","2020-10-01-preview"]},{"resourceType":"locations/usages","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","West - Europe","Southeast Asia","Japan East","Japan West","Australia East","Australia - Southeast","Australia Central","Brazil South","South India","Central India","West - India","Canada Central","Canada East","West US 2","UK West","Korea Central","Korea - South","France Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Jio India West","West US 3","Sweden Central","Qatar - Central","Poland Central","Italy North","Israel Central","Spain Central","Mexico - Central","West Central US","North Europe","UK South","East Asia","East US - 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview","2016-03-30","2015-06-15","2015-05-01-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-30"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2017-12-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-12-01"},{"profileVersion":"2020-09-01-hybrid","apiVersion":"2020-06-01"}]},{"resourceType":"images","locations":["Southeast - Asia","East US 2","Central US","West Europe","East US","North Central US","South - Central US","West US","North Europe","East Asia","Brazil South","West US 2","West - Central US","UK West","UK South","Japan East","Japan West","Canada Central","Canada - East","Central India","South India","Australia East","Australia Southeast","Korea - Central","Korea South","West India","France Central","South Africa North","UAE - North","Australia Central","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01","2017-03-30","2016-08-30","2016-04-30-preview"],"defaultApiVersion":"2023-09-01","apiProfiles":[{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-30"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/diagnostics","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/diagnosticOperations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementScores","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/placementRecommendations","locations":["West - Central US","Southeast Asia","East US 2","East US","South Central US","West - Europe","North Europe","West US 2","UK South","Australia East","South India","Central - India","West India","Korea Central","Korea South","Jio India West","Japan - West","Japan East","East Asia","Canada Central","Canada East","South Africa - North","Central US","West US 3","West US","UK West","France Central","UAE - North","Australia Central","Australia Southeast","Switzerland North","Germany - West Central","Norway East","North Central US","Brazil South","Italy North","Israel - Central","Spain Central","Qatar Central","Poland Central","Mexico Central","Sweden - Central","East US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-06-01-preview","2024-03-01-preview","2021-06-01-preview"],"defaultApiVersion":"2024-06-01-preview"},{"resourceType":"locations/logAnalytics","locations":["East - US","East US 2","West US","Central US","North Central US","South Central US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Australia - East","Australia Southeast","Australia Central","Brazil South","South India","Central - India","West India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US STG","East US 2 EUAP","Central US EUAP"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01","2018-06-01","2018-04-01","2017-12-01"]},{"resourceType":"hostGroups","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"hostGroups/hosts","locations":["Central - US","East US 2","West Europe","Southeast Asia","France Central","North Europe","West - US 2","East US","UK South","Japan East","Japan West","East Asia","North Central - US","South Central US","Canada East","Korea Central","Brazil South","UK West","Canada - Central","West US","West Central US","Central India","South India","Australia - Southeast","Korea South","West India","South Africa North","UAE North","Australia - Central","Switzerland North","Germany West Central","Norway East","Australia - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central","East - US 2 EUAP","Central US EUAP","East US STG"],"apiVersions":["2024-07-01","2024-03-01","2023-09-01","2023-07-01","2023-03-01","2022-11-01","2022-08-01","2022-03-01","2021-11-01","2021-07-01","2021-04-01","2021-03-01","2020-12-01","2020-06-01","2019-12-01","2019-07-01","2019-03-01","2018-10-01"],"defaultApiVersion":"2023-09-01","zoneMappings":[{"location":"Australia - East","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Canada - Central","zones":["2","3","1"]},{"location":"Central India","zones":["2","3","1"]},{"location":"Central - US","zones":["2","3","1"]},{"location":"Central US EUAP","zones":["1","2"]},{"location":"East - Asia","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"East - US 2","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"France - Central","zones":["2","3","1"]},{"location":"Germany West Central","zones":["2","3","1"]},{"location":"Israel - Central","zones":["2","3","1"]},{"location":"Italy North","zones":["2","3","1"]},{"location":"Japan - East","zones":["2","3","1"]},{"location":"Korea Central","zones":["2","3","1"]},{"location":"Mexico - Central","zones":["2","3","1"]},{"location":"North Europe","zones":["2","3","1"]},{"location":"Norway - East","zones":["2","3","1"]},{"location":"Poland Central","zones":["2","3","1"]},{"location":"Qatar - Central","zones":["2","3","1"]},{"location":"South Africa North","zones":["2","3","1"]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Southeast Asia","zones":["2","3","1"]},{"location":"Spain - Central","zones":["2","3","1"]},{"location":"Sweden Central","zones":["2","3","1"]},{"location":"Switzerland - North","zones":["2","3","1"]},{"location":"UAE North","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"West Europe","zones":["2","3","1"]},{"location":"West - US 2","zones":["2","3","1"]},{"location":"West US 3","zones":["2","3","1"]}],"capabilities":"None"},{"resourceType":"sharedVMExtensions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"sharedVMExtensions/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","Southeast Asia","East US 2","Central - US","West Europe","East US","North Central US","South Central US","West US","North - Europe","East Asia","Brazil South","West US 2","West Central US","UK West","UK - South","Japan East","Japan West","Canada Central","Canada East","Central India","South - India","Australia East","Australia Southeast","Korea Central","Korea South","West - India","France Central","South Africa North","UAE North","Australia Central","Switzerland - North","Germany West Central","Norway East","Jio India West","West US 3","Sweden - Central","Qatar Central","Poland Central","Italy North","Israel Central","Spain - Central","Mexico Central"],"apiVersions":["2024-03-03","2023-07-03","2022-08-03","2022-03-03","2022-01-03","2021-10-01","2021-07-01","2021-03-01","2020-09-30","2019-12-01"],"defaultApiVersion":"2019-12-01","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"},{"resourceType":"galleries/inVMAccessControlProfiles/versions","locations":["East - US 2 EUAP","Central US EUAP","East US STG","West Central US","South Central - US","East US 2","Southeast Asia","West Europe","West US","East US","Canada - Central","North Europe","North Central US","Brazil South","UK West","West - India","East Asia","Australia East","Japan East","Korea South","West US 2","Canada - East","UK South","Central India","South India","Australia Southeast","Japan - West","Korea Central","France Central","Central US","Australia Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Jio India West","West US 3","Sweden Central","Qatar Central","Poland - Central","Italy North","Israel Central","Spain Central","Mexico Central"],"apiVersions":["2024-03-03"],"defaultApiVersion":"2024-03-03","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '97293' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:21:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: C95197AEFFFC43DCB15F231CFECD8C04 Ref B: TYO201100115051 Ref C: 2024-09-29T08:21:22Z' - status: - code: 200 - message: OK -- request: - body: '{"vhdPrefix": "myPrefix", "destinationContainerName": "container", "overwriteVhds": - "true"}' - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - Content-Length: - - '91' - Content-Type: - - application/json; charset=utf-8 - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - accept-language: - - en-US - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_action000001/providers/Microsoft.Compute/virtualMachines/cli-test-vm000002/capture?api-version=2024-07-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/c684b032-2096-47be-b967-18ac89a15b89?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948840625048&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lKRjVaWkcLgDFptUdOHtBysa8IQ4usfakLaCPszUFiNPWKndHrl2ItBBHtfu_SdpeL7RB2xRl56VPdiGdja6ZPRJ9tVyGn11bSsLA0SMcl7lpE8Q633tl0Ovc4oAithHdV37sNLXMJXD_u5pxTx1IjGEOZQ2jH8hK0oCPiNGgstN4TpbaxmKNQm5iGQXuYjhvrsEglaKhXuYURHPYAdLr9sIbHOcvBMSecMMEFY1R8kDAjR3X939XuEa4YpM9ht8ur39XXrVMe8vF4KVW9qYLyqsbLo9moeFXz4C5TsNDTfGoIhdk63VtzenK9Nm7TwBTcKjTDnI_imax7QvK9VVyA&h=GtdJUpTLWSY7apX4pgyRkc2cjpEddV2A3EpOUPmwXhA - cache-control: - - no-cache - content-length: - - '0' - date: - - Sun, 29 Sep 2024 08:21:23 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/c684b032-2096-47be-b967-18ac89a15b89?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948840625048&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_aHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraWluZnJhL0NSTC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMS5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMi5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsMy5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JshjFodHRwOi8vY3JsNC5hbWUuZ2JsL2NybC9BTUUlMjBJbmZyYSUyMENBJTIwMDUuY3JsMIGdBgNVHSAEgZUwgZIwDAYKKwYBBAGCN3sBATBmBgorBgEEAYI3ewICMFgwVgYIKwYBBQUHAgIwSh5IADMAMwBlADAAMQA5ADIAMQAtADQAZAA2ADQALQA0AGYAOABjAC0AYQAwADUANQAtADUAYgBkAGEAZgBmAGQANQBlADMAMwBkMAwGCisGAQQBgjd7AwEwDAYKKwYBBAGCN3sEAjAfBgNVHSMEGDAWgBR61hmFKHlscXYeYPjzS--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lKRjVaWkcLgDFptUdOHtBysa8IQ4usfakLaCPszUFiNPWKndHrl2ItBBHtfu_SdpeL7RB2xRl56VPdiGdja6ZPRJ9tVyGn11bSsLA0SMcl7lpE8Q633tl0Ovc4oAithHdV37sNLXMJXD_u5pxTx1IjGEOZQ2jH8hK0oCPiNGgstN4TpbaxmKNQm5iGQXuYjhvrsEglaKhXuYURHPYAdLr9sIbHOcvBMSecMMEFY1R8kDAjR3X939XuEa4YpM9ht8ur39XXrVMe8vF4KVW9qYLyqsbLo9moeFXz4C5TsNDTfGoIhdk63VtzenK9Nm7TwBTcKjTDnI_imax7QvK9VVyA&h=GtdJUpTLWSY7apX4pgyRkc2cjpEddV2A3EpOUPmwXhA - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/UpdateVMSubscriptionMaximum;1499,Microsoft.Compute/UpdateVMResource;11 - x-ms-ratelimit-remaining-subscription-global-writes: - - '2999' - x-ms-ratelimit-remaining-subscription-writes: - - '199' - x-msedge-ref: - - 'Ref A: D97D148392034514821CCDC4129D1CC5 Ref B: TYO201100115051 Ref C: 2024-09-29T08:21:23Z' - status: - code: 202 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/c684b032-2096-47be-b967-18ac89a15b89?p=571046f6-b640-41c1-86f7-f9f044b5adf9&api-version=2024-07-01&t=638631948840625048&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lKRjVaWkcLgDFptUdOHtBysa8IQ4usfakLaCPszUFiNPWKndHrl2ItBBHtfu_SdpeL7RB2xRl56VPdiGdja6ZPRJ9tVyGn11bSsLA0SMcl7lpE8Q633tl0Ovc4oAithHdV37sNLXMJXD_u5pxTx1IjGEOZQ2jH8hK0oCPiNGgstN4TpbaxmKNQm5iGQXuYjhvrsEglaKhXuYURHPYAdLr9sIbHOcvBMSecMMEFY1R8kDAjR3X939XuEa4YpM9ht8ur39XXrVMe8vF4KVW9qYLyqsbLo9moeFXz4C5TsNDTfGoIhdk63VtzenK9Nm7TwBTcKjTDnI_imax7QvK9VVyA&h=GtdJUpTLWSY7apX4pgyRkc2cjpEddV2A3EpOUPmwXhA - response: - body: - string: "{\r\n \"startTime\": \"2024-09-29T08:21:23.9638525+00:00\",\r\n \"endTime\": - \"2024-09-29T08:21:24.1669797+00:00\",\r\n \"status\": \"Succeeded\",\r\n - \ \"properties\": {\r\n \"output\": {\r\n \"$schema\": \"http://schema.management.azure.com/schemas/2014-04-01-preview/VM_IP.json\",\r\n - \ \"contentVersion\": \"1.0.0.0\",\r\n \"parameters\": {\r\n \"vmName\": - {\r\n \"type\": \"string\"\r\n },\r\n \"vmSize\": {\r\n \"type\": - \"string\",\r\n \"defaultValue\": \"Standard_DS1_v2\"\r\n },\r\n \"adminUserName\": - {\r\n \"type\": \"string\"\r\n },\r\n \"adminPassword\": {\r\n - \ \"type\": \"securestring\"\r\n },\r\n \"networkInterfaceId\": - {\r\n \"type\": \"string\"\r\n }\r\n },\r\n \"resources\": [\r\n - \ {\r\n \"name\": \"[parameters('vmName')]\",\r\n \"type\": \"Microsoft.Compute/virtualMachines\",\r\n - \ \"location\": \"westus\",\r\n \"apiVersion\": \"2024-07-01\",\r\n - \ \"properties\": {\r\n \"hardwareProfile\": {\r\n \"vmSize\": - \"[parameters('vmSize')]\"\r\n },\r\n \"provisioningState\": - 0,\r\n \"storageProfile\": {\r\n \"osDisk\": {\r\n \"osType\": - \"Linux\",\r\n \"name\": \"myPrefix-osDisk.cec0e22a-ef0d-4bd6-bb56-a717e577d0f7.vhd\",\r\n - \ \"createOption\": \"FromImage\",\r\n \"image\": {\r\n - \ \"uri\": \"https://vhdstorage7ab8152019cc85.blob.core.windows.net/system/Microsoft.Compute/Images/container/myPrefix-osDisk.cec0e22a-ef0d-4bd6-bb56-a717e577d0f7.vhd\"\r\n - \ },\r\n \"vhd\": {\r\n \"uri\": \"https://vhdstorage7ab8152019cc85.blob.core.windows.net/vmcontainer86b986c5-df8b-4c11-8ac2-68c0f2ef3329/osDisk.86b986c5-df8b-4c11-8ac2-68c0f2ef3329.vhd\"\r\n - \ },\r\n \"caching\": \"ReadWrite\"\r\n }\r\n - \ },\r\n \"osProfile\": {\r\n \"computerName\": \"[parameters('vmName')]\",\r\n - \ \"adminUsername\": \"[parameters('adminUsername')]\",\r\n \"adminPassword\": - \"[parameters('adminPassword')]\"\r\n },\r\n \"networkProfile\": - {\"networkInterfaces\":[{\"id\":\"[parameters('networkInterfaceId')]\"}]}\r\n - \ }\r\n }\r\n ]\r\n}\r\n },\r\n \"name\": \"c684b032-2096-47be-b967-18ac89a15b89\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '2045' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:21:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;44,Microsoft.Compute/GetOperationSubscriptionMaximum;14995 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3749' - x-msedge-ref: - - 'Ref A: 593D9734CAD04EC8AC750E6104ABEF50 Ref B: TYO201100115051 Ref C: 2024-09-29T08:21:24Z' - status: - code: 200 - message: '' -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource invoke-action - Connection: - - keep-alive - ParameterSetName: - - --action --ids --request-body - User-Agent: - - AZURECLI/2.64.0 azsdk-python-core/1.28.0 Python/3.10.11 (Windows-10-10.0.22631-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Compute/locations/westus/operations/c684b032-2096-47be-b967-18ac89a15b89?p=571046f6-b640-41c1-86f7-f9f044b5adf9&monitor=true&api-version=2024-07-01&t=638631948840625048&c=MIIHhzCCBm-gAwIBAgITfAWHizdXQLRDd48J5AAABYeLNzANBgkqhkiG9w0BAQsFADBEMRMwEQYKCZImiZPyLGQBGRYDR0JMMRMwEQYKCZImiZPyLGQBGRYDQU1FMRgwFgYDVQQDEw9BTUUgSW5mcmEgQ0EgMDUwHhcNMjQwOTIyMTIwNDAzWhcNMjUwMzIxMTIwNDAzWjBAMT4wPAYDVQQDEzVhc3luY29wZXJhdGlvbnNpZ25pbmdjZXJ0aWZpY2F0ZS5tYW5hZ2VtZW50LmF6dXJlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL3CpUYjuxooJSSrwK19FjzhBOC6rpM2nxEk8ZwpswjmQSs4371lD9cjpzoi1V66izrOAQO5dR4T7CBAdxC_T1La7B_GC0BLToEfDbOMLuij5eJKkGy743BYmNo5FXMcmO2f2PyZA8Q8FMkBzYwcpUlCBt0ofvjmFjb0o14-l_wkV8cVq6NA5rj5vzYRXrcBBDx0DXZzx0ey-DalD8BI5Efxzl0sFnA-qqtfi2y6thqMlNPWuGqiYFNmkko5caGs3a7hQy_mx3XdCDy2aWq0YXIqdiyYCA4MGA_vLQtjCUcC4EnHaLnPm-9OGFhKZHQZ2hQEFIYnnCNvsSRVaHBIatkCAwEAAaOCBHQwggRwMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIhpDjDYTVtHiE8Ys-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-DAOBgNVHQ8BAf8EBAMCBaAwggEmBgNVHR8EggEdMIIBGTCCARWgggERoIIBDYY_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--iBUIWHTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAFQ1zkLj2l7rlyrM4j2l8rtJkHitIxnUkLkyeLRrVxZPkfV1_ABjrmrKVHwks1TT5vv190Z1rSszJ8F3BMbapuqZk7TG_eHqRVKnkNYrwXEAn99VULWloNnmsKbnii5qgA26KvYkNcrxJ4L_9pCm3mT47A_mvHkzKnovgy4XLdvqRPL1QGC_Itw4Y4QCb11tEdDabhFYx2hY0zhM3voH4pW_42NbuG3xwNLFeA2LThOsGcf_4F8bzQ6Pm__uo-XrnBE13ERimgL86M-z9h6W2bQUcKXqAf_RhKjv5ai9GEnITD2aoXBO8tu85DelvTvuH12hn2s2xEeYNMURYXNCzYc&s=lKRjVaWkcLgDFptUdOHtBysa8IQ4usfakLaCPszUFiNPWKndHrl2ItBBHtfu_SdpeL7RB2xRl56VPdiGdja6ZPRJ9tVyGn11bSsLA0SMcl7lpE8Q633tl0Ovc4oAithHdV37sNLXMJXD_u5pxTx1IjGEOZQ2jH8hK0oCPiNGgstN4TpbaxmKNQm5iGQXuYjhvrsEglaKhXuYURHPYAdLr9sIbHOcvBMSecMMEFY1R8kDAjR3X939XuEa4YpM9ht8ur39XXrVMe8vF4KVW9qYLyqsbLo9moeFXz4C5TsNDTfGoIhdk63VtzenK9Nm7TwBTcKjTDnI_imax7QvK9VVyA&h=GtdJUpTLWSY7apX4pgyRkc2cjpEddV2A3EpOUPmwXhA - response: - body: - string: '{"$schema":"http://schema.management.azure.com/schemas/2014-04-01-preview/VM_IP.json","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"vmSize":{"type":"string","defaultValue":"Standard_DS1_v2"},"adminUserName":{"type":"string"},"adminPassword":{"type":"securestring"},"networkInterfaceId":{"type":"string"}},"resources":[{"name":"[parameters(''vmName'')]","type":"Microsoft.Compute/virtualMachines","location":"westus","apiVersion":"2024-07-01","properties":{"hardwareProfile":{"vmSize":"[parameters(''vmSize'')]"},"provisioningState":0,"storageProfile":{"osDisk":{"osType":"Linux","name":"myPrefix-osDisk.cec0e22a-ef0d-4bd6-bb56-a717e577d0f7.vhd","createOption":"FromImage","image":{"uri":"https://vhdstorage7ab8152019cc85.blob.core.windows.net/system/Microsoft.Compute/Images/container/myPrefix-osDisk.cec0e22a-ef0d-4bd6-bb56-a717e577d0f7.vhd"},"vhd":{"uri":"https://vhdstorage7ab8152019cc85.blob.core.windows.net/vmcontainer86b986c5-df8b-4c11-8ac2-68c0f2ef3329/osDisk.86b986c5-df8b-4c11-8ac2-68c0f2ef3329.vhd"},"caching":"ReadWrite"}},"osProfile":{"computerName":"[parameters(''vmName'')]","adminUsername":"[parameters(''adminUsername'')]","adminPassword":"[parameters(''adminPassword'')]"},"networkProfile":{"networkInterfaces":[{"id":"[parameters(''networkInterfaceId'')]"}]}}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1292' - content-type: - - application/json; charset=utf-8 - date: - - Sun, 29 Sep 2024 08:21:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-cache: - - CONFIG_NOCACHE - x-content-type-options: - - nosniff - x-ms-need-to-refresh-epl-cache: - - 'False' - x-ms-ratelimit-remaining-resource: - - Microsoft.Compute/GetOperationResource;43,Microsoft.Compute/GetOperationSubscriptionMaximum;14994 - x-ms-ratelimit-remaining-subscription-global-reads: - - '3748' - x-msedge-ref: - - 'Ref A: 5D0C760548B14B05BE3EB039589D5AE7 Ref B: TYO201100115051 Ref C: 2024-09-29T08:21:24Z' - status: - code: 200 - message: '' -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_locks.yaml deleted file mode 100644 index 5ebbfa519ed..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_locks.yaml +++ /dev/null @@ -1,54 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '14973' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_managementgroups.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_managementgroups.yaml deleted file mode 100644 index 75026783db9..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_list_managementgroups.yaml +++ /dev/null @@ -1,139 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group list - Connection: - - keep-alive - Content-Length: - - '0' - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:50:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:50:14 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups?api-version=2021-04-01 - response: - body: - string: '{"value":[{"id":"/providers/Microsoft.Management/managementGroups/azure-cli-managementb4osamcwmj","type":"Microsoft.Management/managementGroups","name":"azure-cli-managementb4osamcwmj","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"azure-cli-managementb4osamcwmj"}},{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","type":"Microsoft.Management/managementGroups","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}},{"id":"/providers/Microsoft.Management/managementGroups/testMG3","type":"Microsoft.Management/managementGroups","name":"testMG3","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testMG3"}},{"id":"/providers/Microsoft.Management/managementGroups/testMG4","type":"Microsoft.Management/managementGroups","name":"testMG4","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testMG4"}},{"id":"/providers/Microsoft.Management/managementGroups/thomasdolanTestMG","type":"Microsoft.Management/managementGroups","name":"thomasdolanTestMG","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"thomasdolanTestMG"}}],"@nextLink":null}' - headers: - cache-control: - - no-cache - content-length: - - '1294' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:50:15 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 62373061-bcd1-4f5b-acff-e730c6144ee4 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_commands_with_ids.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_commands_with_ids.yaml deleted file mode 100644 index c7f5cce41e9..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_commands_with_ids.yaml +++ /dev/null @@ -1,2398 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001","name":"cli_test_lock_commands_with_ids000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2023-02-27T05:12:22Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - connection: - - close - content-length: - - '308' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "enableDdosProtection": false, "enableVmProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '152' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"cc03bcd8-5819-467d-9a25-1818a3e56153\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \ - \ \"resourceGuid\": \"2df1eba2-6296-4ec5-9b79-a94b982ebaca\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/31af1150-1828-4ba1-b2f5-59292c8adf61?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '653' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 9e22cde9-0d35-4b63-8b99-a11a3f8241af - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/31af1150-1828-4ba1-b2f5-59292c8adf61?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d32c2696-8f55-46e2-923c-302a6c6b3cdb - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"dd2e7648-2f39-41a1-994d-f9eef4caedba\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n\ - \ \"resourceGuid\": \"2df1eba2-6296-4ec5-9b79-a94b982ebaca\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '654' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:35 GMT - etag: - - W/"dd2e7648-2f39-41a1-994d-f9eef4caedba" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f0700233-e4bf-4b79-af5a-1d4375ebe6f5 - status: - code: 200 - message: OK -- request: - body: '{"name": "cli-lock-subnet000003", "properties": {"addressPrefix": "10.0.0.0/16"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - Content-Length: - - '81' - Content-Type: - - application/json - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"f3239b24-d60e-4bf0-9de4-20c649df6210\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/96faed5d-87a9-4ac5-a38e-7ed3c8640772?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '462' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 3c960b69-b037-4c38-b874-259a44f05b5e - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/96faed5d-87a9-4ac5-a38e-7ed3c8640772?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 73e0f9c2-2953-4a87-93ab-86ab40a9c4be - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"92b29353-de07-4d84-b011-7f81599aeebf\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - cache-control: - - no-cache - content-length: - - '463' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:40 GMT - etag: - - W/"92b29353-de07-4d84-b011-7f81599aeebf" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 06296a05-b712-42c0-a81b-84de87b28c40 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-name --resource-type --namespace --parent --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:43 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --ids --query - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31438' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '279' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '295' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31454' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:53 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '343' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '359' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31470' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "somenotes"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '59' - Content-Type: - - application/json - ParameterSetName: - - --ids --notes --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"}' - headers: - cache-control: - - no-cache - content-length: - - '389' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31486' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 05:12:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31190' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 05:12:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"somenotes"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006","type":"Microsoft.Authorization/locks","name":"cli-test-lock000006"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '30830' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:12:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000006?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 05:13:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - -g -o - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_ids000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:13:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_with_resource_id.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_with_resource_id.yaml deleted file mode 100644 index 6f608a5c333..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_lock_with_resource_id.yaml +++ /dev/null @@ -1,1213 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001","name":"cli_test_lock_with_resource_id000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2023-02-27T05:13:37Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '306' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:13:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "enableDdosProtection": false, "enableVmProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '152' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"2709f099-842f-4e18-ae74-81724764598a\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \ - \ \"resourceGuid\": \"77ec97e8-4ffe-433a-91b8-163425bc034c\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/73fe1c39-862c-42f5-8820-80ea9a6bca3d?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '652' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:13:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d945cd82-c774-4d09-b46f-b5c63ababa75 - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/73fe1c39-862c-42f5-8820-80ea9a6bca3d?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f34ee836-acb3-4504-b4d0-6049ea7478df - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-vnet000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002\"\ - ,\r\n \"etag\": \"W/\\\"09b76097-f40b-4142-bc32-2bcf83a39a68\\\"\",\r\n \ - \ \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\"\ - ,\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n\ - \ \"resourceGuid\": \"77ec97e8-4ffe-433a-91b8-163425bc034c\",\r\n \"\ - addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\ - \r\n ]\r\n },\r\n \"subnets\": [],\r\n \"virtualNetworkPeerings\"\ - : [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '653' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:02 GMT - etag: - - W/"09b76097-f40b-4142-bc32-2bcf83a39a68" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - ebc25d14-166c-4a21-9d04-e6e2f0f20a37 - status: - code: 200 - message: OK -- request: - body: '{"name": "cli-lock-subnet000003", "properties": {"addressPrefix": "10.0.0.0/16"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - Content-Length: - - '81' - Content-Type: - - application/json - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"6b65739a-28a9-46a1-bbd4-957a29a2a44c\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/bd426cc2-280e-437c-b434-c382aa316563?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '461' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 5d4c8d51-b7ae-451d-8369-d73d24335c2f - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/bd426cc2-280e-437c-b434-c382aa316563?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - f272fbde-e82d-46c5-b769-b43c2604c5c4 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet subnet create - Connection: - - keep-alive - ParameterSetName: - - -n --address-prefix --vnet-name -g - User-Agent: - - AZURECLI/2.45.0 (AAZ) azsdk-python-core/1.24.0 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli-lock-subnet000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003\"\ - ,\r\n \"etag\": \"W/\\\"26c96c02-0547-4959-af65-c52088815885\\\"\",\r\n \ - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"\ - addressPrefix\": \"10.0.0.0/16\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\ - \r\n}" - headers: - cache-control: - - no-cache - content-length: - - '462' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:08 GMT - etag: - - W/"26c96c02-0547-4959-af65-c52088815885" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c456b5c1-c2a2-4e4a-826c-821a6c40f57f - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n --resource --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '342' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n --resource --lock-type - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '372' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"}' - headers: - cache-control: - - no-cache - content-length: - - '342' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"}' - headers: - cache-control: - - no-cache - content-length: - - '372' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004","type":"Microsoft.Authorization/locks","name":"cli-test-lock000004"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '31156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/providers/Microsoft.Authorization/locks/cli-test-lock000004?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 05:14:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.StoragePool/diskPools/disk-pool-BEZ/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.KeyVault/vaults/bez-kv/providers/Microsoft.Authorization/locks/delete-kv","type":"Microsoft.Authorization/locks","name":"delete-kv"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/bez-id/providers/Microsoft.Authorization/locks/delete-id","type":"Microsoft.Authorization/locks","name":"delete-id"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.Compute/images/bez-image/providers/Microsoft.Authorization/locks/r","type":"Microsoft.Authorization/locks","name":"r"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"contact - zhwen"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-sentinel-221011134813007315/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fypurview/providers/Microsoft.Purview/accounts/fypurview/providers/Microsoft.Authorization/locks/d","type":"Microsoft.Authorization/locks","name":"d"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgxp7uwuibs5/providers/microsoft.storage/storageAccounts/clitestzrwidkqplnw3jmz4z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgawbqkye7l4/providers/microsoft.storage/storageAccounts/clitestlsjx67ujuhjr7zkah/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/lightning/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbo2ure7pgp/providers/microsoft.storage/storageAccounts/clitestsnv7joygpazk23npj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgy6swh3vebl/providers/microsoft.storage/storageAccounts/clitestaxq4uhxp4axa3uagg/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/delete-lock","type":"Microsoft.Authorization/locks","name":"delete-lock"},{"properties":{"level":"CanNotDelete","notes":"for - Asir"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE","type":"Microsoft.Authorization/locks","name":"No-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgh5duq2f6uh/providers/microsoft.storage/storageAccounts/clitest2vjedutxs37ymp4ni/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg46ia57tmnz/providers/microsoft.storage/storageAccounts/clitestdlxtp24ycnjl3jui2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/galleryappaccount/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/queuetest/providers/Microsoft.Storage/storageAccounts/qteststac/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-test-rg/providers/Microsoft.Authorization/locks/test-databricks","type":"Microsoft.Authorization/locks","name":"test-databricks"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Authorization/locks/1","type":"Microsoft.Authorization/locks","name":"1"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hang-rg/providers/Microsoft.Storage/storageAccounts/hangstorage/providers/Microsoft.Authorization/locks/2","type":"Microsoft.Authorization/locks","name":"2"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgephuyzwt3d/providers/microsoft.storage/storageAccounts/clitesturpy433yg4s3cpou6/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbcjpbfrgst/providers/microsoft.storage/storageAccounts/clitest7y3z5tzoevqexrwmb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/shiying-rg/providers/Microsoft.Storage/storageAccounts/shiyingsa/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgn6glpfa25c/providers/microsoft.storage/storageAccounts/clitestgt3fjzabc7taya5zo/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jlrgtest1/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":"ddos"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testrg2/providers/Microsoft.Authorization/locks/testrg2","type":"Microsoft.Authorization/locks","name":"testrg2"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgiudkrkxpl4/providers/microsoft.storage/storageAccounts/clitestbiegaggvgwivkqyyi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg2/providers/Microsoft.Authorization/locks/rg2","type":"Microsoft.Authorization/locks","name":"rg2"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg/providers/Microsoft.Authorization/locks/delete","type":"Microsoft.Authorization/locks","name":"delete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgl6l3rg6atb/providers/microsoft.storage/storageAccounts/clitest4sjmiwke5nz3f67pu/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptzwacrnwa/providers/microsoft.storage/storageAccounts/clitestivtrt5tp624n63ast/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005","type":"Microsoft.Authorization/locks","name":"cli-test-lock000005"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-file-handle-rg/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest74vl6rwuxl5fbuklw/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgbbt37xr2le/providers/microsoft.storage/storageAccounts/clitest5frikrzhxwryrkfel/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgu7jwflzo6g/providers/microsoft.storage/storageAccounts/clitestwqzjytdeun46rphfd/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhiyihuang-rg-euap-east/providers/Microsoft.Authorization/locks/nodelete","type":"Microsoft.Authorization/locks","name":"nodelete"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhwen-domain/providers/Microsoft.Authorization/locks/zhwen","type":"Microsoft.Authorization/locks","name":"zhwen"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rggrglkh7zr7/providers/microsoft.storage/storageAccounts/clitest2f63bh43aix4wcnlh/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgeghfcmpfiw/providers/microsoft.storage/storageAccounts/clitestkoxtfkf67yodgckyb/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":"Prevent - this resource group from being edited"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzurePowerShellLiveTest/providers/Microsoft.Authorization/locks/ReadOnlyLock","type":"Microsoft.Authorization/locks","name":"ReadOnlyLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/test_cli_loadbalance/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgovptfsocfg/providers/microsoft.storage/storageAccounts/clitestz72bbbbv2cio2pmom/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock","type":"Microsoft.Authorization/locks","name":"lock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock","type":"Microsoft.Authorization/locks","name":"salock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgzjznhcqaoh/providers/microsoft.storage/storageAccounts/clitestwznnmnfot33xjztmk/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE","type":"Microsoft.Authorization/locks","name":"NO-DELETE"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgaz5eufnx7d/providers/microsoft.storage/storageAccounts/clitestkj3e2bodztqdfqsa2/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgp6ikwpcsq7/providers/microsoft.storage/storageAccounts/clitestggvkyebv5o55dhakj/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrc4sjsrzt4/providers/microsoft.storage/storageAccounts/clitest63b5vtkhuf7auho6z/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl","type":"Microsoft.Authorization/locks","name":"azurecliedge-dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ethan-rg/providers/Microsoft.Authorization/locks/daily-work","type":"Microsoft.Authorization/locks","name":"daily-work"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4yns4yxisb/providers/microsoft.storage/storageAccounts/clitestyt6rxgad3kebqzh26/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Authorization/locks/dl","type":"Microsoft.Authorization/locks","name":"dl"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/privatepackage/providers/Microsoft.Authorization/locks/private - package","type":"Microsoft.Authorization/locks","name":"private package"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgv3m577d7ho/providers/microsoft.storage/storageAccounts/clitestej2fvhoj3zogyp5e7/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/del","type":"Microsoft.Authorization/locks","name":"del"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete","type":"Microsoft.Authorization/locks","name":"antidelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgltfej7yr4u/providers/microsoft.storage/storageAccounts/clitestwvsg2uskf4i7vjfto/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l","type":"Microsoft.Authorization/locks","name":"l"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1","type":"Microsoft.Authorization/locks","name":"l1"},{"properties":{"level":"CanNotDelete","notes":"for - customer issue repro (snowflake)"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete","type":"Microsoft.Authorization/locks","name":"DontDelete"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg23akmjlz2r/providers/microsoft.storage/storageAccounts/clitestdmmxq6bklh35yongi/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgdc25pvki6m/providers/microsoft.storage/storageAccounts/clitestkxu4ahsqaxv42cyyf/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgekim5ct43n/providers/microsoft.storage/storageAccounts/clitest6jusqp4qvczw52pql/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"ReadOnly","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qinkai-test/providers/Microsoft.Storage/storageAccounts/qinkaiwu/providers/Microsoft.Authorization/locks/privatepackage","type":"Microsoft.Authorization/locks","name":"privatepackage"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw","type":"Microsoft.Authorization/locks","name":"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw"},{"properties":{"level":"CanNotDelete","notes":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Authorization/locks/DoNotDelete","type":"Microsoft.Authorization/locks","name":"DoNotDelete"},{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me","type":"Microsoft.Authorization/locks","name":"dont_delete_me"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgghkyqf7pb5/providers/microsoft.storage/storageAccounts/clitestpuea6vlqwxw6ihiws/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgrli6qx2bll/providers/microsoft.storage/storageAccounts/clitest2kskuzyfvkqd7xx4y/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg4chnkoo7ql/providers/microsoft.storage/storageAccounts/clitestmevgvn7p2e7ydqz44/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock","type":"Microsoft.Authorization/locks","name":"AzureBackupProtectionLock"},{"properties":{"level":"CanNotDelete","notes":"noteslwo5pwze65snyu6"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lockgfjwap5dza42yxmg4ibvxl7coas3gif7cvyzjj/providers/Microsoft.Authorization/locks/cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5","type":"Microsoft.Authorization/locks","name":"cli-test-lockikxplguvr63fppjodp55tqktsuav2gyamw5"}]}' - headers: - cache-control: - - no-cache - content-length: - - '30813' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 27 Feb 2023 05:14:25 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --resource - User-Agent: - - AZURECLI/2.45.0 azsdk-python-azure-mgmt-resource/21.1.0b1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_lock_with_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli-lock-vnet000002/subnets/cli-lock-subnet000003/providers/Microsoft.Authorization/locks/cli-test-lock000005?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 27 Feb 2023 05:14:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_managedappdef_inline.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_managedappdef_inline.yaml deleted file mode 100644 index 81d09371b56..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_managedappdef_inline.yaml +++ /dev/null @@ -1,414 +0,0 @@ -interactions: -- request: - body: '{"location": "eastus", "properties": {"lockLevel": "None", "displayName": - "test_appdef000003", "authorizations": [{"principalId": "5e91139a-c94b-462e-a6ff-1ee95e8aac07", - "roleDefinitionId": "8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}], "description": - "test_appdef_123", "mainTemplate": "{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\r\n \"contentVersion\": - \"1.0.0.0\",\r\n \"parameters\": {\r\n \"adminUsername\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"User name - for the Virtual Machine.\"\r\n }\r\n },\r\n \"adminPassword\": {\r\n \"type\": - \"securestring\",\r\n \"metadata\": {\r\n \"description\": \"Password - for the Virtual Machine.\"\r\n }\r\n },\r\n \"dnsLabelPrefix\": {\r\n \"type\": - \"string\",\r\n \"metadata\": {\r\n \"description\": \"Unique DNS - Name for the Public IP used to access the Virtual Machine.\"\r\n }\r\n },\r\n \"ubuntuOSVersion\": - {\r\n \"type\": \"string\",\r\n \"defaultValue\": \"16.04.0-LTS\",\r\n \"allowedValues\": - [\r\n \"12.04.5-LTS\",\r\n \"14.04.5-LTS\",\r\n \"15.10\",\r\n \"16.04.0-LTS\"\r\n ],\r\n \"metadata\": - {\r\n \"description\": \"The Ubuntu version for the VM. This will pick - a fully patched image of this given Ubuntu version.\"\r\n }\r\n }\r\n },\r\n \"variables\": - {\r\n \"storageAccountName\": \"[concat(uniquestring(resourceGroup().id), - ''salinuxvm'')]\",\r\n \"imagePublisher\": \"Canonical\",\r\n \"imageOffer\": - \"UbuntuServer\",\r\n \"nicName\": \"myVMNic\",\r\n \"addressPrefix\": - \"10.0.0.0/16\",\r\n \"subnetName\": \"Subnet\",\r\n \"subnetPrefix\": - \"10.0.0.0/24\",\r\n \"storageAccountType\": \"Standard_LRS\",\r\n \"publicIPAddressName\": - \"myPublicIP\",\r\n \"publicIPAddressType\": \"Dynamic\",\r\n \"vmName\": - \"MyUbuntuVM\",\r\n \"vmSize\": \"Standard_A1\",\r\n \"virtualNetworkName\": - \"MyVNET\",\r\n \"vnetID\": \"[resourceId(''Microsoft.Network/virtualNetworks'',variables(''virtualNetworkName''))]\",\r\n \"subnetRef\": - \"[concat(variables(''vnetID''),''/subnets/'',variables(''subnetName''))]\"\r\n },\r\n \"resources\": - [\r\n {\r\n \"type\": \"Microsoft.Storage/storageAccounts\",\r\n \"name\": - \"[variables(''storageAccountName'')]\",\r\n \"apiVersion\": \"2017-06-01\",\r\n \"location\": - \"westus\",\r\n \"sku\": {\r\n \"name\": \"[variables(''storageAccountType'')]\"\r\n },\r\n \"kind\": - \"Storage\",\r\n \"properties\": {}\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/publicIPAddresses\",\r\n \"name\": - \"[variables(''publicIPAddressName'')]\",\r\n \"location\": \"westus\",\r\n \"properties\": - {\r\n \"publicIPAllocationMethod\": \"[variables(''publicIPAddressType'')]\",\r\n \"dnsSettings\": - {\r\n \"domainNameLabel\": \"[parameters(''dnsLabelPrefix'')]\"\r\n }\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/virtualNetworks\",\r\n \"name\": - \"[variables(''virtualNetworkName'')]\",\r\n \"location\": \"westus\",\r\n \"properties\": - {\r\n \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"[variables(''addressPrefix'')]\"\r\n ]\r\n },\r\n \"subnets\": - [\r\n {\r\n \"name\": \"[variables(''subnetName'')]\",\r\n \"properties\": - {\r\n \"addressPrefix\": \"[variables(''subnetPrefix'')]\"\r\n }\r\n }\r\n ]\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-04-01\",\r\n \"type\": \"Microsoft.Network/networkInterfaces\",\r\n \"name\": - \"[variables(''nicName'')]\",\r\n \"location\": \"westus\",\r\n \"dependsOn\": - [\r\n \"[resourceId(''Microsoft.Network/publicIPAddresses/'', variables(''publicIPAddressName''))]\",\r\n \"[resourceId(''Microsoft.Network/virtualNetworks/'', - variables(''virtualNetworkName''))]\"\r\n ],\r\n \"properties\": {\r\n \"ipConfigurations\": - [\r\n {\r\n \"name\": \"ipconfig1\",\r\n \"properties\": - {\r\n \"privateIPAllocationMethod\": \"Dynamic\",\r\n \"publicIPAddress\": - {\r\n \"id\": \"[resourceId(''Microsoft.Network/publicIPAddresses'',variables(''publicIPAddressName''))]\"\r\n },\r\n \"subnet\": - {\r\n \"id\": \"[variables(''subnetRef'')]\"\r\n }\r\n }\r\n }\r\n ]\r\n }\r\n },\r\n {\r\n \"apiVersion\": - \"2017-03-30\",\r\n \"type\": \"Microsoft.Compute/virtualMachines\",\r\n \"name\": - \"[variables(''vmName'')]\",\r\n \"location\": \"westus\",\r\n \"dependsOn\": - [\r\n \"[resourceId(''Microsoft.Storage/storageAccounts/'', variables(''storageAccountName''))]\",\r\n \"[resourceId(''Microsoft.Network/networkInterfaces/'', - variables(''nicName''))]\"\r\n ],\r\n \"properties\": {\r\n \"hardwareProfile\": - {\r\n \"vmSize\": \"[variables(''vmSize'')]\"\r\n },\r\n \"osProfile\": - {\r\n \"computerName\": \"[variables(''vmName'')]\",\r\n \"adminUsername\": - \"[parameters(''adminUsername'')]\",\r\n \"adminPassword\": \"[parameters(''adminPassword'')]\"\r\n },\r\n \"storageProfile\": - {\r\n \"imageReference\": {\r\n \"publisher\": \"[variables(''imagePublisher'')]\",\r\n \"offer\": - \"[variables(''imageOffer'')]\",\r\n \"sku\": \"[parameters(''ubuntuOSVersion'')]\",\r\n \"version\": - \"latest\"\r\n },\r\n \"osDisk\": {\r\n \"createOption\": - \"FromImage\"\r\n },\r\n \"dataDisks\": [\r\n {\r\n \"diskSizeGB\": - \"1023\",\r\n \"lun\": 0,\r\n \"createOption\": \"Empty\"\r\n }\r\n ]\r\n },\r\n \"networkProfile\": - {\r\n \"networkInterfaces\": [\r\n {\r\n \"id\": - \"[resourceId(''Microsoft.Network/networkInterfaces'',variables(''nicName''))]\"\r\n }\r\n ]\r\n },\r\n \"diagnosticsProfile\": - {\r\n \"bootDiagnostics\": {\r\n \"enabled\": \"true\",\r\n \"storageUri\": - \"[concat(reference(concat(''Microsoft.Storage/storageAccounts/'', variables(''storageAccountName'')), - ''2016-01-01'').primaryEndpoints.blob)]\"\r\n }\r\n }\r\n }\r\n }\r\n ],\r\n \"outputs\": - {\r\n \"hostname\": {\r\n \"type\": \"string\",\r\n \"value\": - \"[reference(variables(''publicIPAddressName'')).dnsSettings.fqdn]\"\r\n },\r\n \"sshCommand\": - {\r\n \"type\": \"string\",\r\n \"value\": \"[concat(''ssh '', parameters(''adminUsername''), - ''@'', reference(variables(''publicIPAddressName'')).dnsSettings.fqdn)]\"\r\n }\r\n }\r\n}", - "createUiDefinition": "{\r\n \"$schema\": \"https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#\",\r\n \"handler\": - \"Microsoft.Compute.MultiVm\",\r\n \"version\": \"0.1.2-preview\",\r\n \"parameters\": - {\r\n \"basics\": [\r\n {\r\n \"name\": \"adminUsername\",\r\n \"type\": - \"Microsoft.Compute.UserNameTextBox\",\r\n \"label\": \"Admin - Username\",\r\n \"toolTip\": \"Admin user name for the virtual - machine\",\r\n \"osPlatform\": \"Linux\"\r\n },\r\n {\r\n \"name\": - \"adminPassword\",\r\n \"type\": \"Microsoft.Common.PasswordBox\",\r\n \"label\": - {\r\n \"password\": \"Admin Password\",\r\n \"confirmPassword\": - \"Confirm password\"\r\n },\r\n \"toolTip\": \"Admin - password for the virtual machine\",\r\n \"constraints\": {\r\n \"required\": - true,\r\n \"regex\": \"^(?:(?=.*[a-z])(?:(?=.*[A-Z])(?=.*[\\\\d\\\\W])|(?=.*\\\\W)(?=.*\\\\d))|(?=.*\\\\W)(?=.*[A-Z])(?=.*\\\\d)).{6,72}$\",\r\n \"validationMessage\": - \"The password must be between 6 and 72 characters long, and contain characters - from at least 3 of the following groups: uppercase characters, lowercase characters, - numbers, and special characters.\"\r\n },\r\n \"options\": - {\r\n \"hideConfirmation\": false\r\n }\r\n }\r\n ],\r\n \"steps\": - [\r\n {\r\n \"name\": \"ipConfig\",\r\n \"label\": - \"IP Config\",\r\n \"subLabel\": {\r\n \"preValidation\": - \"Configure the public IP address\",\r\n \"postValidation\": - \"Done\"\r\n },\r\n \"bladeTitle\": \"IP Settings\",\r\n \"elements\": - [\r\n {\r\n \"name\": \"ipCombo\",\r\n \"type\": - \"Microsoft.Network.PublicIpAddressCombo\",\r\n \"label\": - {\r\n \"publicIpAddress\": \"Public IP address\",\r\n \"domainNameLabel\": - \"Domain name label\"\r\n },\r\n \"toolTip\": - {\r\n \"publicIpAddress\": \"\",\r\n \"domainNameLabel\": - \"\"\r\n },\r\n \"defaultValue\": - {\r\n \"publicIpAddressName\": \"myPublicIP\"\r\n },\r\n \"constraints\": - {\r\n \"required\": {\r\n \"domainNameLabel\": - true\r\n }\r\n },\r\n \"options\": - {\r\n \"hideNone\": true,\r\n \"hideDomainNameLabel\": - false,\r\n \"hideExisting\": true\r\n },\r\n \"visible\": - true\r\n }\r\n ]\r\n }\r\n ],\r\n \"outputs\": - {\r\n \"adminUsername\": \"[basics(''adminUsername'')]\",\r\n \"adminPassword\": - \"[basics(''adminPassword'')]\",\r\n \"dnsLabelPrefix\": \"[steps(''ipConfig'').ipCombo.domainNameLabel]\",\r\n \"applianceResourceNameForMainTemplate\": - \"testappname\"\r\n }\r\n }\r\n}"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - managedapp definition create - Connection: - - keep-alive - Content-Length: - - '10710' - Content-Type: - - application/json - ParameterSetName: - - -n --create-ui-definition --main-template --display-name --description -l - -a --lock-level -g - User-Agent: - - AZURECLI/2.49.0 azsdk-python-azure-mgmt-resource/23.0.1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002?api-version=2019-07-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002","name":"testappdefname000002","type":"microsoft.solutions/applicationdefinitions","location":"eastus","systemData":{"createdBy":"aaa@foo.com","createdByType":"User","createdAt":"2023-06-05T08:27:22.2199212Z","lastModifiedBy":"aaa@foo.com","lastModifiedByType":"User","lastModifiedAt":"2023-06-05T08:27:22.2199212Z"},"properties":{"authorizations":[{"principalId":"5e91139a-c94b-462e-a6ff-1ee95e8aac07","roleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}],"isEnabled":true,"lockLevel":"None","displayName":"test_appdef000003","description":"test_appdef_123","artifacts":[{"name":"ApplicationResourceTemplate","type":"Template","uri":"https://amastorageprodus.blob.core.windows.net/applicationdefinitions/8C96E_0B1F64711BF04DDAAEC3CB9272F09590_FF8E816D2CCBD7CCFEDBE9DACEABFB6EAF2E6CCA0B53CFFED51E66FB5D6A363B/7605f6436106441a8d56f26bc6dd1ab9/applicationResourceTemplate.json"},{"name":"CreateUiDefinition","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/CreateUiDefinition?api-version=2017-09-01"},{"name":"MainTemplateParameters","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/MainTemplateParameters?api-version=2017-09-01"}],"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '1726' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 05 Jun 2023 08:27:24 GMT - etag: - - '"3a012fb4-0000-0100-0000-647d9c6d0000"' - expires: - - '-1' - mise-correlation-id: - - 2f7be41a-cb0d-4465-be5c-159ae4c161ee - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-providerhub-traffic: - - 'True' - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - managedapp definition list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.49.0 azsdk-python-azure-mgmt-resource/23.0.1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions?api-version=2019-07-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002","name":"testappdefname000002","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","properties":{"authorizations":[{"principalId":"5e91139a-c94b-462e-a6ff-1ee95e8aac07","roleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}],"isEnabled":true,"lockLevel":"None","displayName":"test_appdef000003","description":"test_appdef_123","artifacts":[{"name":"ApplicationResourceTemplate","type":"Template","uri":"https://amastorageprodus.blob.core.windows.net/applicationdefinitions/8C96E_0B1F64711BF04DDAAEC3CB9272F09590_FF8E816D2CCBD7CCFEDBE9DACEABFB6EAF2E6CCA0B53CFFED51E66FB5D6A363B/7605f6436106441a8d56f26bc6dd1ab9/applicationResourceTemplate.json"},{"name":"CreateUiDefinition","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/CreateUiDefinition?api-version=2017-09-01"},{"name":"MainTemplateParameters","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/MainTemplateParameters?api-version=2017-09-01"}]}}]}' - headers: - cache-control: - - no-cache - content-length: - - '1462' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 05 Jun 2023 08:27:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-original-request-ids: - - 6405e603-84db-4adb-b277-284362382966 - - ee85be06-fd78-4b9f-b87d-eb595703306a - - 6986d3c1-9b69-4cb6-88ce-8570bffbdee1 - - fe545ae0-98be-48dc-a5bc-06143a8d22da - - d73c7ea5-fb3d-4721-8466-adcfb627735b - - a506cd07-2b05-484f-91b1-1061c6dd9830 - - 3ee42741-eebc-4793-8949-62366cd0870d - - 10cb0e84-8a33-4336-9866-965a554422c1 - - 30971f09-07e8-4238-be5d-707b37c9dcdc - - 1d1bb5d1-34f6-4d22-8185-89b2c2c46d8e - - f7c688f1-4886-4fe5-81cf-192f756c971b - - d5cb97cb-39b1-422c-8a07-d48f76a5ec0a - - 02570ff1-11cd-4408-9f1f-f17dce01d09e - - 6c5dfda2-3654-4604-b4e1-8466fe9ec30a - - bc341fc4-a542-4c20-8d23-1db9696363f3 - - 55fe60bc-e397-4f3a-8af2-55bed4eb99e1 - - 287444a4-a676-4843-ae79-850579196116 - - 1aa92e2f-94f2-4313-9aa2-74ad391ea8d8 - - be67b26f-d5ec-47e4-b88e-d4478306129a - - acb5e62e-a1ce-4433-b11c-c5ea5c841908 - - 9583dd0e-17f5-4fe1-a6ea-20c2897f7619 - - be1b5f65-77c9-4b2e-9dc9-69bafb04ab9c - - a93628db-2ea9-4405-8064-255b1ba96c46 - - 3e3b9535-bca8-47a7-9acc-7ce7e63483e5 - - 948f1b8e-53ac-4b9b-9004-ec63255de86d - - 9d042b6a-ee69-4c5c-bd05-eee87e8c2916 - - e9e8182d-4104-4130-a129-aac92463e1ce - - caf7d4ea-27a1-415c-81a8-1612039d046f - - a29813cb-8541-4854-867b-a9e17b502fe6 - - c50e0048-a451-41cd-a41a-34607d5d2dbc - - 5093b5a6-965f-4d54-ad2a-b27e07ce2ae3 - - 0d43bd7a-5981-47c8-a75a-912eee25750f - - 05103ebb-3d9e-4df2-b028-082940273b7e - - 0ef587e7-f3af-48cd-b3d3-8752949bc9dd - - 2b0cd232-71af-448f-a228-cbe0cbd4c531 - - ae17cfba-169d-4c5b-a10c-b8571f639228 - - d626f90f-2b6b-4af6-8f86-04fafaba4cef - - 9cdc110c-e94a-4684-b4f6-3ce7acd9b1f1 - - fd6d2cd3-e1e1-4bc1-9795-2fb56377f4f9 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - managedapp definition show - Connection: - - keep-alive - ParameterSetName: - - --ids - User-Agent: - - AZURECLI/2.49.0 azsdk-python-azure-mgmt-resource/23.0.1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002?api-version=2019-07-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002","name":"testappdefname000002","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","properties":{"authorizations":[{"principalId":"5e91139a-c94b-462e-a6ff-1ee95e8aac07","roleDefinitionId":"8e3af657-a8ff-443c-a75c-2fe8c4bcb635"}],"isEnabled":true,"lockLevel":"None","displayName":"test_appdef000003","description":"test_appdef_123","artifacts":[{"name":"ApplicationResourceTemplate","type":"Template","uri":"https://amastorageprodus.blob.core.windows.net/applicationdefinitions/8C96E_0B1F64711BF04DDAAEC3CB9272F09590_FF8E816D2CCBD7CCFEDBE9DACEABFB6EAF2E6CCA0B53CFFED51E66FB5D6A363B/7605f6436106441a8d56f26bc6dd1ab9/applicationResourceTemplate.json"},{"name":"CreateUiDefinition","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/CreateUiDefinition?api-version=2017-09-01"},{"name":"MainTemplateParameters","type":"Custom","uri":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002/applicationArtifacts/MainTemplateParameters?api-version=2017-09-01"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '1450' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 05 Jun 2023 08:27:28 GMT - etag: - - '"3a012fb4-0000-0100-0000-647d9c6d0000"' - expires: - - '-1' - mise-correlation-id: - - c0c4746c-37b6-441e-8cd0-3132d17cce51 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-providerhub-traffic: - - 'True' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - managedapp definition delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.49.0 azsdk-python-azure-mgmt-resource/23.0.1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions/testappdefname000002?api-version=2019-07-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 05 Jun 2023 08:27:32 GMT - expires: - - '-1' - mise-correlation-id: - - 9a70c20e-c4aa-4bd9-b812-742fde8f58ff - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-providerhub-traffic: - - 'True' - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - managedapp definition list - Connection: - - keep-alive - ParameterSetName: - - -g - User-Agent: - - AZURECLI/2.49.0 azsdk-python-azure-mgmt-resource/23.0.1 Python/3.10.9 (Windows-10-10.0.22621-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg000001/providers/Microsoft.Solutions/applicationDefinitions?api-version=2019-07-01 - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 05 Jun 2023 08:27:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-original-request-ids: - - 2c06c5d2-db4a-4671-9f1b-fb42d44a531c - - 865bf2b4-eae2-4118-aca4-6eaee271582d - - 2e11879e-81b3-468e-afe1-d1cb2b1b24d2 - - 5d029b70-06af-4770-a503-e0ecf178ab45 - - 4a3cab8b-115d-4fd9-9a28-2fc8b6d241f3 - - c77ef008-5e12-4855-a755-62c447f6c3e1 - - 4c555948-64ba-4f4a-8854-a57399e9069e - - 2068ed25-83cf-4644-8cac-0ce6f7e24e98 - - cfd6a95b-c836-4e97-83e1-daa58359adec - - d8274e38-cdf7-4f2d-b8e9-d205c7bcae07 - - abd89cc3-cd78-4d7c-aa39-167adc11e29e - - 9bc72d09-6a4f-495e-bf2c-195f826523e0 - - ae89f8d6-8c20-48a6-bf0d-c0e5bb40a8fc - - a7f6d02f-0a62-492b-a362-edaa52a025e7 - - 5ea59b32-5223-42cb-8088-c2260567e4e2 - - dea0e87a-3173-4c58-a868-a9c686afd087 - - 42902d00-bf8f-4b78-b44c-b792d80161cd - - ae544a39-7f04-498a-83ff-13920cbd7c45 - - 37d81a24-4cac-4105-9437-82e91eb0cac3 - - 036df184-3ff8-4cea-9585-c34d00f13665 - - f371cedd-7af2-4d9c-9c29-79c7e8be4c45 - - a5d71f03-b9a0-4222-b22e-821df56add2b - - 9c7743de-24a4-4e64-b5ca-01d16b37e044 - - c4d84e8a-466d-485e-aeac-d721672dd5b2 - - c0a2ad62-e9dd-49be-8876-1bfd9d3c7e94 - - 78675d6a-b845-47bc-93fa-0e2302b9cb0e - - 568ce6b9-e2e4-49d7-8e53-ce657ee6c1d9 - - cd9f75f4-d785-4112-a615-a7acc215656e - - 44c96d4a-e70c-491c-a41f-b35be785cced - - ef4713b7-172e-43bb-b2c8-4f5a16943d06 - - 4902b5bc-b301-44ea-84ed-8212cc281596 - - 6c1a6b55-ab0b-4cb6-a0c3-2b933a2e55ce - - 0aa59ef0-2bd4-4330-9fd9-b77637b6fea6 - - 37429170-13ee-4979-8aba-8d6905a04643 - - dc5846c3-53f2-438e-b846-332b09baa247 - - 62ee0319-8550-4957-aca7-f8172c351eae - - 600f8932-dfdb-4eb4-a59a-ce03302ba2b7 - - 197a4844-9c92-4ad8-a008-919da713e42b - - 16c6a03d-c72f-402a-ada0-08955ac9e663 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_operation.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_operation.yaml deleted file mode 100644 index 332fcfdfd06..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_operation.yaml +++ /dev/null @@ -1,2311 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.compute?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: '{"displayName":"Microsoft Compute","operations":[{"name":"Microsoft.Compute/register/action","displayName":"Register - Subscription for Compute","description":"Registers Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null},{"name":"Microsoft.Compute/unregister/action","displayName":"Unregister - Subscription for Compute","description":"Unregisters Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null}],"resourceTypes":[{"name":"availabilitySets","displayName":"Availability - Sets","operations":[{"name":"Microsoft.Compute/availabilitySets/read","displayName":"Get - Availablity Set","description":"Get the properties of an availability set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/write","displayName":"Create - or Update Availability Set","description":"Creates a new availability set - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/delete","displayName":"Delete - Availability Set","description":"Deletes the availability set","origin":"user,system","properties":null}]},{"name":"availabilitySets/vmSizes","displayName":"Virtual - Machine Size for Availability set","operations":[{"name":"Microsoft.Compute/availabilitySets/vmSizes/read","displayName":"List - Virtual Machine Sizes for Availability Set","description":"List available - sizes for creating or updating a virtual machine in the availability set","origin":"user,system","properties":null}]},{"name":"virtualMachines","displayName":"Virtual - Machines","operations":[{"name":"Microsoft.Compute/virtualMachines/read","displayName":"Get - Virtual Machine","description":"Get the properties of a virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/write","displayName":"Create - or Update Virtual Machine","description":"Creates a new virtual machine or - updates an existing virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/delete","displayName":"Delete - Virtual Machine","description":"Deletes the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/start/action","displayName":"Start - Virtual Machine","description":"Starts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/powerOff/action","displayName":"Power - Off Virtual Machine","description":"Powers off the virtual machine. Note that - the virtual machine will continue to be billed.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reapply/action","displayName":"Reapply - a virtual machine''s current model","description":"Reapplies a virtual machine''s - current model","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine","description":"Redeploys virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/restart/action","displayName":"Restart - Virtual Machine","description":"Restarts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs","description":"Retrieves boot diagnostic logs - blob URIs","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine","description":"Powers off the virtual machine and releases - the compute resources","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/generalize/action","displayName":"Generalize - Virtual Machine","description":"Sets the virtual machine state to Generalized - and prepares the virtual machine for capture","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/capture/action","displayName":"Capture - Virtual Machine","description":"Captures the virtual machine by copying virtual - hard disks and generates a template that can be used to create similar virtual - machines","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommand/action","displayName":"Run - Command on Virtual Machine","description":"Executes a predefined script on - the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/convertToManagedDisks/action","displayName":"Convert - Virtual Machine disks to Managed Disks","description":"Converts the blob based - disks of the virtual machine to managed disks","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/performMaintenance/action","displayName":"Perform - Maintenance Redeploy","description":"Performs Maintenance Operation on the - VM.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine","description":"Reimages virtual machine which is using differencing - disk.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/login/action","displayName":"Log - in to Virtual Machine","description":"Log in to a virtual machine as a regular - user","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/loginAsAdmin/action","displayName":"Log - in to Virtual Machine as administrator","description":"Log in to a virtual - machine with Windows administrator or Linux root user privileges","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/installPatches/action","displayName":"Install - OS update patches on virtual machine","description":"Installs available OS - update patches on the virtual machine based on parameters provided by user. - Assessment results containing list of available patches will also get refreshed - as part of this.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/assessPatches/action","displayName":"Assess - virtual machine for available OS update patches","description":"Assesses the - virtual machine and finds list of available OS update patches for it.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/cancelPatchInstallation/action","displayName":"Cancel - install OS update patch operation on virtual machine","description":"Cancels - the ongoing install OS update patch operation on the virtual machine.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine","description":"Simulates the eviction of - spot Virtual Machine","origin":"user,system","properties":null}]},{"name":"virtualMachines/instanceView","displayName":"Virtual - Machine Instance View","operations":[{"name":"Microsoft.Compute/virtualMachines/instanceView/read","displayName":"Get - Virtual Machine Instance View","description":"Gets the detailed runtime status - of the virtual machine and its resources","origin":"user,system","properties":null}]},{"name":"virtualMachines/vmSizes","displayName":"Virtual - Machine Size","operations":[{"name":"Microsoft.Compute/virtualMachines/vmSizes/read","displayName":"Lists - Available Virtual Machine Sizes","description":"Lists available sizes the - virtual machine can be updated to","origin":"user,system","properties":null}]},{"name":"images","displayName":"Images","operations":[{"name":"Microsoft.Compute/images/read","displayName":"Get - Image","description":"Get the properties of the Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/write","displayName":"Create - or Update Image","description":"Creates a new Image or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/delete","displayName":"Delete - Image","description":"Deletes the image","origin":"user,system","properties":null}]},{"name":"restorePointCollections","displayName":"Restore - Point Collections","operations":[{"name":"Microsoft.Compute/restorePointCollections/read","displayName":"Get - Restore Point Collection","description":"Get the properties of a restore point - collection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/write","displayName":"Create - or Update Restore Point Collection","description":"Creates a new restore point - collection or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/delete","displayName":"Delete - Restore Point Collection","description":"Deletes the restore point collection - and contained restore points","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints","displayName":"Restore - Points","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/read","displayName":"Get - Restore Point","description":"Get the properties of a restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/write","displayName":"Create - Restore Point","description":"Creates a new restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/delete","displayName":"Delete - Restore Point","description":"Deletes the restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/retrieveSasUris/action","displayName":"Get - Restore Point along with blob SAS URIs","description":"Get the properties - of a restore point along with blob SAS URIs","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Metric Definitions","description":"Reads Virtual Machine Metric - Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"virtualMachines/extensions","displayName":"Virtual - Machine Extensions","operations":[{"name":"Microsoft.Compute/virtualMachines/extensions/read","displayName":"Get - Virtual Machine Extension","description":"Get the properties of a virtual - machine extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/write","displayName":"Create - or Update Virtual Machine Extension","description":"Creates a new virtual - machine extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/delete","displayName":"Delete - Virtual Machine Extension","description":"Deletes the virtual machine extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions","displayName":"Virtual - Machine Scale Set Extensions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/read","displayName":"Get - Virtual Machine Scale Set Extension","description":"Gets the properties of - a Virtual Machine Scale Set Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/write","displayName":"Create - or Update Virtual Machine Scale Set Extension","description":"Creates a new - Virtual Machine Scale Set Extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/delete","displayName":"Delete - Virtual Machine Scale Set Extension","description":"Deletes the Virtual Machine - Scale Set Extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets","displayName":"Virtual - Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/read","displayName":"Get - Virtual Machine Scale Set","description":"Get the properties of a Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/write","displayName":"Create - or Update Virtual Machine Scale Set","description":"Creates a new Virtual - Machine Scale Set or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete","displayName":"Delete - Virtual Machine Scale Set","description":"Deletes the Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete/action","displayName":"Delete - Virtual Machines in a Virtual Machine Scale Set","description":"Deletes the - instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/start/action","displayName":"Start - Virtual Machine Scale Set","description":"Starts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/powerOff/action","displayName":"Power - Off Virtual Machine Scale Set","description":"Powers off the instances of - the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/restart/action","displayName":"Restart - Virtual Machine Scale Set","description":"Restarts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/deallocate/action","displayName":"Deallocate - Virtual Machine Scale Set","description":"Powers off and releases the compute - resources for the instances of the Virtual Machine Scale Set ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/manualUpgrade/action","displayName":"Manual - Upgrade Virtual Machine Scale Set","description":"Manually updates instances - to latest model of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimage/action","displayName":"Reimage - Virtual Machine Scale Set","description":"Reimages the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine Scale Set","description":"Reimages all disks - (OS Disk and Data Disks) for the instances of a Virtual Machine Scale Set - ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/redeploy/action","displayName":"Redeploy - Virtual Machine Scale Set","description":"Redeploy the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine Scale Set","description":"Performs - planned maintenance on the instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/scale/action","displayName":"Verify - Scaling of Virtual Machine Scale Set","description":"Verify if an existing - Virtual Machine Scale Set can Scale In/Scale Out to specified instance count","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/forceRecoveryServiceFabricPlatformUpdateDomainWalk/action","displayName":"Manually - walk platform update domains in a service fabric Virtual Machine Scale Set","description":"Manually - walk the platform update domains of a service fabric Virtual Machine Scale - Set to finish a pending update that is stuck","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/osRollingUpgrade/action","displayName":"Upgrades - OS on Virtual Machine Scale Set instances to the latest available Platform - Image OS version.","description":"Starts a rolling upgrade to move all Virtual - Machine Scale Set instances to the latest available Platform Image OS version.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/setOrchestrationServiceState/action","displayName":"Sets - the state of an orchestration service in a Virtual Machine Scale Set.","description":"Sets - the state of an orchestration service based on the action provided in operation - input.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/action","displayName":"Cancel - Virtual Machine Scale Set Rolling Upgrade operation","description":"Cancels - the rolling upgrade of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/instanceView","displayName":"Virtual - Machine Scale Set Instance View","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/instanceView/read","displayName":"Get - Virtual Machine Scale Set Instance View","description":"Gets the instance - view of the Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/skus","displayName":"Virtual - Machine Scale Set SKU","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/skus/read","displayName":"List - SKUs for Virtual Machine Scale Set","description":"Lists the valid SKUs for - an existing Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Scalet Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Scalet Set Metric Definitions","description":"Reads Virtual - Machine Scalet Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of inbound flows (traffic - going into the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out Total","displayName":"Network Out Total","displayDescription":"The number - of bytes out on all network interfaces by the Virtual Machine(s) (Outgoing - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]}]}}}]},{"name":"virtualMachineScaleSets/rollingUpgrades","displayName":"Virtual - Machine Scale Sets Rolling Upgrades","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/read","displayName":"Gets - the latest Rolling Upgrade status for a Virtual Machine Scale Set","description":"Get - latest Rolling Upgrade status for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/osUpgradeHistory","displayName":"Virtual - Machine Scale Set OS Upgrade History","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/osUpgradeHistory/read","displayName":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","description":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines","displayName":"Virtual - Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read","displayName":"Gets - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write","displayName":"Updates - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Updates - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/delete","displayName":"Delete - Virtual Machine in a Virtual Machine Scale Set","description":"Delete a specific - Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/start/action","displayName":"Start - Virtual Machine in a Virtual Machine Scale Set","description":"Starts a Virtual - Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/powerOff/action","displayName":"Power - off Virtual Machine in a Virtual Machine Scale Set","description":"Powers - Off a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/restart/action","displayName":"Restart - Virtual Machine instance in a Virtual Machine Scale Set","description":"Restarts - a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine in a Virtual Machine Scale Set","description":"Powers off - and releases the compute resources for a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine in a Virtual Machine Scale Set","description":"Reimages a - Virtual Machine instance in a Virtual Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Reimages - all disks (OS Disk and Data Disks) for Virtual Machine instance in a Virtual - Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine instance in a Virtual Machine Scale Set","description":"Redeploys - a Virtual Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs of Virtual Machine instance in a Virtual Machine - Scale Set","description":"Retrieves boot diagnostic logs blob URIs of Virtual - Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine instance in a Virtual Machine Scale - Set","description":"Performs planned maintenance on a Virtual Machine instance - in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommand/action","displayName":"Run - Command on a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Executes - a predefined script on a Virtual Machine instance in a Virtual Machine Scale - Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine in Virtual Machine Scale Set","description":"Simulates - the eviction of spot Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/instanceView","displayName":"Instance - View of Virtual Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read","displayName":"Gets - Instance View of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the instance view of a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine in Scale Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine in Scale Set Metric Definitions","description":"Reads Virtual - Machine in Scale Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"locations/vmSizes","displayName":"Virtual - Machine Sizes","operations":[{"name":"Microsoft.Compute/locations/vmSizes/read","displayName":"List - Available Virtual Machine Sizes in Location","description":"Lists available - virtual machine sizes in a location","origin":"user,system","properties":null}]},{"name":"locations/operations","displayName":"Operation","operations":[{"name":"Microsoft.Compute/locations/operations/read","displayName":"Get - Operation","description":"Gets the status of an asynchronous operation","origin":"user,system","properties":null}]},{"name":"locations/usages","displayName":"Usage - Metrics","operations":[{"name":"Microsoft.Compute/locations/usages/read","displayName":"Get - Usage Metrics","description":"Gets service limits and current usage quantities - for the subscription''s compute resources in a location","origin":"user,system","properties":null}]},{"name":"locations/runCommands","displayName":"Run - Commands","operations":[{"name":"Microsoft.Compute/locations/runCommands/read","displayName":"Lists - Run Commands","description":"Lists available run commands in location","origin":"user,system","properties":null}]},{"name":"operations","displayName":"Available - Compute Operations","operations":[{"name":"Microsoft.Compute/operations/read","displayName":"List - Available Compute Operations","description":"Lists operations available on - Microsoft.Compute resource provider","origin":"user,system","properties":null}]},{"name":"skus","displayName":"Skus","operations":[{"name":"Microsoft.Compute/skus/read","displayName":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","description":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","origin":"user,system","properties":null}]},{"name":"disks","displayName":"Disks","operations":[{"name":"Microsoft.Compute/disks/read","displayName":"Get - Disk","description":"Get the properties of a Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/write","displayName":"Create - or Update Disk","description":"Creates a new Disk or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/delete","displayName":"Delete - Disk","description":"Deletes the Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/beginGetAccess/action","displayName":"Get - Disk SAS URI","description":"Get the SAS URI of the Disk for blob access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/endGetAccess/action","displayName":"Revoke - Disk SAS URI","description":"Revoke the SAS URI of the Disk","origin":"user,system","properties":null}]},{"name":"snapshots","displayName":"Snapshots","operations":[{"name":"Microsoft.Compute/snapshots/read","displayName":"Get - Snapshot","description":"Get the properties of a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/write","displayName":"Create - or Update Snapshot","description":"Create a new Snapshot or update an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/delete","displayName":"Delete - Snapshot","description":"Delete a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/beginGetAccess/action","displayName":"Get - Snapshot SAS URI","description":"Get the SAS URI of the Snapshot for blob - access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/endGetAccess/action","displayName":"Revoke - Snapshot SAS URI","description":"Revoke the SAS URI of the Snapshot","origin":"user,system","properties":null}]},{"name":"locations/diskOperations","displayName":"DiskOperation","operations":[{"name":"Microsoft.Compute/locations/diskOperations/read","displayName":"Get - Disk Operation","description":"Gets the status of an asynchronous Disk operation","origin":"user,system","properties":null}]},{"name":"sharedVMImages","displayName":"SharedVMImages","operations":[{"name":"Microsoft.Compute/sharedVMImages/read","displayName":"Get - SharedVMImage","description":"Get the properties of a SharedVMImage","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/write","displayName":"Create - or Update SharedVMImage","description":"Creates a new SharedVMImage or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/delete","displayName":"Delete - SharedVMImage","description":"Deletes the SharedVMImage","origin":"user,system","properties":null}]},{"name":"sharedVMImages/versions","displayName":"SharedVMImageVersions","operations":[{"name":"Microsoft.Compute/sharedVMImages/versions/read","displayName":"Get - SharedVMImageVersion","description":"Get the properties of a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/write","displayName":"Create - or Update SharedVMImageVersion","description":"Create a new SharedVMImageVersion - or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/delete","displayName":"Delete - SharedVMImageVersion","description":"Delete a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/replicate/action","displayName":"Replicate - SharedVMImageVersion","description":"Replicate a SharedVMImageVersion to target - regions","origin":"user,system","properties":null}]},{"name":"locations/capsOperations","displayName":"CapsOperation","operations":[{"name":"Microsoft.Compute/locations/capsOperations/read","displayName":"Get - Caps Operation","description":"Gets the status of an asynchronous Caps operation","origin":"user,system","properties":null}]},{"name":"locations/publishers","displayName":"Publishers","operations":[{"name":"Microsoft.Compute/locations/publishers/read","displayName":"Get - Publisher","description":"Get the properties of a Publisher","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers","displayName":"Platform - Image Offers","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/read","displayName":"Get - Platform Image Offer","description":"Get the properties of a Platform Image - Offer","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus","displayName":"Platform - Image Skus","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/read","displayName":"Get - Platform Image Sku","description":"Get the properties of a Platform Image - Sku","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus/versions","displayName":"Platform - Image Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/versions/read","displayName":"Get - Platform Image Version","description":"Get the properties of a Platform Image - Version","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types","displayName":"VMExtension - Types","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/read","displayName":"Get - VMExtension Type","description":"Get the properties of a VMExtension Type","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types/versions","displayName":"VMExtension - Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/versions/read","displayName":"Get - VMExtension Version","description":"Get the properties of a VMExtension Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/networkInterfaces","displayName":"Network - interfaces of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/networkInterfaces/read","displayName":"Get - all network interfaces of a Virtual Machine Scale Set","description":"Get - properties of all network interfaces of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/publicIPAddresses","displayName":"Public - IP addresses of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/publicIPAddresses/read","displayName":"Get - all public IP addresses of a Virtual Machine Scale Set","description":"Get - properties of all public IP addresses of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces","displayName":"Network - interfaces of a virtual machine created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read","displayName":"Get - one or all network interfaces of a virtual machine created using Virtual Machine - Scale Set","description":"Get properties of one or all network interfaces - of a virtual machine created using Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses","displayName":"IP - address created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read","displayName":"Get - public IP address created using Virtual Machine Scale Set. Virtual Machine - Scale Set can create at most one public IP per ipconfiguration (private IP)","description":"Get - properties of public IP address created using Virtual Machine Scale Set. Virtual - Machine Scale Set can create at most one public IP per ipconfiguration (private - IP)","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations","displayName":"IP - configurations of a network interface created using Virtual Machine Scale - Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read","displayName":"Get - one or all IP configurations of a network interface created using Virtual - Machine Scale Set. IP configurations represent private IPs","description":"Get - properties of one or all IP configurations of a network interface created - using Virtual Machine Scale Set. IP configurations represent private IPs","origin":"user,system","properties":null}]},{"name":"galleries","displayName":"Galleries","operations":[{"name":"Microsoft.Compute/galleries/read","displayName":"Get - Gallery","description":"Gets the properties of Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/write","displayName":"Create - or Update Gallery","description":"Creates a new Gallery or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/delete","displayName":"Delete - Gallery","description":"Deletes the Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/share/action","displayName":"Share - Gallery","description":"Shares a Gallery to different scopes","origin":"user,system","properties":null}]},{"name":"galleries/images","displayName":"GalleryImages","operations":[{"name":"Microsoft.Compute/galleries/images/read","displayName":"Get - Gallery Image","description":"Gets the properties of Gallery Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/write","displayName":"Create - or Update Gallery Image","description":"Creates a new Gallery Image or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/delete","displayName":"Delete - Gallery Image","description":"Deletes the Gallery Image","origin":"user,system","properties":null}]},{"name":"galleries/images/versions","displayName":"GalleryImageVersions","operations":[{"name":"Microsoft.Compute/galleries/images/versions/read","displayName":"Get - Gallery Image Version","description":"Gets the properties of Gallery Image - Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/write","displayName":"Create - or Update Gallery Image Version","description":"Creates a new Gallery Image - Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/delete","displayName":"Delete - Gallery Image Version","description":"Deletes the Gallery Image Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine Scale Set log definitions","description":"Gets the available - logs for Virtual Machine Scale Sets.","origin":"system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - Virtual Machine Scale Set.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine Scale set.","origin":"system","properties":null}]},{"name":"locations/logAnalytics","displayName":"Log - Analytics","operations":[{"name":"Microsoft.Compute/locations/logAnalytics/getRequestRateByInterval/action","displayName":"Create - logs to show total requests by time interval","description":"Create logs to - show total requests by time interval to aid throttling diagnostics.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/locations/logAnalytics/getThrottledRequests/action","displayName":"Create - logs to show aggregates of throttled requests","description":"Create logs - to show aggregates of throttled requests grouped by ResourceName, OperationName, - or the applied Throttle Policy.","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine log definitions","description":"Gets the available logs for - Virtual Machine.","origin":"system","properties":{"serviceSpecification":{"logSpecifications":[{"name":"SoftwareUpdates","displayName":"SoftwareUpdates"},{"name":"SoftwareUpdateProfile","displayName":"SoftwareUpdateProfile"}]}}}]},{"name":"virtualMachines/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - diagnostic setting","description":"Gets the diagnostic setting for the Virtual - Machine.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine.","origin":"system","properties":null}]},{"name":"hostGroups","displayName":"Host - Groups","operations":[{"name":"Microsoft.Compute/hostGroups/read","displayName":"Get - Host Group","description":"Get the properties of a host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/write","displayName":"Create - or Update Host Group","description":"Creates a new host group or updates an - existing host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/delete","displayName":"Delete - Host Group","description":"Deletes the host group","origin":"user,system","properties":null}]},{"name":"proximityPlacementGroups","displayName":"Proximity - Placement Groups","operations":[{"name":"Microsoft.Compute/proximityPlacementGroups/read","displayName":"Get - Proximity Placement Group","description":"Get the Properties of a Proximity - Placement Group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/write","displayName":"Create - or Update Proximity Placement Group","description":"Creates a new Proximity - Placement Group or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/delete","displayName":"Delete - Proximity Placement Group","description":"Deletes the Proximity Placement - Group","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/vmSizes","displayName":"Virtual - Machine Size for Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/vmSizes/read","displayName":"List - Virtual Machine Sizes for a Virtual Machine Scale Set","description":"List - available sizes for creating or updating a virtual machine in the Virtual - Machine Scale Set","origin":"user,system","properties":null}]},{"name":"hostGroups/hosts","displayName":"Hosts","operations":[{"name":"Microsoft.Compute/hostGroups/hosts/read","displayName":"Get - Host","description":"Get the properties of a host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/write","displayName":"Create - or Update Host","description":"Creates a new host or updates an existing host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/delete","displayName":"Delete - Host","description":"Deletes the host","origin":"user,system","properties":null}]},{"name":"diskEncryptionSets","displayName":"DiskEncryptionSets","operations":[{"name":"Microsoft.Compute/diskEncryptionSets/read","displayName":"Get - disk encryption set","description":"Get the properties of a disk encryption - set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/write","displayName":"Create - or update disk encryption set","description":"Create a new disk encryption - set or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/delete","displayName":"Delete - disk encryption set","description":"Delete a disk encryption set","origin":"user,system","properties":null}]},{"name":"locations/vsmOperations","displayName":"Operation - for Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","operations":[{"name":"Microsoft.Compute/locations/vsmOperations/read","displayName":"Get - Operation for Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","description":"Gets the status of an asynchronous operation for - Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null}]},{"name":"galleries/applications","displayName":"GalleryApplications","operations":[{"name":"Microsoft.Compute/galleries/applications/read","displayName":"Get - Gallery Application","description":"Gets the properties of Gallery Application","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/write","displayName":"Create - or Update Gallery Application","description":"Creates a new Gallery Application - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/delete","displayName":"Delete - Gallery Application","description":"Deletes the Gallery Application","origin":"user,system","properties":null}]},{"name":"galleries/applications/versions","displayName":"GalleryApplicationVersions","operations":[{"name":"Microsoft.Compute/galleries/applications/versions/read","displayName":"Get - Gallery Application Version","description":"Gets the properties of Gallery - Application Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/write","displayName":"Create - or Update Gallery Application Version","description":"Creates a new Gallery - Application Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/delete","displayName":"Delete - Gallery Application Version","description":"Deletes the Gallery Application - Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions/roles","displayName":"VirtualMachineScaleSet - Extensions Role","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/read","displayName":"Get - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Gets the properties of a Role in - a Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/write","displayName":"Update - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Updates the properties of an existing - Role in a Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","origin":"user,system","properties":null}]},{"name":"sshPublicKeys","displayName":"SSH - Public Keys","operations":[{"name":"Microsoft.Compute/sshPublicKeys/read","displayName":"Get - SSH Public Key","description":"Get the properties of an SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/write","displayName":"Create - or Update SSH Public Key","description":"Creates a new SSH public key or updates - an existing SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/delete","displayName":"Delete - SSH Public Key","description":"Deletes the SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/generateKeyPair/action","displayName":"Generate - SSH Key Pair","description":"Generates a new SSH public/private key pair","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyAzureAsyncOperation","displayName":"PrivateEndpointConnectionProxy - AzureAsyncOperation","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyAzureAsyncOperation/read","displayName":"Get - PrivateEndpointConnectionProxy Operation","description":"Get the status of - asynchronous Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyOperationResults","displayName":"PrivateEndpointConnectionProxyOperation - Results","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyOperationResults/read","displayName":"Get - PrivateEndpointConnectionProxyOperationResults","description":"Get the results - of Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions","displayName":"SharedVMExtensions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/read","displayName":"Get - Shared VM Extension","description":"Gets the properties of Shared VM Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/write","displayName":"Create - or Update Shared VM Extension","description":"Creates a new Shared VM Extension - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/delete","displayName":"Delete - Shared VM Extension","description":"Deletes the Shared VM Extension","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions/versions","displayName":"SharedVMExtensionVersions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/versions/read","displayName":"Get - Shared VM Extension Version","description":"Gets the properties of Shared - VM Extension Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/write","displayName":"Create - or Update Shared VM Extension Version","description":"Creates a new Shared - VM Extension Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/delete","displayName":"Delete - Shared VM Extension Version","description":"Deletes the Shared VM Extension - Version","origin":"user,system","properties":null}]},{"name":"diskAccesses","displayName":"DiskAccesses","operations":[{"name":"Microsoft.Compute/diskAccesses/read","displayName":"Get - DiskAccess","description":"Get the properties of DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/write","displayName":"Create - or Update DiskAccess","description":"Create a new DiskAccess resource or update - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/delete","displayName":"Delete - DiskAccess","description":"Delete a DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionsApproval/action","displayName":"Auto - Approve PrivateEndpointConnections","description":"Auto Approve a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnections","displayName":"DiskAccess - PrivateEndpointConnections","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/delete","displayName":"Delete - PrivateEndpointConnection","description":"Delete a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/read","displayName":"Get - PrivateEndpointConnection","description":"Get a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/write","displayName":"Approve - or Reject PrivateEndpointConnection","description":"Approve or Reject a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnectionProxies","displayName":"DiskAccess - PrivateEndpointConnection proxies","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/read","displayName":"Get - PrivateEndpointConnectionProxy","description":"Get the properties of a private - endpoint connection proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/write","displayName":"Create - PrivateEndpointConnectionProxy","description":"Create a new Private Endpoint - Connection Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/delete","displayName":"Delete - PrivateEndpointConnectionProxy","description":"Delete a Private Endpoint Connection - Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/validate/action","displayName":"Validate - PrivateEndpointConnectionProxy","description":"Validate a Private Endpoint - Connection Proxy object","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/extensions","displayName":"Extensions - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/read","displayName":"Get - extension for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of an extension for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/write","displayName":"Create - or Update extension for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new extension for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/delete","displayName":"Delete - extension for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the extension for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"cloudServices","displayName":"Cloud - Service Resource","operations":[{"name":"Microsoft.Compute/cloudServices/read","displayName":"Get - CloudService.","description":"Get the properties of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/write","displayName":"Create - or Update CloudService.","description":"Created a new CloudService or Update - an existing one.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete","displayName":"Delete - the CloudService.","description":"Deletes the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/poweroff/action","displayName":"Power - off the CloudService.","description":"Power off the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/start/action","displayName":"Starts - the CloudService.","description":"Starts the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/restart/action","displayName":"Restarts - one or more role instances in a CloudService.","description":"Restarts one - or more role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/reimage/action","displayName":"Reimage - one or more role instances in a CloudService.","description":"Rebuilds all - the disks in the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/rebuild/action","displayName":"Rebuilds - all the disks in the role instances in a CloudService.","description":"Reimage - all the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete/action","displayName":"Deletes - role instances in a CloudService.","description":"Deletes role instances in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/instanceView","displayName":"Cloud - Service Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/instanceView/read","displayName":"Gets - the status of a CloudService.","description":"Gets the status of a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances","displayName":"Cloud - Service Role Instance","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/delete","displayName":"Deletes - a RoleInstance from CloudService.","description":"Deletes a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/read","displayName":"Gets - a RoleInstance from CloudService.","description":"Gets a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/restart/action","displayName":"Restart - a role instance of a CloudService","description":"Restart a role instance - of a CloudService","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/reimage/action","displayName":"Reimage - a role instance of a CloudService.","description":"Reimage a role instance - of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/rebuild/action","displayName":"Rebuild - all the disks in a CloudService.","description":"Rebuild all the disks in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/updateDomains","displayName":"Cloud - Service Update Domains.","operations":[{"name":"Microsoft.Compute/cloudServices/updateDomains/read","displayName":"Gets - a list of all update domains in a CloudService.","description":"Gets a list - of all update domains in a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances/instanceView","displayName":"Cloud - Service RoleInstance Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/instanceView/read","displayName":"Gets - the status of a role instance from a CloudService.","description":"Gets the - status of a role instance from a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/providers/Microsoft.Insights/metricDefinitions","displayName":"Cloud - Services Metric Defintion.","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService metrics definition","description":"Gets the CloudService - metrics definition","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/roles","displayName":"CloudService - Roles","operations":[{"name":"Microsoft.Compute/cloudServices/roles/read","displayName":"Gets - a role from a CloudService.","description":"Gets a role from a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/write","displayName":"Scale - instances in a Role","description":"Scale instances in a Role","origin":"user,system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/metricDefinitions","displayName":"CloudService - Roles Metric Definitions","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService Roles Metric Definitions","description":"Gets the CloudService - Roles Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudServices - Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService.","origin":"system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudService - Roles Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService Roles.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService Roles","origin":"system","properties":null}]},{"name":"virtualMachines/runCommands","displayName":"Virtual - Machine RunCommands","operations":[{"name":"Microsoft.Compute/virtualMachines/runCommands/read","displayName":"Get - Virtual Machine run command","description":"Get the properties of a virtual - machine run command","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/write","displayName":"Create - or Update Virtual Machine run command","description":"Creates a new virtual - machine run command or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/delete","displayName":"Delete - Virtual Machine run command","description":"Deletes the virtual machine run - command","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/runCommands","displayName":"RunCommands - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/read","displayName":"Get - run command for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of a run command for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/write","displayName":"Create - or Update run command for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new run command for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/delete","displayName":"Delete - run command for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the run command for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults","displayName":"Patch - Installation Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/read","displayName":"Summarizes - latest patch installation operation results","description":"Retrieves the - summary of the latest patch installation operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults/softwarePatches","displayName":"Patch - Installation Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/softwarePatches/read","displayName":"Lists - all patches considered in patch installation operation","description":"Retrieves - list of patches attempted to be installed during the last patch installation - operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest","displayName":"Patch - Assessment Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/read","displayName":"Summarizes - latest patch assessment operation results","description":"Retrieves the summary - of the latest patch assessment operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest/softwarePatches","displayName":"Patch - Assessment Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/softwarePatches/read","displayName":"Lists - all patches assessed in patch assessment operation","description":"Retrieves - list of patches assessed during the last patch assessment operation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups/capacityReservations","displayName":"Capacity - Reservations","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/read","displayName":"Get - Capacity Reservation","description":"Get the properties of a capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/write","displayName":"Create - or Update Capacity Reservation","description":"Creates a new capacity reservation - or updates an existing capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/delete","displayName":"Delete - Capacity Reservation","description":"Deletes the capacity reservation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups","displayName":"Capacity - Reservation Groups","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/read","displayName":"Get - Capacity Reservation Group","description":"Get the properties of a capacity - reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/write","displayName":"Create - or Update Capacity Reservation Group","description":"Creates a new capacity - reservation group or updates an existing capacity reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/delete","displayName":"Delete - Capacity Reservation Group","description":"Deletes the capacity reservation - group","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints/diskRestorePoints","displayName":"DiskRestorePoint","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/read","displayName":"Get - incremental DiskRestorePoint","description":"Get the properties of an incremental - DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/beginGetAccess/action","displayName":"Get - incremental DiskRestorePoint SAS URI","description":"Get the SAS URI of the - incremental DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/endGetAccess/action","displayName":"Revoke - incremental DiskRestorePoint SAS URI","description":"Revoke the SAS URI of - the incremental DiskRestorePoint","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsVersions","displayName":"CloudService - OS Versions","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsVersions/read","displayName":"Read - Cloud Service OS Version","description":"Read any guest OS Version that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsFamilies","displayName":"CloudService - OS Families","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsFamilies/read","displayName":"Read - Cloud Service OS Family","description":"Read any guest OS Family that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]}],"id":"/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute","type":"Microsoft.Authorization/providerOperations","name":"Microsoft.Compute"}' - headers: - cache-control: - - no-cache - content-length: - - '113662' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:42 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.compute?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: '{"displayName":"Microsoft Compute","operations":[{"name":"Microsoft.Compute/register/action","displayName":"Register - Subscription for Compute","description":"Registers Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null},{"name":"Microsoft.Compute/unregister/action","displayName":"Unregister - Subscription for Compute","description":"Unregisters Subscription with Microsoft.Compute - resource provider","origin":"user,system","properties":null}],"resourceTypes":[{"name":"availabilitySets","displayName":"Availability - Sets","operations":[{"name":"Microsoft.Compute/availabilitySets/read","displayName":"Get - Availablity Set","description":"Get the properties of an availability set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/write","displayName":"Create - or Update Availability Set","description":"Creates a new availability set - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/availabilitySets/delete","displayName":"Delete - Availability Set","description":"Deletes the availability set","origin":"user,system","properties":null}]},{"name":"availabilitySets/vmSizes","displayName":"Virtual - Machine Size for Availability set","operations":[{"name":"Microsoft.Compute/availabilitySets/vmSizes/read","displayName":"List - Virtual Machine Sizes for Availability Set","description":"List available - sizes for creating or updating a virtual machine in the availability set","origin":"user,system","properties":null}]},{"name":"virtualMachines","displayName":"Virtual - Machines","operations":[{"name":"Microsoft.Compute/virtualMachines/read","displayName":"Get - Virtual Machine","description":"Get the properties of a virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/write","displayName":"Create - or Update Virtual Machine","description":"Creates a new virtual machine or - updates an existing virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/delete","displayName":"Delete - Virtual Machine","description":"Deletes the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/start/action","displayName":"Start - Virtual Machine","description":"Starts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/powerOff/action","displayName":"Power - Off Virtual Machine","description":"Powers off the virtual machine. Note that - the virtual machine will continue to be billed.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reapply/action","displayName":"Reapply - a virtual machine''s current model","description":"Reapplies a virtual machine''s - current model","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine","description":"Redeploys virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/restart/action","displayName":"Restart - Virtual Machine","description":"Restarts the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs","description":"Retrieves boot diagnostic logs - blob URIs","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine","description":"Powers off the virtual machine and releases - the compute resources","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/generalize/action","displayName":"Generalize - Virtual Machine","description":"Sets the virtual machine state to Generalized - and prepares the virtual machine for capture","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/capture/action","displayName":"Capture - Virtual Machine","description":"Captures the virtual machine by copying virtual - hard disks and generates a template that can be used to create similar virtual - machines","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommand/action","displayName":"Run - Command on Virtual Machine","description":"Executes a predefined script on - the virtual machine","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/convertToManagedDisks/action","displayName":"Convert - Virtual Machine disks to Managed Disks","description":"Converts the blob based - disks of the virtual machine to managed disks","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/performMaintenance/action","displayName":"Perform - Maintenance Redeploy","description":"Performs Maintenance Operation on the - VM.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine","description":"Reimages virtual machine which is using differencing - disk.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/login/action","displayName":"Log - in to Virtual Machine","description":"Log in to a virtual machine as a regular - user","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/loginAsAdmin/action","displayName":"Log - in to Virtual Machine as administrator","description":"Log in to a virtual - machine with Windows administrator or Linux root user privileges","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/installPatches/action","displayName":"Install - OS update patches on virtual machine","description":"Installs available OS - update patches on the virtual machine based on parameters provided by user. - Assessment results containing list of available patches will also get refreshed - as part of this.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/assessPatches/action","displayName":"Assess - virtual machine for available OS update patches","description":"Assesses the - virtual machine and finds list of available OS update patches for it.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/cancelPatchInstallation/action","displayName":"Cancel - install OS update patch operation on virtual machine","description":"Cancels - the ongoing install OS update patch operation on the virtual machine.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine","description":"Simulates the eviction of - spot Virtual Machine","origin":"user,system","properties":null}]},{"name":"virtualMachines/instanceView","displayName":"Virtual - Machine Instance View","operations":[{"name":"Microsoft.Compute/virtualMachines/instanceView/read","displayName":"Get - Virtual Machine Instance View","description":"Gets the detailed runtime status - of the virtual machine and its resources","origin":"user,system","properties":null}]},{"name":"virtualMachines/vmSizes","displayName":"Virtual - Machine Size","operations":[{"name":"Microsoft.Compute/virtualMachines/vmSizes/read","displayName":"Lists - Available Virtual Machine Sizes","description":"Lists available sizes the - virtual machine can be updated to","origin":"user,system","properties":null}]},{"name":"images","displayName":"Images","operations":[{"name":"Microsoft.Compute/images/read","displayName":"Get - Image","description":"Get the properties of the Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/write","displayName":"Create - or Update Image","description":"Creates a new Image or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/images/delete","displayName":"Delete - Image","description":"Deletes the image","origin":"user,system","properties":null}]},{"name":"restorePointCollections","displayName":"Restore - Point Collections","operations":[{"name":"Microsoft.Compute/restorePointCollections/read","displayName":"Get - Restore Point Collection","description":"Get the properties of a restore point - collection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/write","displayName":"Create - or Update Restore Point Collection","description":"Creates a new restore point - collection or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/delete","displayName":"Delete - Restore Point Collection","description":"Deletes the restore point collection - and contained restore points","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints","displayName":"Restore - Points","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/read","displayName":"Get - Restore Point","description":"Get the properties of a restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/write","displayName":"Create - Restore Point","description":"Creates a new restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/delete","displayName":"Delete - Restore Point","description":"Deletes the restore point","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/retrieveSasUris/action","displayName":"Get - Restore Point along with blob SAS URIs","description":"Get the properties - of a restore point along with blob SAS URIs","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Metric Definitions","description":"Reads Virtual Machine Metric - Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"virtualMachines/extensions","displayName":"Virtual - Machine Extensions","operations":[{"name":"Microsoft.Compute/virtualMachines/extensions/read","displayName":"Get - Virtual Machine Extension","description":"Get the properties of a virtual - machine extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/write","displayName":"Create - or Update Virtual Machine Extension","description":"Creates a new virtual - machine extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/extensions/delete","displayName":"Delete - Virtual Machine Extension","description":"Deletes the virtual machine extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions","displayName":"Virtual - Machine Scale Set Extensions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/read","displayName":"Get - Virtual Machine Scale Set Extension","description":"Gets the properties of - a Virtual Machine Scale Set Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/write","displayName":"Create - or Update Virtual Machine Scale Set Extension","description":"Creates a new - Virtual Machine Scale Set Extension or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/delete","displayName":"Delete - Virtual Machine Scale Set Extension","description":"Deletes the Virtual Machine - Scale Set Extension","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets","displayName":"Virtual - Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/read","displayName":"Get - Virtual Machine Scale Set","description":"Get the properties of a Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/write","displayName":"Create - or Update Virtual Machine Scale Set","description":"Creates a new Virtual - Machine Scale Set or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete","displayName":"Delete - Virtual Machine Scale Set","description":"Deletes the Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/delete/action","displayName":"Delete - Virtual Machines in a Virtual Machine Scale Set","description":"Deletes the - instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/start/action","displayName":"Start - Virtual Machine Scale Set","description":"Starts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/powerOff/action","displayName":"Power - Off Virtual Machine Scale Set","description":"Powers off the instances of - the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/restart/action","displayName":"Restart - Virtual Machine Scale Set","description":"Restarts the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/deallocate/action","displayName":"Deallocate - Virtual Machine Scale Set","description":"Powers off and releases the compute - resources for the instances of the Virtual Machine Scale Set ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/manualUpgrade/action","displayName":"Manual - Upgrade Virtual Machine Scale Set","description":"Manually updates instances - to latest model of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimage/action","displayName":"Reimage - Virtual Machine Scale Set","description":"Reimages the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine Scale Set","description":"Reimages all disks - (OS Disk and Data Disks) for the instances of a Virtual Machine Scale Set - ","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/redeploy/action","displayName":"Redeploy - Virtual Machine Scale Set","description":"Redeploy the instances of the Virtual - Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine Scale Set","description":"Performs - planned maintenance on the instances of the Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/scale/action","displayName":"Verify - Scaling of Virtual Machine Scale Set","description":"Verify if an existing - Virtual Machine Scale Set can Scale In/Scale Out to specified instance count","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/forceRecoveryServiceFabricPlatformUpdateDomainWalk/action","displayName":"Manually - walk platform update domains in a service fabric Virtual Machine Scale Set","description":"Manually - walk the platform update domains of a service fabric Virtual Machine Scale - Set to finish a pending update that is stuck","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/osRollingUpgrade/action","displayName":"Upgrades - OS on Virtual Machine Scale Set instances to the latest available Platform - Image OS version.","description":"Starts a rolling upgrade to move all Virtual - Machine Scale Set instances to the latest available Platform Image OS version.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/setOrchestrationServiceState/action","displayName":"Sets - the state of an orchestration service in a Virtual Machine Scale Set.","description":"Sets - the state of an orchestration service based on the action provided in operation - input.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/action","displayName":"Cancel - Virtual Machine Scale Set Rolling Upgrade operation","description":"Cancels - the rolling upgrade of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/instanceView","displayName":"Virtual - Machine Scale Set Instance View","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/instanceView/read","displayName":"Get - Virtual Machine Scale Set Instance View","description":"Gets the instance - view of the Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/skus","displayName":"Virtual - Machine Scale Set SKU","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/skus/read","displayName":"List - SKUs for Virtual Machine Scale Set","description":"Lists the valid SKUs for - an existing Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine Scalet Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine Scalet Set Metric Definitions","description":"Reads Virtual - Machine Scalet Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of inbound flows (traffic - going into the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true},{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Cached IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]},{"name":"Network - Out Total","displayName":"Network Out Total","displayDescription":"The number - of bytes out on all network interfaces by the Virtual Machine(s) (Outgoing - Traffic)","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"VMName","displayName":"VMName","internalName":"VMName","toBeExportedForShoebox":true}]}]}}}]},{"name":"virtualMachineScaleSets/rollingUpgrades","displayName":"Virtual - Machine Scale Sets Rolling Upgrades","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/rollingUpgrades/read","displayName":"Gets - the latest Rolling Upgrade status for a Virtual Machine Scale Set","description":"Get - latest Rolling Upgrade status for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/osUpgradeHistory","displayName":"Virtual - Machine Scale Set OS Upgrade History","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/osUpgradeHistory/read","displayName":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","description":"Gets - the history of OS upgrades for a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines","displayName":"Virtual - Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/read","displayName":"Gets - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/write","displayName":"Updates - the properties of a Virtual Machine in a Virtual Machine Scale Set","description":"Updates - the properties of a Virtual Machine in a VM Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/delete","displayName":"Delete - Virtual Machine in a Virtual Machine Scale Set","description":"Delete a specific - Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/start/action","displayName":"Start - Virtual Machine in a Virtual Machine Scale Set","description":"Starts a Virtual - Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/powerOff/action","displayName":"Power - off Virtual Machine in a Virtual Machine Scale Set","description":"Powers - Off a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/restart/action","displayName":"Restart - Virtual Machine instance in a Virtual Machine Scale Set","description":"Restarts - a Virtual Machine instance in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/deallocate/action","displayName":"Deallocate - Virtual Machine in a Virtual Machine Scale Set","description":"Powers off - and releases the compute resources for a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimage/action","displayName":"Reimage - Virtual Machine in a Virtual Machine Scale Set","description":"Reimages a - Virtual Machine instance in a Virtual Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/reimageAll/action","displayName":"Reimage - all Disks for a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Reimages - all disks (OS Disk and Data Disks) for Virtual Machine instance in a Virtual - Machine Scale Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/redeploy/action","displayName":"Redeploy - Virtual Machine instance in a Virtual Machine Scale Set","description":"Redeploys - a Virtual Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/retrieveBootDiagnosticsData/action","displayName":"Retrieve - boot diagnostic logs blob URIs of Virtual Machine instance in a Virtual Machine - Scale Set","description":"Retrieves boot diagnostic logs blob URIs of Virtual - Machine instance in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/performMaintenance/action","displayName":"Perform - planned maintenance on a Virtual Machine instance in a Virtual Machine Scale - Set","description":"Performs planned maintenance on a Virtual Machine instance - in a Virtual Machine Scale Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommand/action","displayName":"Run - Command on a Virtual Machine instance in a Virtual Machine Scale Set.","description":"Executes - a predefined script on a Virtual Machine instance in a Virtual Machine Scale - Set.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/simulateEviction/action","displayName":"Simulate - Eviction of spot Virtual Machine in Virtual Machine Scale Set","description":"Simulates - the eviction of spot Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/instanceView","displayName":"Instance - View of Virtual Machine in Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/instanceView/read","displayName":"Gets - Instance View of a Virtual Machine in a Virtual Machine Scale Set","description":"Retrieves - the instance view of a Virtual Machine in a VM Scale Set.","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions","displayName":"Virtual - Machine in Scale Set Metric Definitions","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Get - Virtual Machine in Scale Set Metric Definitions","description":"Reads Virtual - Machine in Scale Set Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average"},{"name":"Network - In","displayName":"Network In Billable (Deprecated)","displayDescription":"The - number of billable bytes received on all network interfaces by the Virtual - Machine(s) (Incoming Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Network - Out","displayName":"Network Out Billable (Deprecated)","displayDescription":"The - number of billable bytes out on all network interfaces by the Virtual Machine(s) - (Outgoing Traffic) (Deprecated)","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total"},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average"},{"name":"CPU - Credits Remaining","displayName":"CPU Credits Remaining","displayDescription":"Total - number of credits available to burst. Only available on B-series burstable - VMs","unit":"Count","aggregationType":"Average"},{"name":"CPU Credits Consumed","displayName":"CPU - Credits Consumed","displayDescription":"Total number of credits consumed by - the Virtual Machine. Only available on B-series burstable VMs","unit":"Count","aggregationType":"Average"},{"name":"Data - Disk Read Bytes/sec","displayName":"Data Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Bytes/sec","displayName":"Data Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period","unit":"BytesPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Read Operations/Sec","displayName":"Data Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Write Operations/Sec","displayName":"Data Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Queue Depth","displayName":"Data Disk Queue Depth","displayDescription":"Data - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Bandwidth Consumed Percentage","displayName":"Data Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of data disk bandwidth consumed - per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk IOPS Consumed Percentage","displayName":"Data Disk IOPS Consumed Percentage","displayDescription":"Percentage - of data disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target Bandwidth","displayName":"Data Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Target IOPS","displayName":"Data Disk Target IOPS","displayDescription":"Baseline - IOPS Data Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst Bandwidth","displayName":"Data Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Max Burst IOPS","displayName":"Data Disk Max Burst IOPS","displayDescription":"Maximum - IOPS Data Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst BPS Credits Percentage","displayName":"Data Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of Data Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Data - Disk Used Burst IO Credits Percentage","displayName":"Data Disk Used Burst - IO Credits Percentage","displayDescription":"Percentage of Data Disk burst - I/O credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Read Bytes/sec","displayName":"OS Disk Read Bytes/Sec","displayDescription":"Bytes/Sec - read from a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Bytes/sec","displayName":"OS Disk Write Bytes/Sec","displayDescription":"Bytes/Sec - written to a single disk during monitoring period for OS disk","unit":"BytesPerSecond","aggregationType":"Average"},{"name":"OS - Disk Read Operations/Sec","displayName":"OS Disk Read Operations/Sec","displayDescription":"Read - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Write Operations/Sec","displayName":"OS Disk Write Operations/Sec","displayDescription":"Write - IOPS from a single disk during monitoring period for OS disk","unit":"CountPerSecond","aggregationType":"Average"},{"name":"OS - Disk Queue Depth","displayName":"OS Disk Queue Depth","displayDescription":"OS - Disk Queue Depth(or Queue Length)","unit":"Count","aggregationType":"Average"},{"name":"OS - Disk Bandwidth Consumed Percentage","displayName":"OS Disk Bandwidth Consumed - Percentage","displayDescription":"Percentage of operating system disk bandwidth - consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk IOPS Consumed Percentage","displayName":"OS Disk IOPS Consumed Percentage","displayDescription":"Percentage - of operating system disk I/Os consumed per minute","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target Bandwidth","displayName":"OS Disk Target Bandwidth","displayDescription":"Baseline - bytes per second throughput OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Target IOPS","displayName":"OS Disk Target IOPS","displayDescription":"Baseline - IOPS OS Disk can achieve without bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst Bandwidth","displayName":"OS Disk Max Burst Bandwidth","displayDescription":"Maximum - bytes per second throughput OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Max Burst IOPS","displayName":"OS Disk Max Burst IOPS","displayDescription":"Maximum - IOPS OS Disk can achieve with bursting","unit":"Count","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst BPS Credits Percentage","displayName":"OS Disk Used Burst - BPS Credits Percentage","displayDescription":"Percentage of OS Disk burst - bandwidth credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"OS - Disk Used Burst IO Credits Percentage","displayName":"OS Disk Used Burst IO - Credits Percentage","displayDescription":"Percentage of OS Disk burst I/O - credits used so far","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Inbound - Flows","displayName":"Inbound Flows","displayDescription":"Inbound Flows are - number of current flows in the inbound direction (traffic going into the VM)","unit":"Count","aggregationType":"Average"},{"name":"Outbound - Flows","displayName":"Outbound Flows","displayDescription":"Outbound Flows - are number of current flows in the outbound direction (traffic going out of - the VM)","unit":"Count","aggregationType":"Average"},{"name":"Inbound Flows - Maximum Creation Rate","displayName":"Inbound Flows Maximum Creation Rate","displayDescription":"The - maximum creation rate of inbound flows (traffic going into the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Outbound - Flows Maximum Creation Rate","displayName":"Outbound Flows Maximum Creation - Rate","displayDescription":"The maximum creation rate of outbound flows (traffic - going out of the VM)","unit":"CountPerSecond","aggregationType":"Average"},{"name":"Premium - Data Disk Cache Read Hit","displayName":"Premium Data Disk Cache Read Hit","displayDescription":"Premium - Data Disk Cache Read Hit","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - Data Disk Cache Read Miss","displayName":"Premium Data Disk Cache Read Miss","displayDescription":"Premium - Data Disk Cache Read Miss","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"LUN","displayName":"LUN","internalName":"LUN","toBeExportedForShoebox":true}]},{"name":"Premium - OS Disk Cache Read Hit","displayName":"Premium OS Disk Cache Read Hit","displayDescription":"Premium - OS Disk Cache Read Hit","unit":"Percent","aggregationType":"Average"},{"name":"Premium - OS Disk Cache Read Miss","displayName":"Premium OS Disk Cache Read Miss","displayDescription":"Premium - OS Disk Cache Read Miss","unit":"Percent","aggregationType":"Average"},{"name":"VM - Cached Bandwidth Consumed Percentage","displayName":"VM Cached Bandwidth Consumed - Percentage","displayDescription":"Percentage of cached disk bandwidth consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM Cached - IOPS Consumed Percentage","displayName":"VM Cached IOPS Consumed Percentage","displayDescription":"Percentage - of cached disk IOPS consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached Bandwidth Consumed Percentage","displayName":"VM Uncached Bandwidth - Consumed Percentage","displayDescription":"Percentage of uncached disk bandwidth - consumed by the VM","unit":"Percent","aggregationType":"Average"},{"name":"VM - Uncached IOPS Consumed Percentage","displayName":"VM Uncached IOPS Consumed - Percentage","displayDescription":"Percentage of uncached disk IOPS consumed - by the VM","unit":"Percent","aggregationType":"Average"},{"name":"Network - In Total","displayName":"Network In Total","displayDescription":"The number - of bytes received on all network interfaces by the Virtual Machine(s) (Incoming - Traffic)","unit":"Bytes","aggregationType":"Total"},{"name":"Network Out Total","displayName":"Network - Out Total","displayDescription":"The number of bytes out on all network interfaces - by the Virtual Machine(s) (Outgoing Traffic)","unit":"Bytes","aggregationType":"Total"}]}}}]},{"name":"locations/vmSizes","displayName":"Virtual - Machine Sizes","operations":[{"name":"Microsoft.Compute/locations/vmSizes/read","displayName":"List - Available Virtual Machine Sizes in Location","description":"Lists available - virtual machine sizes in a location","origin":"user,system","properties":null}]},{"name":"locations/operations","displayName":"Operation","operations":[{"name":"Microsoft.Compute/locations/operations/read","displayName":"Get - Operation","description":"Gets the status of an asynchronous operation","origin":"user,system","properties":null}]},{"name":"locations/usages","displayName":"Usage - Metrics","operations":[{"name":"Microsoft.Compute/locations/usages/read","displayName":"Get - Usage Metrics","description":"Gets service limits and current usage quantities - for the subscription''s compute resources in a location","origin":"user,system","properties":null}]},{"name":"locations/runCommands","displayName":"Run - Commands","operations":[{"name":"Microsoft.Compute/locations/runCommands/read","displayName":"Lists - Run Commands","description":"Lists available run commands in location","origin":"user,system","properties":null}]},{"name":"operations","displayName":"Available - Compute Operations","operations":[{"name":"Microsoft.Compute/operations/read","displayName":"List - Available Compute Operations","description":"Lists operations available on - Microsoft.Compute resource provider","origin":"user,system","properties":null}]},{"name":"skus","displayName":"Skus","operations":[{"name":"Microsoft.Compute/skus/read","displayName":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","description":"Gets - the list of Microsoft.Compute SKUs available for your Subscription","origin":"user,system","properties":null}]},{"name":"disks","displayName":"Disks","operations":[{"name":"Microsoft.Compute/disks/read","displayName":"Get - Disk","description":"Get the properties of a Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/write","displayName":"Create - or Update Disk","description":"Creates a new Disk or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/delete","displayName":"Delete - Disk","description":"Deletes the Disk","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/beginGetAccess/action","displayName":"Get - Disk SAS URI","description":"Get the SAS URI of the Disk for blob access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/disks/endGetAccess/action","displayName":"Revoke - Disk SAS URI","description":"Revoke the SAS URI of the Disk","origin":"user,system","properties":null}]},{"name":"snapshots","displayName":"Snapshots","operations":[{"name":"Microsoft.Compute/snapshots/read","displayName":"Get - Snapshot","description":"Get the properties of a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/write","displayName":"Create - or Update Snapshot","description":"Create a new Snapshot or update an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/delete","displayName":"Delete - Snapshot","description":"Delete a Snapshot","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/beginGetAccess/action","displayName":"Get - Snapshot SAS URI","description":"Get the SAS URI of the Snapshot for blob - access","origin":"user,system","properties":null},{"name":"Microsoft.Compute/snapshots/endGetAccess/action","displayName":"Revoke - Snapshot SAS URI","description":"Revoke the SAS URI of the Snapshot","origin":"user,system","properties":null}]},{"name":"locations/diskOperations","displayName":"DiskOperation","operations":[{"name":"Microsoft.Compute/locations/diskOperations/read","displayName":"Get - Disk Operation","description":"Gets the status of an asynchronous Disk operation","origin":"user,system","properties":null}]},{"name":"sharedVMImages","displayName":"SharedVMImages","operations":[{"name":"Microsoft.Compute/sharedVMImages/read","displayName":"Get - SharedVMImage","description":"Get the properties of a SharedVMImage","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/write","displayName":"Create - or Update SharedVMImage","description":"Creates a new SharedVMImage or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/delete","displayName":"Delete - SharedVMImage","description":"Deletes the SharedVMImage","origin":"user,system","properties":null}]},{"name":"sharedVMImages/versions","displayName":"SharedVMImageVersions","operations":[{"name":"Microsoft.Compute/sharedVMImages/versions/read","displayName":"Get - SharedVMImageVersion","description":"Get the properties of a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/write","displayName":"Create - or Update SharedVMImageVersion","description":"Create a new SharedVMImageVersion - or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/delete","displayName":"Delete - SharedVMImageVersion","description":"Delete a SharedVMImageVersion","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMImages/versions/replicate/action","displayName":"Replicate - SharedVMImageVersion","description":"Replicate a SharedVMImageVersion to target - regions","origin":"user,system","properties":null}]},{"name":"locations/capsOperations","displayName":"CapsOperation","operations":[{"name":"Microsoft.Compute/locations/capsOperations/read","displayName":"Get - Caps Operation","description":"Gets the status of an asynchronous Caps operation","origin":"user,system","properties":null}]},{"name":"locations/publishers","displayName":"Publishers","operations":[{"name":"Microsoft.Compute/locations/publishers/read","displayName":"Get - Publisher","description":"Get the properties of a Publisher","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers","displayName":"Platform - Image Offers","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/read","displayName":"Get - Platform Image Offer","description":"Get the properties of a Platform Image - Offer","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus","displayName":"Platform - Image Skus","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/read","displayName":"Get - Platform Image Sku","description":"Get the properties of a Platform Image - Sku","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/offers/skus/versions","displayName":"Platform - Image Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/offers/skus/versions/read","displayName":"Get - Platform Image Version","description":"Get the properties of a Platform Image - Version","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types","displayName":"VMExtension - Types","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/read","displayName":"Get - VMExtension Type","description":"Get the properties of a VMExtension Type","origin":"user,system","properties":null}]},{"name":"locations/publishers/artifacttypes/types/versions","displayName":"VMExtension - Versions","operations":[{"name":"Microsoft.Compute/locations/publishers/artifacttypes/types/versions/read","displayName":"Get - VMExtension Version","description":"Get the properties of a VMExtension Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/networkInterfaces","displayName":"Network - interfaces of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/networkInterfaces/read","displayName":"Get - all network interfaces of a Virtual Machine Scale Set","description":"Get - properties of all network interfaces of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/publicIPAddresses","displayName":"Public - IP addresses of a Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/publicIPAddresses/read","displayName":"Get - all public IP addresses of a Virtual Machine Scale Set","description":"Get - properties of all public IP addresses of a Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces","displayName":"Network - interfaces of a virtual machine created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/read","displayName":"Get - one or all network interfaces of a virtual machine created using Virtual Machine - Scale Set","description":"Get properties of one or all network interfaces - of a virtual machine created using Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses","displayName":"IP - address created using Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/publicIPAddresses/read","displayName":"Get - public IP address created using Virtual Machine Scale Set. Virtual Machine - Scale Set can create at most one public IP per ipconfiguration (private IP)","description":"Get - properties of public IP address created using Virtual Machine Scale Set. Virtual - Machine Scale Set can create at most one public IP per ipconfiguration (private - IP)","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations","displayName":"IP - configurations of a network interface created using Virtual Machine Scale - Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/networkInterfaces/ipConfigurations/read","displayName":"Get - one or all IP configurations of a network interface created using Virtual - Machine Scale Set. IP configurations represent private IPs","description":"Get - properties of one or all IP configurations of a network interface created - using Virtual Machine Scale Set. IP configurations represent private IPs","origin":"user,system","properties":null}]},{"name":"galleries","displayName":"Galleries","operations":[{"name":"Microsoft.Compute/galleries/read","displayName":"Get - Gallery","description":"Gets the properties of Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/write","displayName":"Create - or Update Gallery","description":"Creates a new Gallery or updates an existing - one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/delete","displayName":"Delete - Gallery","description":"Deletes the Gallery","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/share/action","displayName":"Share - Gallery","description":"Shares a Gallery to different scopes","origin":"user,system","properties":null}]},{"name":"galleries/images","displayName":"GalleryImages","operations":[{"name":"Microsoft.Compute/galleries/images/read","displayName":"Get - Gallery Image","description":"Gets the properties of Gallery Image","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/write","displayName":"Create - or Update Gallery Image","description":"Creates a new Gallery Image or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/delete","displayName":"Delete - Gallery Image","description":"Deletes the Gallery Image","origin":"user,system","properties":null}]},{"name":"galleries/images/versions","displayName":"GalleryImageVersions","operations":[{"name":"Microsoft.Compute/galleries/images/versions/read","displayName":"Get - Gallery Image Version","description":"Gets the properties of Gallery Image - Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/write","displayName":"Create - or Update Gallery Image Version","description":"Creates a new Gallery Image - Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/images/versions/delete","displayName":"Delete - Gallery Image Version","description":"Deletes the Gallery Image Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine Scale Sets","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine Scale Set log definitions","description":"Gets the available - logs for Virtual Machine Scale Sets.","origin":"system","properties":null}]},{"name":"virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - Virtual Machine Scale Set.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine Scale set.","origin":"system","properties":null}]},{"name":"locations/logAnalytics","displayName":"Log - Analytics","operations":[{"name":"Microsoft.Compute/locations/logAnalytics/getRequestRateByInterval/action","displayName":"Create - logs to show total requests by time interval","description":"Create logs to - show total requests by time interval to aid throttling diagnostics.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/locations/logAnalytics/getThrottledRequests/action","displayName":"Create - logs to show aggregates of throttled requests","description":"Create logs - to show aggregates of throttled requests grouped by ResourceName, OperationName, - or the applied Throttle Policy.","origin":"user,system","properties":null}]},{"name":"virtualMachines/providers/Microsoft.Insights/logDefinitions","displayName":"The - log definition of Virtual Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/logDefinitions/read","displayName":"Get - Virtual Machine log definitions","description":"Gets the available logs for - Virtual Machine.","origin":"system","properties":{"serviceSpecification":{"logSpecifications":[{"name":"SoftwareUpdates","displayName":"SoftwareUpdates"},{"name":"SoftwareUpdateProfile","displayName":"SoftwareUpdateProfile"}]}}}]},{"name":"virtualMachines/providers/Microsoft.Insights/diagnosticSettings","displayName":"Virtual - Machine","operations":[{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - diagnostic setting","description":"Gets the diagnostic setting for the Virtual - Machine.","origin":"system","properties":null},{"name":"Microsoft.Compute/virtualMachines/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the Virtual Machine.","origin":"system","properties":null}]},{"name":"hostGroups","displayName":"Host - Groups","operations":[{"name":"Microsoft.Compute/hostGroups/read","displayName":"Get - Host Group","description":"Get the properties of a host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/write","displayName":"Create - or Update Host Group","description":"Creates a new host group or updates an - existing host group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/delete","displayName":"Delete - Host Group","description":"Deletes the host group","origin":"user,system","properties":null}]},{"name":"proximityPlacementGroups","displayName":"Proximity - Placement Groups","operations":[{"name":"Microsoft.Compute/proximityPlacementGroups/read","displayName":"Get - Proximity Placement Group","description":"Get the Properties of a Proximity - Placement Group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/write","displayName":"Create - or Update Proximity Placement Group","description":"Creates a new Proximity - Placement Group or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/proximityPlacementGroups/delete","displayName":"Delete - Proximity Placement Group","description":"Deletes the Proximity Placement - Group","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/vmSizes","displayName":"Virtual - Machine Size for Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/vmSizes/read","displayName":"List - Virtual Machine Sizes for a Virtual Machine Scale Set","description":"List - available sizes for creating or updating a virtual machine in the Virtual - Machine Scale Set","origin":"user,system","properties":null}]},{"name":"hostGroups/hosts","displayName":"Hosts","operations":[{"name":"Microsoft.Compute/hostGroups/hosts/read","displayName":"Get - Host","description":"Get the properties of a host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/write","displayName":"Create - or Update Host","description":"Creates a new host or updates an existing host","origin":"user,system","properties":null},{"name":"Microsoft.Compute/hostGroups/hosts/delete","displayName":"Delete - Host","description":"Deletes the host","origin":"user,system","properties":null}]},{"name":"diskEncryptionSets","displayName":"DiskEncryptionSets","operations":[{"name":"Microsoft.Compute/diskEncryptionSets/read","displayName":"Get - disk encryption set","description":"Get the properties of a disk encryption - set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/write","displayName":"Create - or update disk encryption set","description":"Create a new disk encryption - set or update an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskEncryptionSets/delete","displayName":"Delete - disk encryption set","description":"Delete a disk encryption set","origin":"user,system","properties":null}]},{"name":"locations/vsmOperations","displayName":"Operation - for Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","operations":[{"name":"Microsoft.Compute/locations/vsmOperations/read","displayName":"Get - Operation for Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","description":"Gets the status of an asynchronous operation for - Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null}]},{"name":"galleries/applications","displayName":"GalleryApplications","operations":[{"name":"Microsoft.Compute/galleries/applications/read","displayName":"Get - Gallery Application","description":"Gets the properties of Gallery Application","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/write","displayName":"Create - or Update Gallery Application","description":"Creates a new Gallery Application - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/delete","displayName":"Delete - Gallery Application","description":"Deletes the Gallery Application","origin":"user,system","properties":null}]},{"name":"galleries/applications/versions","displayName":"GalleryApplicationVersions","operations":[{"name":"Microsoft.Compute/galleries/applications/versions/read","displayName":"Get - Gallery Application Version","description":"Gets the properties of Gallery - Application Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/write","displayName":"Create - or Update Gallery Application Version","description":"Creates a new Gallery - Application Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/galleries/applications/versions/delete","displayName":"Delete - Gallery Application Version","description":"Deletes the Gallery Application - Version","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/extensions/roles","displayName":"VirtualMachineScaleSet - Extensions Role","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/read","displayName":"Get - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Gets the properties of a Role in - a Virtual Machine Scale Set with the Virtual Machine Runtime Service Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/extensions/roles/write","displayName":"Update - properties of Role in a Virtual Machine Scale Set with the Virtual Machine - Runtime Service Extension","description":"Updates the properties of an existing - Role in a Virtual Machine Scale Set with the Virtual Machine Runtime Service - Extension","origin":"user,system","properties":null}]},{"name":"sshPublicKeys","displayName":"SSH - Public Keys","operations":[{"name":"Microsoft.Compute/sshPublicKeys/read","displayName":"Get - SSH Public Key","description":"Get the properties of an SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/write","displayName":"Create - or Update SSH Public Key","description":"Creates a new SSH public key or updates - an existing SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/delete","displayName":"Delete - SSH Public Key","description":"Deletes the SSH public key","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sshPublicKeys/generateKeyPair/action","displayName":"Generate - SSH Key Pair","description":"Generates a new SSH public/private key pair","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyAzureAsyncOperation","displayName":"PrivateEndpointConnectionProxy - AzureAsyncOperation","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyAzureAsyncOperation/read","displayName":"Get - PrivateEndpointConnectionProxy Operation","description":"Get the status of - asynchronous Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"locations/privateEndpointConnectionProxyOperationResults","displayName":"PrivateEndpointConnectionProxyOperation - Results","operations":[{"name":"Microsoft.Compute/locations/privateEndpointConnectionProxyOperationResults/read","displayName":"Get - PrivateEndpointConnectionProxyOperationResults","description":"Get the results - of Private Endpoint Connection Proxy operation","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions","displayName":"SharedVMExtensions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/read","displayName":"Get - Shared VM Extension","description":"Gets the properties of Shared VM Extension","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/write","displayName":"Create - or Update Shared VM Extension","description":"Creates a new Shared VM Extension - or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/delete","displayName":"Delete - Shared VM Extension","description":"Deletes the Shared VM Extension","origin":"user,system","properties":null}]},{"name":"sharedVMExtensions/versions","displayName":"SharedVMExtensionVersions","operations":[{"name":"Microsoft.Compute/sharedVMExtensions/versions/read","displayName":"Get - Shared VM Extension Version","description":"Gets the properties of Shared - VM Extension Version","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/write","displayName":"Create - or Update Shared VM Extension Version","description":"Creates a new Shared - VM Extension Version or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/sharedVMExtensions/versions/delete","displayName":"Delete - Shared VM Extension Version","description":"Deletes the Shared VM Extension - Version","origin":"user,system","properties":null}]},{"name":"diskAccesses","displayName":"DiskAccesses","operations":[{"name":"Microsoft.Compute/diskAccesses/read","displayName":"Get - DiskAccess","description":"Get the properties of DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/write","displayName":"Create - or Update DiskAccess","description":"Create a new DiskAccess resource or update - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/delete","displayName":"Delete - DiskAccess","description":"Delete a DiskAccess resource","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionsApproval/action","displayName":"Auto - Approve PrivateEndpointConnections","description":"Auto Approve a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnections","displayName":"DiskAccess - PrivateEndpointConnections","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/delete","displayName":"Delete - PrivateEndpointConnection","description":"Delete a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/read","displayName":"Get - PrivateEndpointConnection","description":"Get a Private Endpoint Connection","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnections/write","displayName":"Approve - or Reject PrivateEndpointConnection","description":"Approve or Reject a Private - Endpoint Connection","origin":"user,system","properties":null}]},{"name":"diskAccesses/privateEndpointConnectionProxies","displayName":"DiskAccess - PrivateEndpointConnection proxies","operations":[{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/read","displayName":"Get - PrivateEndpointConnectionProxy","description":"Get the properties of a private - endpoint connection proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/write","displayName":"Create - PrivateEndpointConnectionProxy","description":"Create a new Private Endpoint - Connection Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/delete","displayName":"Delete - PrivateEndpointConnectionProxy","description":"Delete a Private Endpoint Connection - Proxy","origin":"user,system","properties":null},{"name":"Microsoft.Compute/diskAccesses/privateEndpointConnectionProxies/validate/action","displayName":"Validate - PrivateEndpointConnectionProxy","description":"Validate a Private Endpoint - Connection Proxy object","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/extensions","displayName":"Extensions - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/read","displayName":"Get - extension for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of an extension for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/write","displayName":"Create - or Update extension for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new extension for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/extensions/delete","displayName":"Delete - extension for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the extension for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"cloudServices","displayName":"Cloud - Service Resource","operations":[{"name":"Microsoft.Compute/cloudServices/read","displayName":"Get - CloudService.","description":"Get the properties of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/write","displayName":"Create - or Update CloudService.","description":"Created a new CloudService or Update - an existing one.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete","displayName":"Delete - the CloudService.","description":"Deletes the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/poweroff/action","displayName":"Power - off the CloudService.","description":"Power off the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/start/action","displayName":"Starts - the CloudService.","description":"Starts the CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/restart/action","displayName":"Restarts - one or more role instances in a CloudService.","description":"Restarts one - or more role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/reimage/action","displayName":"Reimage - one or more role instances in a CloudService.","description":"Rebuilds all - the disks in the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/rebuild/action","displayName":"Rebuilds - all the disks in the role instances in a CloudService.","description":"Reimage - all the role instances in a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/delete/action","displayName":"Deletes - role instances in a CloudService.","description":"Deletes role instances in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/instanceView","displayName":"Cloud - Service Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/instanceView/read","displayName":"Gets - the status of a CloudService.","description":"Gets the status of a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances","displayName":"Cloud - Service Role Instance","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/delete","displayName":"Deletes - a RoleInstance from CloudService.","description":"Deletes a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/read","displayName":"Gets - a RoleInstance from CloudService.","description":"Gets a RoleInstance from - CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/restart/action","displayName":"Restart - a role instance of a CloudService","description":"Restart a role instance - of a CloudService","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/reimage/action","displayName":"Reimage - a role instance of a CloudService.","description":"Reimage a role instance - of a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roleInstances/rebuild/action","displayName":"Rebuild - all the disks in a CloudService.","description":"Rebuild all the disks in - a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/updateDomains","displayName":"Cloud - Service Update Domains.","operations":[{"name":"Microsoft.Compute/cloudServices/updateDomains/read","displayName":"Gets - a list of all update domains in a CloudService.","description":"Gets a list - of all update domains in a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/roleInstances/instanceView","displayName":"Cloud - Service RoleInstance Instance View.","operations":[{"name":"Microsoft.Compute/cloudServices/roleInstances/instanceView/read","displayName":"Gets - the status of a role instance from a CloudService.","description":"Gets the - status of a role instance from a CloudService.","origin":"user,system","properties":null}]},{"name":"cloudServices/providers/Microsoft.Insights/metricDefinitions","displayName":"Cloud - Services Metric Defintion.","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService metrics definition","description":"Gets the CloudService - metrics definition","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/roles","displayName":"CloudService - Roles","operations":[{"name":"Microsoft.Compute/cloudServices/roles/read","displayName":"Gets - a role from a CloudService.","description":"Gets a role from a CloudService.","origin":"user,system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/write","displayName":"Scale - instances in a Role","description":"Scale instances in a Role","origin":"user,system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/metricDefinitions","displayName":"CloudService - Roles Metric Definitions","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/metricDefinitions/read","displayName":"Gets - the CloudService Roles Metric Definitions","description":"Gets the CloudService - Roles Metric Definitions","origin":"system","properties":{"serviceSpecification":{"metricSpecifications":[{"name":"Percentage - CPU","displayName":"Percentage CPU","displayDescription":"The percentage of - allocated compute units that are currently in use by the Virtual Machine(s)","unit":"Percent","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Bytes","displayName":"Disk Read Bytes","displayDescription":"Bytes read - from disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Bytes","displayName":"Disk Write Bytes","displayDescription":"Bytes - written to disk during monitoring period","unit":"Bytes","aggregationType":"Total","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Read Operations/Sec","displayName":"Disk Read Operations/Sec","displayDescription":"Disk - Read IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]},{"name":"Disk - Write Operations/Sec","displayName":"Disk Write Operations/Sec","displayDescription":"Disk - Write IOPS","unit":"CountPerSecond","aggregationType":"Average","dimensions":[{"name":"RoleInstanceId","displayName":"RoleInstanceId","internalName":"RoleInstanceId","toBeExportedForShoebox":true},{"name":"RoleId","displayName":"RoleId","internalName":"RoleId","toBeExportedForShoebox":true}]}]}}}]},{"name":"cloudServices/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudServices - Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService.","origin":"system","properties":null}]},{"name":"cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings","displayName":"CloudService - Roles Diagnostic Settings","operations":[{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/read","displayName":"Read - the diagnostic setting","description":"Gets the diagnostic setting for the - CloudService Roles.","origin":"system","properties":null},{"name":"Microsoft.Compute/cloudServices/roles/providers/Microsoft.Insights/diagnosticSettings/write","displayName":"Write - diagnostic setting","description":"Creates or updates the diagnostic setting - for the CloudService Roles","origin":"system","properties":null}]},{"name":"virtualMachines/runCommands","displayName":"Virtual - Machine RunCommands","operations":[{"name":"Microsoft.Compute/virtualMachines/runCommands/read","displayName":"Get - Virtual Machine run command","description":"Get the properties of a virtual - machine run command","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/write","displayName":"Create - or Update Virtual Machine run command","description":"Creates a new virtual - machine run command or updates an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachines/runCommands/delete","displayName":"Delete - Virtual Machine run command","description":"Deletes the virtual machine run - command","origin":"user,system","properties":null}]},{"name":"virtualMachineScaleSets/virtualMachines/runCommands","displayName":"RunCommands - for Virtual Machines in Virtual Machine Scale Set","operations":[{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/read","displayName":"Get - run command for Virtual Machine in Virtual Machine Scale Set","description":"Get - the properties of a run command for Virtual Machine in Virtual Machine Scale - Set","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/write","displayName":"Create - or Update run command for Virtual Machine in Virtual Machine Scale Set","description":"Creates - a new run command for Virtual Machine in Virtual Machine Scale Set or updates - an existing one","origin":"user,system","properties":null},{"name":"Microsoft.Compute/virtualMachineScaleSets/virtualMachines/runCommands/delete","displayName":"Delete - run command for Virtual Machine in Virtual Machine Scale Set","description":"Deletes - the run command for Virtual Machine in Virtual Machine Scale Set","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults","displayName":"Patch - Installation Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/read","displayName":"Summarizes - latest patch installation operation results","description":"Retrieves the - summary of the latest patch installation operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchInstallationResults/softwarePatches","displayName":"Patch - Installation Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchInstallationResults/softwarePatches/read","displayName":"Lists - all patches considered in patch installation operation","description":"Retrieves - list of patches attempted to be installed during the last patch installation - operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest","displayName":"Patch - Assessment Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/read","displayName":"Summarizes - latest patch assessment operation results","description":"Retrieves the summary - of the latest patch assessment operation","origin":"user,system","properties":null}]},{"name":"virtualMachines/patchAssessmentResults/latest/softwarePatches","displayName":"Patch - Assessment Software Patches Results","operations":[{"name":"Microsoft.Compute/virtualMachines/patchAssessmentResults/latest/softwarePatches/read","displayName":"Lists - all patches assessed in patch assessment operation","description":"Retrieves - list of patches assessed during the last patch assessment operation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups/capacityReservations","displayName":"Capacity - Reservations","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/read","displayName":"Get - Capacity Reservation","description":"Get the properties of a capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/write","displayName":"Create - or Update Capacity Reservation","description":"Creates a new capacity reservation - or updates an existing capacity reservation","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/capacityReservations/delete","displayName":"Delete - Capacity Reservation","description":"Deletes the capacity reservation","origin":"user,system","properties":null}]},{"name":"capacityReservationGroups","displayName":"Capacity - Reservation Groups","operations":[{"name":"Microsoft.Compute/capacityReservationGroups/read","displayName":"Get - Capacity Reservation Group","description":"Get the properties of a capacity - reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/write","displayName":"Create - or Update Capacity Reservation Group","description":"Creates a new capacity - reservation group or updates an existing capacity reservation group","origin":"user,system","properties":null},{"name":"Microsoft.Compute/capacityReservationGroups/delete","displayName":"Delete - Capacity Reservation Group","description":"Deletes the capacity reservation - group","origin":"user,system","properties":null}]},{"name":"restorePointCollections/restorePoints/diskRestorePoints","displayName":"DiskRestorePoint","operations":[{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/read","displayName":"Get - incremental DiskRestorePoint","description":"Get the properties of an incremental - DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/beginGetAccess/action","displayName":"Get - incremental DiskRestorePoint SAS URI","description":"Get the SAS URI of the - incremental DiskRestorePoint","origin":"user,system","properties":null},{"name":"Microsoft.Compute/restorePointCollections/restorePoints/diskRestorePoints/endGetAccess/action","displayName":"Revoke - incremental DiskRestorePoint SAS URI","description":"Revoke the SAS URI of - the incremental DiskRestorePoint","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsVersions","displayName":"CloudService - OS Versions","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsVersions/read","displayName":"Read - Cloud Service OS Version","description":"Read any guest OS Version that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]},{"name":"locations/cloudServiceOsFamilies","displayName":"CloudService - OS Families","operations":[{"name":"Microsoft.Compute/locations/cloudServiceOsFamilies/read","displayName":"Read - Cloud Service OS Family","description":"Read any guest OS Family that can - be specified in the XML service configuration (.cscfg) for a Cloud Service.","origin":"user,system","properties":null}]}],"id":"/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute","type":"Microsoft.Authorization/providerOperations","name":"Microsoft.Compute"}' - headers: - cache-control: - - no-cache - content-length: - - '113662' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:42 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider operation show - Connection: - - keep-alive - ParameterSetName: - - --namespace - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.21 msrest_azure/0.6.3 - azure-mgmt-authorization/0.61.0 Azure-SDK-For-Python AZURECLI/2.21.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/providerOperations/microsoft.storage?api-version=2015-07-01&$expand=resourceTypes - response: - body: - string: "{\"displayName\":\"Microsoft Storage\",\"operations\":[{\"name\":\"Microsoft.Storage/register/action\",\"displayName\":\"Registers - the Storage Resource Provider\",\"description\":\"Registers the subscription - for the storage resource provider and enables the creation of storage accounts.\",\"origin\":null,\"properties\":null}],\"resourceTypes\":[{\"name\":\"locations\",\"displayName\":\"Location\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/deleteVirtualNetworkOrSubnets/action\",\"displayName\":\"Delete - virtual network or subnets notifications\",\"description\":\"Notifies Microsoft.Storage - that virtual network or subnet is being deleted\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices\",\"displayName\":\"Storage - Blob Services\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/read\",\"displayName\":\"List - Blob Services\",\"description\":\"List blob services\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/generateUserDelegationKey/action\",\"displayName\":\"Generate - a user delegation key\",\"description\":\"Returns a user delegation key for - the blob service\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/write\",\"displayName\":\"Put - blob service properties\",\"description\":\"Returns the result of put blob - service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/read\",\"displayName\":\"Get - blob service properties or statistics\",\"description\":\"Returns blob service - properties or statistics\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs\",\"displayName\":\"Storage - Blob Service Blobs\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read\",\"displayName\":\"Read - Blob\",\"description\":\"Returns a blob or a list of blobs\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write\",\"displayName\":\"Write - Blob\",\"description\":\"Returns the result of writing a blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/delete\",\"displayName\":\"Delete - blob\",\"description\":\"Returns the result of deleting a blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/deleteBlobVersion/action\",\"displayName\":\"Delete - blob versions\",\"description\":\"Returns the result of deleting a blob version\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/permanentDelete/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/add/action\",\"displayName\":\"Add - blob content\",\"description\":\"Returns the result of adding blob content\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/filter/action\",\"displayName\":\"Filter - blobs\",\"description\":\"Returns the list of blobs under an account with - matching tags filter\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/move/action\",\"displayName\":\"Move - blobs\",\"description\":\"Moves the blob from one path to another\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/manageOwnership/action\",\"displayName\":\"Manage - blob ownership\",\"description\":\"Changes ownership of the blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/modifyPermissions/action\",\"displayName\":\"Modify - blob permissions\",\"description\":\"Modifies permissions of the blob\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/runAsSuperUser/action\",\"displayName\":\"Execute - the command as super user\",\"description\":\"Returns the result of the blob - command\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers\",\"displayName\":\"Storage - Blob Service Containers\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\"displayName\":\"Patch - blob container\",\"description\":\"Returns the result of patch blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/delete\",\"displayName\":\"Delete - blob container\",\"description\":\"Returns the result of deleting a container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\"displayName\":\"Get - blob container\",\"description\":\"Returns a container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/read\",\"displayName\":\"List - of blob containers\",\"description\":\"Returns list of containers\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/lease/action\",\"displayName\":\"Lease - blob container\",\"description\":\"Returns the result of leasing blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/write\",\"displayName\":\"Put - blob container\",\"description\":\"Returns the result of put blob container\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/clearLegalHold/action\",\"displayName\":\"Clear - blob container legal hold\",\"description\":\"Clear blob container legal hold\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/setLegalHold/action\",\"displayName\":\"Set - blob container legal hold\",\"description\":\"Set blob container legal hold\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/immutabilityPolicies\",\"displayName\":\"Storage - Blob Service Containers ImmutabilityPolicy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/extend/action\",\"displayName\":\"Extend - blob container immutability policy\",\"description\":\"Extend blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/delete\",\"displayName\":\"Delete - blob container immutability policy\",\"description\":\"Delete blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/write\",\"displayName\":\"Put - blob container immutability policy\",\"description\":\"Put blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/lock/action\",\"displayName\":\"Lock - blob container immutability policy\",\"description\":\"Lock blob container - immutability policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/immutabilityPolicies/read\",\"displayName\":\"Get - blob container immutability policy\",\"description\":\"Get blob container - immutability policy\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices\",\"displayName\":\"Storage - Queue Services\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":\"Get - Queue service properties\",\"description\":\"Get Queue service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/read\",\"displayName\":\"Get - queue service properties or statistics\",\"description\":\"Returns queue service - properties or statistics.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/write\",\"displayName\":\"Set - queue service properties\",\"description\":\"Returns the result of setting - queue service properties\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/queues\",\"displayName\":\"Storage - Queue Service Queues\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/read\",\"displayName\":\"Read - a queue or list queues\",\"description\":\"Returns a queue or a list of queues.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/write\",\"displayName\":\"Write - queue\",\"description\":\"Returns the result of writing a queue\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/delete\",\"displayName\":\"Delete - queue\",\"description\":\"Returns the result of deleting a queue\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/queues/messages\",\"displayName\":\"Storage - Queue Service Messages\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/read\",\"displayName\":\"Read - message\",\"description\":\"Returns a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/write\",\"displayName\":\"Write - message\",\"description\":\"Returns the result of writing a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/delete\",\"displayName\":\"Delete - message\",\"description\":\"Returns the result of deleting a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/add/action\",\"displayName\":\"Add - message\",\"description\":\"Returns the result of adding a message\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/queues/messages/process/action\",\"displayName\":\"Process - message\",\"description\":\"Returns the result of processing a message\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/updateInternalProperties/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/hnsonmigration/action\",\"displayName\":\"Abort - Account HnsOn Migration\",\"description\":\"Customer is able to abort an ongoing - Hns migration on the storage account\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/hnsonmigration/action\",\"displayName\":\"Account - HnsOn Migration\",\"description\":\"Customer is able to migrate to hns account - type\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/restoreBlobRanges/action\",\"displayName\":\"Restore - blob ranges\",\"description\":\"Restore blob ranges to the state of the specified - time\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/PrivateEndpointConnectionsApproval/action\",\"displayName\":\"Approve - Private Endpoint Connections\",\"description\":\"Approve Private Endpoint - Connections\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/failover/action\",\"displayName\":\"Storage - Account Failover\",\"description\":\"Customer is able to control the failover - in case of availability issues\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listkeys/action\",\"displayName\":\"List - Storage Account Keys\",\"description\":\"Returns the access keys for the specified - storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/regeneratekey/action\",\"displayName\":\"Regenerate - Storage Account Keys\",\"description\":\"Regenerates the access keys for the - specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/revokeUserDelegationKeys/action\",\"displayName\":\"Revoke - Storage Account User Delegation Keys\",\"description\":\"Revokes all the user - delegation keys for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/delete\",\"displayName\":\"Delete - Storage Account\",\"description\":\"Deletes an existing storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/read\",\"displayName\":\"List/Get - Storage Account(s)\",\"description\":\"Returns the list of storage accounts - or gets the properties for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listAccountSas/action\",\"displayName\":\"Returns - Storage Account SAS Token\",\"description\":\"Returns the Account SAS token - for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/listServiceSas/action\",\"displayName\":\"Returns - Storage Service SAS Token\",\"description\":\"Returns the Service SAS token - for the specified storage account.\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/write\",\"displayName\":\"Create/Update - Storage Account\",\"description\":\"Creates a storage account with the specified - parameters or update the properties or tags or adds custom domain for the - specified storage account.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/services/diagnosticSettings\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/services/diagnosticSettings/write\",\"displayName\":\"Create/Update - Diagnostic Settings\",\"description\":\"Create/Update storage account diagnostic - settings.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"UsedCapacity\",\"displayName\":\"Used - capacity\",\"displayDescription\":\"The amount of storage used by the storage - account. For standard storage accounts, it's the sum of capacity used by blob, - table, file, and queue. For premium storage accounts and Blob storage accounts, - it is the same as BlobCapacity or FileCapacity.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"resourceIdDimensionNameOverride\":\"AccountResourceId\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Storage - Accounts\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Blob - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"BlobCapacity\",\"displayName\":\"Blob - Capacity\",\"displayDescription\":\"The amount of storage used by the storage - account\u2019s Blob service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"BlobCount\",\"displayName\":\"Blob - Count\",\"displayDescription\":\"The number of blob objects stored in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"BlobProvisionedSize\",\"displayName\":\"Blob - Provisioned Size\",\"displayDescription\":\"The amount of storage provisioned - in the storage account\u2019s Blob service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"BlobType\",\"displayName\":\"Blob - type\",\"toBeExportedForShoebox\":true},{\"name\":\"Tier\",\"displayName\":\"Blob - tier\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"],\"metricFilterPattern\":\"Premium\"},{\"name\":\"ContainerCount\",\"displayName\":\"Blob - Container Count\",\"displayDescription\":\"The number of containers in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"IndexCapacity\",\"displayName\":\"Index - Capacity\",\"displayDescription\":\"The amount of storage used by Azure Data - Lake Storage Gen2 hierarchical index.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Blob - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Table - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"TableCapacity\",\"displayName\":\"Table - Capacity\",\"displayDescription\":\"The amount of Table storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"TableCount\",\"displayName\":\"Table - Count\",\"displayDescription\":\"The number of tables in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"TableEntityCount\",\"displayName\":\"Table - Entity Count\",\"displayDescription\":\"The number of table entities in the - storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Table - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"File - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"FileCapacity\",\"displayName\":\"File - Capacity\",\"displayDescription\":\"The amount of File storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileCount\",\"displayName\":\"File - Count\",\"displayDescription\":\"The number of files in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareCount\",\"displayName\":\"File - Share Count\",\"displayDescription\":\"The number of file shares in the storage - account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareSnapshotCount\",\"displayName\":\"File - Share Snapshot Count\",\"displayDescription\":\"The number of snapshots present - on the share in storage account\u2019s Files Service.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareSnapshotSize\",\"displayName\":\"File - Share Snapshot Size\",\"displayDescription\":\"The amount of storage used - by the snapshots in storage account\u2019s File service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareCapacityQuota\",\"internalMetricName\":\"FileShareQuota\",\"displayName\":\"File - Share Capacity Quota\",\"displayDescription\":\"The upper limit on the amount - of storage that can be used by Azure Files Service in bytes.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"FileShareProvisionedIOPS\",\"displayName\":\"File - Share Provisioned IOPS\",\"displayDescription\":\"The baseline number of provisioned - IOPS for the premium file share in the premium files storage account. This - number is calculated based on the provisioned size (quota) of the share capacity.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"lockAggregationType\":\"Total\",\"dimensions\":[{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"],\"metricFilterPattern\":\"Premium\"},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true},{\"name\":\"FileShare\",\"displayName\":\"File - Share\",\"toBeExportedForShoebox\":true,\"internalName\":\"Container\"}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"File - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/metricDefinitions\",\"displayName\":\"Queue - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/metricDefinitions/read\",\"displayName\":\"Get - list of Microsoft Storage Metrics definitions\",\"description\":\"Get list - of Microsoft Storage Metrics definitions.\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"metricSpecifications\":[{\"name\":\"QueueCapacity\",\"displayName\":\"Queue - Capacity\",\"displayDescription\":\"The amount of Queue storage used by the - storage account.\",\"unit\":\"Bytes\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"QueueCount\",\"displayName\":\"Queue - Count\",\"displayDescription\":\"The number of queues in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"QueueMessageCount\",\"displayName\":\"Queue - Message Count\",\"displayDescription\":\"The number of unexpired queue messages - in the storage account.\",\"unit\":\"Count\",\"aggregationType\":\"Average\",\"fillGapWithZero\":false,\"category\":\"Capacity\",\"supportedTimeGrainTypes\":[\"PT1H\"],\"supportedAggregationTypes\":[\"Average\"]},{\"name\":\"Transactions\",\"displayName\":\"Transactions\",\"displayDescription\":\"The - number of requests made to a storage service or the specified API operation. - This number includes successful and failed requests, as well as requests which - produced errors. Use ResponseType dimension for the number of different type - of response.\",\"unit\":\"Count\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"ResponseType\",\"displayName\":\"Response - type\",\"toBeExportedForShoebox\":true},{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\"]},{\"name\":\"Ingress\",\"displayName\":\"Ingress\",\"displayDescription\":\"The - amount of ingress data, in bytes. This number includes ingress from an external - client into Azure Storage as well as ingress within Azure.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Egress\",\"displayName\":\"Egress\",\"displayDescription\":\"The - amount of egress data. This number includes egress to external client from - Azure Storage as well as egress within Azure. As a result, this number does - not reflect billable egress.\",\"unit\":\"Bytes\",\"aggregationType\":\"Total\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":true,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Total\",\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessServerLatency\",\"displayName\":\"Success - Server Latency\",\"displayDescription\":\"The average time used to process - a successful request by Azure Storage. This value does not include the network - latency specified in SuccessE2ELatency.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"SuccessE2ELatency\",\"displayName\":\"Success - E2E Latency\",\"displayDescription\":\"The average end-to-end latency of successful - requests made to a storage service or the specified API operation, in milliseconds. - This value includes the required processing time within Azure Storage to read - the request, send the response, and receive acknowledgment of the response.\",\"unit\":\"Milliseconds\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]},{\"name\":\"Availability\",\"displayName\":\"Availability\",\"displayDescription\":\"The - percentage of availability for the storage service or the specified API operation. - Availability is calculated by taking the TotalBillableRequests value and dividing - it by the number of applicable requests, including those that produced unexpected - errors. All unexpected errors result in reduced availability for the storage - service or the specified API operation.\",\"unit\":\"Percent\",\"aggregationType\":\"Average\",\"dimensions\":[{\"name\":\"GeoType\",\"displayName\":\"Geo - type\",\"toBeExportedForShoebox\":true},{\"name\":\"ApiName\",\"displayName\":\"API - name\",\"toBeExportedForShoebox\":true},{\"name\":\"Authentication\",\"displayName\":\"Authentication\",\"toBeExportedForShoebox\":true}],\"fillGapWithZero\":false,\"category\":\"Transaction\",\"supportedAggregationTypes\":[\"Average\",\"Minimum\",\"Maximum\"]}]}}}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings\",\"displayName\":\"Queue - service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings/read\",\"displayName\":\"Read - diagnostic setting\",\"description\":\"Gets the diagnostic setting for the - resource.\",\"origin\":\"system\",\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/diagnosticSettings/write\",\"displayName\":\"Write - diagnostic setting\",\"description\":\"Creates or updates the diagnostic setting - for the resource.\",\"origin\":\"system\",\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Table - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Table\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/blobServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Blob - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Blob\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/fileServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"File - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for File\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"storageAccounts/queueServices/providers/Microsoft.Insights/logDefinitions\",\"displayName\":\"Queue - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/queueServices/providers/Microsoft.Insights/logDefinitions/read\",\"displayName\":\"Read - log definition\",\"description\":\"Gets the log definition for Queue\",\"origin\":\"system\",\"properties\":{\"serviceSpecification\":{\"logSpecifications\":[{\"name\":\"StorageRead\",\"displayName\":\"StorageRead\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageWrite\",\"displayName\":\"StorageWrite\",\"blobDuration\":\"PT1H\"},{\"name\":\"StorageDelete\",\"displayName\":\"StorageDelete\",\"blobDuration\":\"PT1H\"}]}}}]},{\"name\":\"skus\",\"displayName\":\"Sku\",\"operations\":[{\"name\":\"Microsoft.Storage/skus/read\",\"displayName\":\"List - Skus\",\"description\":\"Lists the Skus supported by Microsoft.Storage.\",\"origin\":null,\"properties\":null}]},{\"name\":\"operations\",\"displayName\":\"Operations\",\"operations\":[{\"name\":\"Microsoft.Storage/operations/read\",\"displayName\":\"Poll - Asynchronous Operation\",\"description\":\"Polls the status of an asynchronous - operation.\",\"origin\":null,\"properties\":null}]},{\"name\":\"checknameavailability\",\"displayName\":\"Name - Availability\",\"operations\":[{\"name\":\"Microsoft.Storage/checknameavailability/read\",\"displayName\":\"Check - Name Availability\",\"description\":\"Checks that account name is valid and - is not in use.\",\"origin\":null,\"properties\":null}]},{\"name\":\"locations/usages\",\"displayName\":\"Usage - Metrics\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/usages/read\",\"displayName\":\"Get - Subscription Usages\",\"description\":\"Returns the limit and the current - usage count for resources in the specified subscription\",\"origin\":null,\"properties\":null}]},{\"name\":\"usages\",\"displayName\":\"Usage - Metrics\",\"operations\":[{\"name\":\"Microsoft.Storage/usages/read\",\"displayName\":\"Get - Subscription Usages\",\"description\":\"Returns the limit and the current - usage count for resources in the specified subscription\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs/tags\",\"displayName\":\"Storage - Blob Service Blobs\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read\",\"displayName\":\"Read - blob tags\",\"description\":\"Returns the result of reading blob tags\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write\",\"displayName\":\"Write - blob tags\",\"description\":\"Returns the result of writing blob tags\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/managementPolicies\",\"displayName\":\"Storage - Account Management Policies\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/delete\",\"displayName\":\"Delete - storage account management policies\",\"description\":\"Delete storage account - management policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/read\",\"displayName\":\"Get - storage account management policies\",\"description\":\"Get storage management - account policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/managementPolicies/write\",\"displayName\":\"Put - storage account management policies\",\"description\":\"Put storage account - management policies\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices\",\"displayName\":\"File - Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/action\",\"displayName\":\"Restore - File Share\",\"description\":\"Restore file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/read\",\"displayName\":\"List - File Services\",\"description\":\"List file services\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/write\",\"displayName\":\"Put - File Service Properties\",\"description\":\"Put file service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/read\",\"displayName\":\"Get - file service properties\",\"description\":\"Get file service properties\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/tableServices\",\"displayName\":\"Storage - Table Service\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/read\",\"displayName\":\"Get - Table service properties\",\"description\":\"Get Table service properties\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/fileshares/files\",\"displayName\":\"Storage - File Service Files\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/read\",\"displayName\":\"Read - Files\",\"description\":\"Returns a file/folder or a list of files/folders\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/write\",\"displayName\":\"Write - Files\",\"description\":\"Returns the result of writing a file or creating - a folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/delete\",\"displayName\":\"Delete - Files\",\"description\":\"Returns the result of deleting a file/folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/modifypermissions/action\",\"displayName\":\"Modify - File Acl\",\"description\":\"Returns the result of modifying permission on - a file/folder\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/fileshares/files/actassuperuser/action\",\"displayName\":\"Get - File Admin Privileges\",\"description\":\"Get File Admin Privileges\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateEndpointConnectionProxies\",\"displayName\":\"Storage - Account Private Endpoint Connection Proxy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/read\",\"displayName\":\"Get - Private Endpoint Connection Proxy\",\"description\":\"Get Private Endpoint - Connection Proxy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/delete\",\"displayName\":\"Delete - Private Endpoint Connection Proxies\",\"description\":\"Delete Private Endpoint - Connection Proxies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnectionProxies/write\",\"displayName\":\"Put - Private Endpoint Connection Proxies\",\"description\":\"Put Private Endpoint - Connection Proxies\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateEndpointConnections\",\"displayName\":\"Storage - Account Private Endpoint Connection\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/read\",\"displayName\":\"List - Private Endpoint Connections\",\"description\":\"List Private Endpoint Connections\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/delete\",\"displayName\":\"Delete - Private Endpoint Connection\",\"description\":\"Delete Private Endpoint Connection\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/read\",\"displayName\":\"Get - Private Endpoint Connection\",\"description\":\"Get Private Endpoint Connection\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/write\",\"displayName\":\"Put - Private Endpoint Connection\",\"description\":\"Put Private Endpoint Connection\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/privateLinkResources\",\"displayName\":\"Storage - account groupids\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/privateLinkResources/read\",\"displayName\":\"Get - StorageAccount groupids\",\"description\":\"Get StorageAccount groupids\",\"origin\":null,\"properties\":null}]},{\"name\":\"locations/checknameavailability\",\"displayName\":\"Name - Availability\",\"operations\":[{\"name\":\"Microsoft.Storage/locations/checknameavailability/read\",\"displayName\":\"Check - Name Availability\",\"description\":\"Checks that account name is valid and - is not in use.\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/fileServices/shares\",\"displayName\":\"File - Share\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/delete\",\"displayName\":\"Delete - File Share\",\"description\":\"Delete file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/read\",\"displayName\":\"Get - File Share\",\"description\":\"Get file share\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/lease/action\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/read\",\"displayName\":\"List - File Shares\",\"description\":\"List file shares\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/fileServices/shares/write\",\"displayName\":\"Put - File Share\",\"description\":\"Create or update file share\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/encryptionScopes\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/encryptionScopes/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/objectReplicationPolicies\",\"displayName\":\"Object - Replication Policy\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/delete\",\"displayName\":\"Delete - Object Replication Policy\",\"description\":\"Delete object replication policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/read\",\"displayName\":\"Get - Object Replication Policy\",\"description\":\"Get object replication policy\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/read\",\"displayName\":\"List - Object Replication Policies\",\"description\":\"List object replication policies\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/objectReplicationPolicies/write\",\"displayName\":\"Put - Object Replication Policy\",\"description\":\"Create or update object replication - policy\",\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/dataSharePolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/dataSharePolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/localUsers\",\"displayName\":\"Local - User\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/localUsers/delete\",\"displayName\":\"Delete - Local User\",\"description\":\"Delete local user\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/listKeys/action\",\"displayName\":\"List - Local User Keys\",\"description\":\"List local user keys\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/read\",\"displayName\":\"List - Local Users\",\"description\":\"List local users\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/read\",\"displayName\":\"Get - Local User\",\"description\":\"Get local user\",\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/localusers/write\",\"displayName\":\"Put - Local User\",\"description\":\"Create or update local user\",\"origin\":null,\"properties\":null}]},{\"name\":\"deletedAccounts\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/deletedAccounts/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/tableServices/tables\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/tableServices/tables/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/inventoryPolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/inventoryPolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/accountLocks\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/accountLocks/delete\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/consumerDataSharePolicies\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/consumerDataSharePolicies/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null},{\"name\":\"Microsoft.Storage/storageAccounts/consumerDataSharePolicies/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"resilienciesProgressions\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/resilienciesProgressions/read\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]},{\"name\":\"storageAccounts/blobServices/containers/blobs/worm\",\"displayName\":\"\",\"operations\":[{\"name\":\"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/worm/write\",\"displayName\":null,\"description\":null,\"origin\":null,\"properties\":null}]}],\"id\":\"/providers/Microsoft.Authorization/providerOperations/Microsoft.Storage\",\"type\":\"Microsoft.Authorization/providerOperations\",\"name\":\"Microsoft.Storage\"}" - headers: - cache-control: - - no-cache - content-length: - - '66805' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:43 GMT - expires: - - '-1' - pragma: - - no-cache - set-cookie: - - x-ms-gateway-slice=Production; path=/; secure; samesite=none; httponly - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_registration.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_registration.yaml deleted file mode 100644 index 901ef44a405..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_provider_registration.yaml +++ /dev/null @@ -1,269 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistered"}' - headers: - cache-control: - - no-cache - content-length: - - '1097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider register - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Registering"}' - headers: - cache-control: - - no-cache - content-length: - - '1096' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Registering"}' - headers: - cache-control: - - no-cache - content-length: - - '1096' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider unregister - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate/unregister?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistering"}' - headers: - cache-control: - - no-cache - content-length: - - '1098' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:41 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - provider show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.ClassicInfrastructureMigrate","namespace":"Microsoft.ClassicInfrastructureMigrate","authorization":{"applicationId":"5e5abe2b-83cd-4786-826a-a05653ebb103","roleDefinitionId":"766c4d9b-ef83-4f73-8352-1450a506a69b"},"resourceTypes":[{"resourceType":"classicInfrastructureResources","locations":["East - Asia","Southeast Asia","East US","East US 2","West US","North Central US","South - Central US","Central US","North Europe","West Europe","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","West - India","South India","Canada Central","Canada East","West US 2","West Central - US","UK South","UK West","Korea Central","Korea South","France Central","France - South","Australia Central","Australia Central 2","Germany North","Germany - West Central","Norway East","Norway West","South Africa North","South Africa - West","Switzerland North","Switzerland West","UAE Central","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2015-06-15"]}],"registrationState":"Unregistering"}' - headers: - cache-control: - - no-cache - content-length: - - '1098' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_group_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_group_lock.yaml deleted file mode 100644 index 859947ac61e..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_group_lock.yaml +++ /dev/null @@ -1,434 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "ReadOnly"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '37' - Content-Type: - - application/json - ParameterSetName: - - -n -g --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock7m7jrwusfktk4ogpzlwfuowrx3qirstphwtq5eml2qluvjhyv66mzf2n/providers/Microsoft.Authorization/locks/cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - -g --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}]}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock7m7jrwusfktk4ogpzlwfuowrx3qirstphwtq5eml2qluvjhyv66mzf2n/providers/Microsoft.Authorization/locks/cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16097' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '371' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete", "notes": "notes000003"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '74' - Content-Type: - - application/json - ParameterSetName: - - -n -g --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete","notes":"notes000003"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002","type":"Microsoft.Authorization/locks","name":"cli-test-lock000002"}' - headers: - cache-control: - - no-cache - content-length: - - '406' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"notes000003\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000002\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"noteszjlc35wqjiicte3\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_lock7m7jrwusfktk4ogpzlwfuowrx3qirstphwtq5eml2qluvjhyv66mzf2n/providers/Microsoft.Authorization/locks/cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockysqimzndreyplo46t6jy4wbqyub52voktns\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes6jp7vozgbgpmsd5\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_group_lockhxwttxjncyqpls625afmdvfkkcrsn5d4dh/providers/Microsoft.Authorization/locks/cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock27jmms6nac4kyiid7w2p6idgx443s5s2qnz\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '16186' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_group_lock000001/providers/Microsoft.Authorization/locks/cli-test-lock000002?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_lock.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_lock.yaml deleted file mode 100644 index f517216e411..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_readonly_resource_lock.yaml +++ /dev/null @@ -1,658 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001","name":"cli_test_readonly_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:33:32Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"1b3f0d8c-65b6-4e1e-b9b1-adf401d5d1bc\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"6b79bca8-b6ff-4106-950c-5769d524e822\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/33ceb4ea-f404-49ac-b17a-30fe2c6fe75d?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 05355810-6592-4163-99d2-49085d13d339 - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/33ceb4ea-f404-49ac-b17a-30fe2c6fe75d?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 012989ee-1435-429b-9506-426d3e151a5f - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"6d1e771c-dbff-4cfc-9c9e-d18687d589e0\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"6b79bca8-b6ff-4106-950c-5769d524e822\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:43 GMT - etag: - - W/"6d1e771c-dbff-4cfc-9c9e-d18687d589e0" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 881d1a38-0ce0-4037-a85d-f7a992c22b87 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock create - Connection: - - keep-alive - Content-Length: - - '37' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:44 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock list - Connection: - - keep-alive - ParameterSetName: - - --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15472' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '498' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock update - Connection: - - keep-alive - Content-Length: - - '74' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '533' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15507' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_create_and_show.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_create_and_show.yaml deleted file mode 100644 index f636c45f4b2..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_create_and_show.yaml +++ /dev/null @@ -1,2855 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --is-full-object --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.web?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '62820' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "sku": {"name": "B1", "tier": "BASIC"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '62' - Content-Type: - - application/json - ParameterSetName: - - -g -n --resource-type --is-full-object --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001/providers/Microsoft.web/serverFarms/cli_res_create_plan?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/serverfarms/cli_res_create_plan","name":"cli_res_create_plan","type":"Microsoft.Web/serverfarms","kind":"app","location":"westus","properties":{"serverFarmId":45428,"name":"cli_res_create_plan","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"workerSize":"Default","workerSizeId":0,"workerTierName":null,"numberOfWorkers":1,"currentWorkerSize":"Default","currentWorkerSizeId":0,"currentNumberOfWorkers":1,"status":"Ready","webSpace":"cli_test_resource_create000001-WestUSwebspace","subscription":"0b1f6471-1bf0-4dda-aec3-cb9272f09590","adminSiteName":null,"hostingEnvironment":null,"hostingEnvironmentProfile":null,"maximumNumberOfWorkers":0,"planName":"VirtualDedicatedPlan","adminRuntimeSiteName":null,"computeMode":"Dedicated","siteMode":null,"geoRegion":"West - US","perSiteScaling":false,"maximumElasticWorkerCount":1,"numberOfSites":0,"hostingEnvironmentId":null,"isSpot":false,"spotExpirationTime":null,"freeOfferExpirationTime":null,"tags":null,"kind":"app","resourceGroup":"cli_test_resource_create000001","reserved":false,"isXenon":false,"hyperV":false,"mdmId":"waws-prod-bay-113_45428","targetWorkerCount":0,"targetWorkerSizeId":0,"provisioningState":"Succeeded","webSiteId":null,"existingServerFarmIds":null,"kubeEnvironmentProfile":null,"azBalancing":false},"sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1}}' - headers: - cache-control: - - no-cache - content-length: - - '1631' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:05 GMT - etag: - - '"1D734FF46B52360"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1192' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.web?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '62820' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001","name":"cli_test_resource_create000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:53Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"serverFarmId": "cli_res_create_plan"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '77' - Content-Type: - - application/json - ParameterSetName: - - -g -n --resource-type --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001/providers/Microsoft.web/sites/clirescreateweb?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb","name":"clirescreateweb","type":"Microsoft.Web/sites","kind":"app","location":"westus","properties":{"name":"clirescreateweb","state":"Running","hostNames":["clirescreateweb.azurewebsites.net"],"webSpace":"cli_test_resource_create000001-WestUSwebspace","selfLink":"https://waws-prod-bay-113.api.azurewebsites.windows.net:454/subscriptions/00000000-0000-0000-0000-000000000000/webspaces/cli_test_resource_create000001-WestUSwebspace/sites/clirescreateweb","repositorySiteName":"clirescreateweb","owner":null,"usageState":"Normal","enabled":true,"adminEnabled":true,"enabledHostNames":["clirescreateweb.azurewebsites.net","clirescreateweb.scm.azurewebsites.net"],"siteProperties":{"metadata":null,"properties":[{"name":"LinuxFxVersion","value":""},{"name":"WindowsFxVersion","value":null}],"appSettings":null},"availabilityState":"Normal","sslCertificates":null,"csrs":[],"cers":null,"siteMode":null,"hostNameSslStates":[{"name":"clirescreateweb.azurewebsites.net","sslState":"Disabled","ipBasedSslResult":null,"virtualIP":null,"thumbprint":null,"toUpdate":null,"toUpdateIpBasedSsl":null,"ipBasedSslState":"NotConfigured","hostType":"Standard"},{"name":"clirescreateweb.scm.azurewebsites.net","sslState":"Disabled","ipBasedSslResult":null,"virtualIP":null,"thumbprint":null,"toUpdate":null,"toUpdateIpBasedSsl":null,"ipBasedSslState":"NotConfigured","hostType":"Repository"}],"computeMode":null,"serverFarm":null,"serverFarmId":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/serverfarms/cli_res_create_plan","reserved":false,"isXenon":false,"hyperV":false,"lastModifiedTimeUtc":"2021-04-19T09:35:10.59","storageRecoveryDefaultState":"Running","contentAvailabilityState":"Normal","runtimeAvailabilityState":"Normal","siteConfig":{"numberOfWorkers":null,"defaultDocuments":null,"netFrameworkVersion":null,"phpVersion":null,"pythonVersion":null,"nodeVersion":null,"powerShellVersion":null,"linuxFxVersion":null,"windowsFxVersion":null,"requestTracingEnabled":null,"remoteDebuggingEnabled":null,"remoteDebuggingVersion":null,"httpLoggingEnabled":null,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":null,"detailedErrorLoggingEnabled":null,"publishingUsername":null,"publishingPassword":null,"appSettings":null,"azureStorageAccounts":null,"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":null,"use32BitWorkerProcess":null,"webSocketsEnabled":null,"alwaysOn":null,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":null,"managedPipelineMode":null,"virtualApplications":null,"winAuthAdminState":null,"winAuthTenantState":null,"customAppPoolIdentityAdminState":null,"customAppPoolIdentityTenantState":null,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":null,"routingRules":null,"experiments":null,"limits":null,"autoHealEnabled":null,"autoHealRules":null,"tracingOptions":null,"vnetName":null,"vnetRouteAllEnabled":null,"vnetPrivatePortsCount":null,"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":null,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":null,"http20Enabled":null,"minTlsVersion":null,"scmMinTlsVersion":null,"ftpsState":null,"preWarmedInstanceCount":null,"functionAppScaleLimit":null,"healthCheckPath":null,"fileChangeAuditEnabled":null,"functionsRuntimeScaleMonitoringEnabled":null,"websiteTimeZone":null,"minimumElasticInstanceCount":0},"deploymentId":"clirescreateweb","slotName":null,"trafficManagerHostNames":null,"sku":"Basic","scmSiteAlsoStopped":false,"targetSwapSlot":null,"hostingEnvironment":null,"hostingEnvironmentProfile":null,"clientAffinityEnabled":true,"clientCertEnabled":false,"clientCertMode":"Required","clientCertExclusionPaths":null,"hostNamesDisabled":false,"domainVerificationIdentifiers":null,"customDomainVerificationId":"253001F2FCF5A7B1CD759EB861E9BB1596370BE27E47A991F72184277B3D12F2","kind":"app","inboundIpAddress":"40.78.48.219","possibleInboundIpAddresses":"40.78.48.219","ftpUsername":"clirescreateweb\\$clirescreateweb","ftpsHostName":"ftps://waws-prod-bay-113.ftp.azurewebsites.windows.net/site/wwwroot","outboundIpAddresses":"40.78.48.219,104.40.3.246,104.40.8.50,104.40.4.179,104.40.14.83","possibleOutboundIpAddresses":"40.78.48.219,104.40.3.246,104.40.8.50,104.40.4.179,104.40.14.83,104.40.12.222,104.40.2.67,104.40.9.121","containerSize":0,"dailyMemoryTimeQuota":0,"suspendedTill":null,"siteDisabledReason":0,"functionExecutionUnitsCache":null,"maxNumberOfWorkers":null,"homeStamp":"waws-prod-bay-113","cloningInfo":null,"hostingEnvironmentId":null,"tags":null,"resourceGroup":"cli_test_resource_create000001","defaultHostName":"clirescreateweb.azurewebsites.net","slotSwapStatus":null,"keyVaultReferenceIdentity":"SystemAssigned","httpsOnly":false,"redundancyMode":"None","inProgressOperationId":null,"geoDistributions":null,"privateEndpointConnections":null,"buildVersion":null,"targetBuildVersion":null,"migrationState":null,"eligibleLogCategories":"AppServiceAppLogs,AppServiceAuditLogs,AppServiceConsoleLogs,AppServiceHTTPLogs,AppServiceIPSecAuditLogs,AppServicePlatformLogs,ScanLogs","storageAccountRequired":false}}' - headers: - cache-control: - - no-cache - content-length: - - '6027' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:28 GMT - etag: - - '"1D734FF4ACB61EB"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-resource-requests: - - '499' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '62820' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_create000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001","name":"cli_test_resource_create000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:53Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:29 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "properties": {"key2": "value12"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource create - Connection: - - keep-alive - Content-Length: - - '57' - Content-Type: - - application/json - ParameterSetName: - - --id --properties - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/appsettings?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/appsettings","name":"appsettings","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"key2":"value12"}}' - headers: - cache-control: - - no-cache - content-length: - - '326' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:30 GMT - etag: - - '"1D734FF5654F9B5"' - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '62820' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web","name":"clirescreateweb","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"numberOfWorkers":1,"defaultDocuments":["Default.htm","Default.html","Default.asp","index.htm","index.html","iisstart.htm","default.aspx","index.php","hostingstart.html"],"netFrameworkVersion":"v4.0","phpVersion":"5.6","pythonVersion":"","nodeVersion":"","powerShellVersion":"","linuxFxVersion":"","windowsFxVersion":null,"requestTracingEnabled":false,"remoteDebuggingEnabled":false,"remoteDebuggingVersion":null,"httpLoggingEnabled":false,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":35,"detailedErrorLoggingEnabled":false,"publishingUsername":"$clirescreateweb","publishingPassword":null,"appSettings":null,"azureStorageAccounts":{},"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":"None","use32BitWorkerProcess":true,"webSocketsEnabled":false,"alwaysOn":false,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":"","managedPipelineMode":"Integrated","virtualApplications":[{"virtualPath":"/","physicalPath":"site\\wwwroot","preloadEnabled":false,"virtualDirectories":null}],"winAuthAdminState":0,"winAuthTenantState":0,"customAppPoolIdentityAdminState":false,"customAppPoolIdentityTenantState":false,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":"LeastRequests","routingRules":[],"experiments":{"rampUpRules":[]},"limits":null,"autoHealEnabled":false,"autoHealRules":null,"tracingOptions":null,"vnetName":"","vnetRouteAllEnabled":false,"vnetPrivatePortsCount":0,"siteAuthEnabled":false,"siteAuthSettings":{"enabled":null,"configVersion":null,"unauthenticatedClientAction":null,"tokenStoreEnabled":null,"allowedExternalRedirectUrls":null,"defaultProvider":null,"clientId":null,"clientSecret":null,"clientSecretSettingName":null,"clientSecretCertificateThumbprint":null,"issuer":null,"allowedAudiences":null,"additionalLoginParams":null,"isAadAutoProvisioned":false,"aadClaimsAuthorization":null,"googleClientId":null,"googleClientSecret":null,"googleClientSecretSettingName":null,"googleOAuthScopes":null,"facebookAppId":null,"facebookAppSecret":null,"facebookAppSecretSettingName":null,"facebookOAuthScopes":null,"gitHubClientId":null,"gitHubClientSecret":null,"gitHubClientSecretSettingName":null,"gitHubOAuthScopes":null,"twitterConsumerKey":null,"twitterConsumerSecret":null,"twitterConsumerSecretSettingName":null,"microsoftAccountClientId":null,"microsoftAccountClientSecret":null,"microsoftAccountClientSecretSettingName":null,"microsoftAccountOAuthScopes":null},"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":false,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":false,"http20Enabled":false,"minTlsVersion":"1.2","scmMinTlsVersion":"1.0","ftpsState":"AllAllowed","preWarmedInstanceCount":0,"functionAppScaleLimit":0,"healthCheckPath":null,"fileChangeAuditEnabled":false,"functionsRuntimeScaleMonitoringEnabled":false,"websiteTimeZone":null,"minimumElasticInstanceCount":0}}' - headers: - cache-control: - - no-cache - content-length: - - '3698' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id --include-response-body - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Web","namespace":"Microsoft.Web","authorization":{"applicationId":"abfa0a7c-a6b6-4736-8310-5855508787cd","roleDefinitionId":"f47ed98b-b063-4a5b-9e10-4b9b44fa7735"},"resourceTypes":[{"resourceType":"publishingUsers","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostnameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"validate","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT - North Europe","East US 2 (Stage)","East Asia (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"isusernameavailable","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"generateGithubAccessTokenForAppserviceCLI","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway East","UAE North","Switzerland North","North Central US","UK - West","Australia Southeast","Korea South","Canada Central","West Europe","South - India","West Central US","East Asia (Stage)","North Central US (Stage)","East - Asia","Japan East","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01"]},{"resourceType":"sourceControls","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"availableStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"webAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/webAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"functionAppStacks","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"locations/functionAppStacks","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-10-01"]},{"resourceType":"staticSites","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"locations/previewStaticSiteWorkflowFile","locations":["West - US 2","Central US","East US 2","West Europe","East Asia","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"listSitesAssignedToHostName","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/getNetworkPolicies","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","UK West","UK - South","West US 2","MSFT West US","MSFT East US","MSFT East Asia","MSFT North - Europe","East US 2 (Stage)","Central US (Stage)","France Central","West Central - US","East Asia (Stage)","North Central US (Stage)","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operations","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/operationResults","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US 2","East - US 2","East US","UK South","Southeast Asia","North Europe","Japan East","West - Europe","East Asia","West US","Australia East","Brazil South","Central US","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-12-01-preview","2019-08-01","2019-01-01","2018-11-01","2018-02-01","2016-08-01"],"defaultApiVersion":"2019-01-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/networkConfig","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/slots/hostNameBindings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-08-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"operations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"certificates","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossSubscriptionResourceMove"},{"resourceType":"serverFarms","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"sites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"sites/slots","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-08-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove, SystemAssignedResourceIdentity"},{"resourceType":"runtimes","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"recommendations","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"resourceHealthMetadata","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"georegions","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"sites/premieraddons","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2016-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"hostingEnvironments","locations":["MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Central US","South Africa North","East US 2","UK South","Southeast - Asia","North Europe","Japan East","West Europe","Australia East","Brazil South","Japan - West","Central India","Canada East","Korea Central","France Central","West - India","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"hostingEnvironments/multiRolePools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"hostingEnvironments/workerPools","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2018-11-01","2018-08-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"kubeEnvironments","locations":["North - Central US (Stage)","Central US EUAP"],"apiVersions":["2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-08-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"deploymentLocations","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","Central US (Stage)","North - Central US (Stage)","France Central","South Africa North","Australia Central","Switzerland - North","Germany West Central","Norway East","UAE North"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deletedSites","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Japan East","Australia - East","Brazil South","Southeast Asia","Japan West","Central India","UK South","Canada - East","Korea Central","France Central","North Europe","West India","East US - 2","Australia Central","Germany West Central","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"ishostingenvironmentnameavailable","locations":[],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"locations/deleteVirtualNetworkOrSubnets","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","Japan East","East US 2 EUAP","Central US EUAP","West US","Central - US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-11-01","2016-08-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"defaultApiVersion":"2018-02-01","apiProfiles":[{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"connections","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"customApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations","locations":[],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/listWsdlInterfaces","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/extractApiDefinitionFromWsdl","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/managedApis","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/runtimes","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"locations/apiOperations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Brazil Southeast","Australia Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-07-01-preview","2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"connectionGateways","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/connectionGatewayInstallations","locations":["North - Central US","Central US","South Central US","North Europe","West Europe","East - Asia","Southeast Asia","West US","East US","East US 2","Japan West","Japan - East","Brazil South","Australia East","Australia Southeast","Brazil Southeast","South - India","Central India","West India","West US 2","West Central US","Canada - Central","Canada East","UK South","UK West","France Central","France South","Korea - Central","Korea South","South Africa West","South Africa North","UAE Central","UAE - North","Switzerland North","Switzerland West","Norway East","Germany North","Germany - West Central","Central US EUAP","East US 2 EUAP"],"apiVersions":["2018-03-01-preview","2016-06-01","2015-08-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-06-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-06-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-03-01-preview"}]},{"resourceType":"checkNameAvailability","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"billingMeters","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"verifyHostingEnvironmentVnet","locations":["Central - US","North Europe","West Europe","Southeast Asia","Korea Central","Korea South","West - US","East US","Japan West","Japan East","East Asia","East US 2","North Central - US","South Central US","Brazil South","Australia East","Australia Southeast","West - India","Central India","South India","Canada Central","Canada East","West - Central US","UK West","UK South","West US 2","MSFT West US","MSFT East US","MSFT - East Asia","MSFT North Europe","East US 2 (Stage)","East Asia (Stage)","Central - US (Stage)","North Central US (Stage)","France Central","South Africa North","Australia - Central","Switzerland North","Germany West Central","Norway East","UAE North","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-03-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-03-01"},{"profileVersion":"2018-06-01-profile","apiVersion":"2018-02-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2018-02-01"}]},{"resourceType":"serverFarms/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","UAE North","Switzerland - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01-preview","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"sites/slots/eventGridFilters","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","Australia East","Brazil - South","Southeast Asia","Japan West","Central India","UK South","Canada East","Korea - Central","France Central","North Europe","West India","East US 2","Australia - Central","Germany West Central","Norway West","Norway East","Switzerland North","UAE - North","North Central US","UK West","Australia Southeast","Korea South","Canada - Central","West Europe","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP","West US","Central US","West US 2","East US","East Asia"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-08-01","2016-03-01","2015-11-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2015-01-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"hostingEnvironments/eventGridFilters","locations":["North - Central US","South Central US","Brazil South","Canada East","UK West","MSFT - West US","MSFT East US","MSFT East Asia","MSFT North Europe","East US 2 (Stage)","Central - US (Stage)","South Africa North","East US 2","UK South","Southeast Asia","North - Europe","Japan East","West Europe","Australia East","Japan West","Central - India","Korea Central","France Central","West India","Australia Central","Germany - West Central","Norway East","Switzerland North","UAE North","Australia Southeast","Korea - South","Canada Central","South India","West Central US","East Asia (Stage)","North - Central US (Stage)","East Asia","West US","Central US","West US 2","East US","East - US 2 EUAP","Central US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2019-02-01","2019-01-01","2018-11-01","2018-08-01","2018-05-01-preview","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]},{"resourceType":"serverFarms/firstPartyApps/keyVaultSettings","locations":["South - Central US","MSFT West US","MSFT East US","MSFT East Asia","MSFT North Europe","East - US 2 (Stage)","Central US (Stage)","South Africa North","West US","Australia - East","Brazil South","Southeast Asia","Central US","Japan West","Central India","UK - South","Canada East","Korea Central","France Central","North Europe","West - US 2","East US","West India","East US 2","Australia Central","Germany West - Central","Norway West","Norway East","UAE North","Switzerland North","North - Central US","UK West","Australia Southeast","Korea South","Canada Central","West - Europe","South India","West Central US","East Asia (Stage)","North Central - US (Stage)","East Asia","Japan East","South Africa West","East US 2 EUAP","Central - US EUAP"],"apiVersions":["2020-12-01","2020-10-01","2020-09-01","2020-06-01","2019-08-01","2018-11-01","2018-02-01","2017-08-01","2016-09-01","2016-03-01","2015-08-01","2015-07-01","2015-06-01","2015-05-01","2015-04-01","2015-02-01","2014-11-01","2014-06-01","2014-04-01-preview","2014-04-01"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '62820' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id --include-response-body - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web?api-version=2020-12-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_create000001/providers/Microsoft.Web/sites/clirescreateweb/config/web","name":"clirescreateweb","type":"Microsoft.Web/sites/config","location":"West - US","properties":{"numberOfWorkers":1,"defaultDocuments":["Default.htm","Default.html","Default.asp","index.htm","index.html","iisstart.htm","default.aspx","index.php","hostingstart.html"],"netFrameworkVersion":"v4.0","phpVersion":"5.6","pythonVersion":"","nodeVersion":"","powerShellVersion":"","linuxFxVersion":"","windowsFxVersion":null,"requestTracingEnabled":false,"remoteDebuggingEnabled":false,"remoteDebuggingVersion":null,"httpLoggingEnabled":false,"azureMonitorLogCategories":null,"acrUseManagedIdentityCreds":false,"acrUserManagedIdentityID":null,"logsDirectorySizeLimit":35,"detailedErrorLoggingEnabled":false,"publishingUsername":"$clirescreateweb","publishingPassword":null,"appSettings":null,"azureStorageAccounts":{},"metadata":null,"connectionStrings":null,"machineKey":null,"handlerMappings":null,"documentRoot":null,"scmType":"None","use32BitWorkerProcess":true,"webSocketsEnabled":false,"alwaysOn":false,"javaVersion":null,"javaContainer":null,"javaContainerVersion":null,"appCommandLine":"","managedPipelineMode":"Integrated","virtualApplications":[{"virtualPath":"/","physicalPath":"site\\wwwroot","preloadEnabled":false,"virtualDirectories":null}],"winAuthAdminState":0,"winAuthTenantState":0,"customAppPoolIdentityAdminState":false,"customAppPoolIdentityTenantState":false,"runtimeADUser":null,"runtimeADUserPassword":null,"loadBalancing":"LeastRequests","routingRules":[],"experiments":{"rampUpRules":[]},"limits":null,"autoHealEnabled":false,"autoHealRules":null,"tracingOptions":null,"vnetName":"","vnetRouteAllEnabled":false,"vnetPrivatePortsCount":0,"siteAuthEnabled":false,"siteAuthSettings":{"enabled":null,"configVersion":null,"unauthenticatedClientAction":null,"tokenStoreEnabled":null,"allowedExternalRedirectUrls":null,"defaultProvider":null,"clientId":null,"clientSecret":null,"clientSecretSettingName":null,"clientSecretCertificateThumbprint":null,"issuer":null,"allowedAudiences":null,"additionalLoginParams":null,"isAadAutoProvisioned":false,"aadClaimsAuthorization":null,"googleClientId":null,"googleClientSecret":null,"googleClientSecretSettingName":null,"googleOAuthScopes":null,"facebookAppId":null,"facebookAppSecret":null,"facebookAppSecretSettingName":null,"facebookOAuthScopes":null,"gitHubClientId":null,"gitHubClientSecret":null,"gitHubClientSecretSettingName":null,"gitHubOAuthScopes":null,"twitterConsumerKey":null,"twitterConsumerSecret":null,"twitterConsumerSecretSettingName":null,"microsoftAccountClientId":null,"microsoftAccountClientSecret":null,"microsoftAccountClientSecretSettingName":null,"microsoftAccountOAuthScopes":null},"cors":null,"push":null,"apiDefinition":null,"apiManagementConfig":null,"autoSwapSlotName":null,"localMySqlEnabled":false,"managedServiceIdentityId":null,"xManagedServiceIdentityId":null,"keyVaultReferenceIdentity":null,"ipSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictions":[{"ipAddress":"Any","action":"Allow","priority":1,"name":"Allow - all","description":"Allow all access"}],"scmIpSecurityRestrictionsUseMain":false,"http20Enabled":false,"minTlsVersion":"1.2","scmMinTlsVersion":"1.0","ftpsState":"AllAllowed","preWarmedInstanceCount":0,"functionAppScaleLimit":0,"healthCheckPath":null,"fileChangeAuditEnabled":false,"functionsRuntimeScaleMonitoringEnabled":false,"websiteTimeZone":null,"minimumElasticInstanceCount":0}}' - headers: - cache-control: - - no-cache - content-length: - - '3698' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-IIS/10.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-aspnet-version: - - 4.0.30319 - x-content-type-options: - - nosniff - x-powered-by: - - ASP.NET - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group.yaml deleted file mode 100644 index 89c1757e4e0..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group.yaml +++ /dev/null @@ -1,654 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:19 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:34 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:33:50 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - ParameterSetName: - - -n --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUkc6NUZTQ0VOQVJJTzU1VFVOUEhSUEhNRkFKREVSS0JVUXxGRTU0MTA0NDFGMERBNkY0LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:06 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: '{"location": "westus", "tags": {"a": "b", "c": ""}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group create - Connection: - - keep-alive - Content-Length: - - '51' - Content-Type: - - application/json - ParameterSetName: - - -n -l --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:08 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups?$filter=tagname%20eq%20%27a%27%20and%20tagvalue%20eq%20%27b%27&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '339' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - ParameterSetName: - - -g --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"b","c":""},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {}, "location": "westus", "tags": {}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - Content-Length: - - '52' - Content-Type: - - application/json - ParameterSetName: - - -g --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '313' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - ParameterSetName: - - -g --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '313' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {}, "location": "westus", "tags": {"a": "{''k'': ''v''}"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - Content-Length: - - '69' - Content-Type: - - application/json - ParameterSetName: - - -g --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"{''k'': - ''v''}"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '329' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - ParameterSetName: - - -g --set --force-string - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"{''k'': - ''v''}"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '329' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {}, "location": "westus", "tags": {"a": "{''k'': ''v''}", - "b": "{\"k\":\"v\"}"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group update - Connection: - - keep-alive - Content-Length: - - '91' - Content-Type: - - application/json - ParameterSetName: - - -g --set --force-string - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_rg_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_rg_scenario000001","name":"cli_test_rg_scenario000001","location":"westus","tags":{"a":"{''k'': - ''v''}","b":"{\"k\":\"v\"}"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '349' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group_no_wait.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group_no_wait.yaml deleted file mode 100644 index d0992276e65..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_group_no_wait.yaml +++ /dev/null @@ -1,341 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --no-wait --yes - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:23 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZSRzo1Rk5PV0FJVDo1RlRFU1RSVFpVWldJVENIUFlFVVlaMzMyRzZXSnwwNDM5REU1Q0U3QTYxMzdGLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14994' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:19Z"},"properties":{"provisioningState":"Deleting"}}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:19Z"},"properties":{"provisioningState":"Deleting"}}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --deleted -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '{"error":{"code":"ResourceGroupNotFound","message":"Resource group - ''cli_rg_nowait_test000001'' could not be found."}}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-failure-cause: - - gateway - status: - code: 404 - message: Not Found -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '303' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - group exists - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: HEAD - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - group wait - Connection: - - keep-alive - ParameterSetName: - - --exists -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_rg_nowait_test000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_rg_nowait_test000001","name":"cli_rg_nowait_test000001","location":"westus","properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '303' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_id_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_id_scenario.yaml deleted file mode 100644 index b139f0ae6e3..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_id_scenario.yaml +++ /dev/null @@ -1,6204 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_id000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001","name":"cli_test_resource_id000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:43Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:44 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": [{"name": "cli_test_resource_id_subnet", - "properties": {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '225' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"aec8bd07-7233-4a48-9127-de8572b8e5de\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"aec8bd07-7233-4a48-9127-de8572b8e5de\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/aa7853e1-f255-47ee-bd42-5c21b2865024?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1358' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 8f412a03-50e1-4696-9123-d01ae0ac5139 - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/aa7853e1-f255-47ee-bd42-5c21b2865024?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 5a33ce54-b74a-4d91-bf94-d328d5418f84 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"d21c6a8f-671f-454e-b799-5186f5e41254\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"d21c6a8f-671f-454e-b799-5186f5e41254\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1360' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:53 GMT - etag: - - W/"d21c6a8f-671f-454e-b799-5186f5e41254" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 9cb9db9b-be2c-4682-9287-c3b39f63727a - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"d21c6a8f-671f-454e-b799-5186f5e41254\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"d21c6a8f-671f-454e-b799-5186f5e41254\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1505' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:55 GMT - etag: - - W/"d21c6a8f-671f-454e-b799-5186f5e41254" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 18f3143b-fc9d-45ed-91d4-c175f95935e4 - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {"tag-vnet": ""}, "properties": {"provisioningState": - "Succeeded", "resourceGuid": "8e743639-26eb-4d54-8526-f8faea1f0eef", "addressSpace": - {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {"dnsServers": []}, "subnets": - [{"name": "cli_test_resource_id_subnet", "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet", - "etag": "W/\"d21c6a8f-671f-454e-b799-5186f5e41254\"", "properties": {"provisioningState": - "Succeeded", "addressPrefix": "10.0.0.0/24", "delegations": [], "privateEndpointNetworkPolicies": - "Enabled", "privateLinkServiceNetworkPolicies": "Enabled"}, "type": "Microsoft.Network/virtualNetworks/subnets"}], - "virtualNetworkPeerings": [], "enableDdosProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - Content-Length: - - '917' - Content-Type: - - application/json - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/4bc9ea8e-039c-47c4-b9da-b9357db8305e?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 8816ec93-9fa7-46e9-ba16-c3e938e86a70 - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/4bc9ea8e-039c-47c4-b9da-b9357db8305e?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 7a7cb47f-9123-46ef-8a17-0f6cec19f5ca - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - --id --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:29 GMT - etag: - - W/"499fbd38-8e1d-487b-ba15-4ec162e3c7ac" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 7f39fed5-84ad-493f-a700-d0ce76fefbbf - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_vnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {\r\n \"tag-vnet\": \"\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"8e743639-26eb-4d54-8526-f8faea1f0eef\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:31 GMT - etag: - - W/"499fbd38-8e1d-487b-ba15-4ec162e3c7ac" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d641fd4f-59a3-4d25-ae6b-b2d60f9cd445 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:32 GMT - etag: - - W/"499fbd38-8e1d-487b-ba15-4ec162e3c7ac" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 00e73375-50be-4572-9ad2-acea6fb75e75 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"499fbd38-8e1d-487b-ba15-4ec162e3c7ac\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:34 GMT - etag: - - W/"499fbd38-8e1d-487b-ba15-4ec162e3c7ac" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d66576f0-9120-4fa6-8bc2-a4030407c22c - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"provisioningState": "Succeeded", "addressPrefix": "10.0.0.0/22", - "delegations": [], "privateEndpointNetworkPolicies": "Enabled", "privateLinkServiceNetworkPolicies": - "Enabled"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - Content-Length: - - '194' - Content-Type: - - application/json - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"31737742-6fa8-4a4b-bebf-ec4c495fe45d\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Updating\",\r\n \"addressPrefix\": \"10.0.0.0/22\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/686969d6-65b5-4982-a476-f66725098e5a?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '645' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 61533482-eb43-47e0-a8bc-89bb3b3ccc1f - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/686969d6-65b5-4982-a476-f66725098e5a?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - b72aa877-4074-4a72-945f-0ba8cabd3fb9 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource update - Connection: - - keep-alive - ParameterSetName: - - --id --set - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"cli_test_resource_id_subnet\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet\",\r\n - \ \"etag\": \"W/\\\"acf1e730-d30d-4f88-89d1-233d674a407b\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/22\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '646' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - etag: - - W/"acf1e730-d30d-4f88-89d1-233d674a407b" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d3cba19b-ef81-4413-a060-2a4cb36ab32f - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet/subnets/cli_test_resource_id_subnet?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/3c6bb4f9-a21b-4ca9-9bb5-4fab8bb67894?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:41 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operationResults/3c6bb4f9-a21b-4ca9-9bb5-4fab8bb67894?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - ba8455ce-8697-4ee6-bb11-a40760700502 - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/3c6bb4f9-a21b-4ca9-9bb5-4fab8bb67894?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 932b93c6-4198-4940-a81a-d37160acf851 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_id000001/providers/Microsoft.Network/virtualNetworks/cli_test_resource_id_vnet?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/effde6fa-0d5d-490f-9b9a-9018c4c0bb91?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:53 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operationResults/effde6fa-0d5d-490f-9b9a-9018c4c0bb91?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 0805ebf4-7bac-4ead-9b1f-38508d7f22e2 - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - --id - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/effde6fa-0d5d-490f-9b9a-9018c4c0bb91?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:36:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 9f06d246-1f41-4460-ac23-b40b7836eeb3 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_lock_commands.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_lock_commands.yaml deleted file mode 100644 index 643d1a1dcf8..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_lock_commands.yaml +++ /dev/null @@ -1,648 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001","name":"cli_test_resource_lock000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:33:44Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus", "tags": {}, "properties": {"addressSpace": {"addressPrefixes": - ["10.0.0.0/16"]}, "dhcpOptions": {}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '123' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"a3083c5a-ea07-4277-9983-9d23e40ec235\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"resourceGuid\": \"0d386fcc-21e8-495f-91ce-3d8a6dfd32b7\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/237643c4-0e9e-4aa3-9991-44df1365f096?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '782' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 06d80d52-e79c-4034-8754-c977d3da31c1 - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/237643c4-0e9e-4aa3-9991-44df1365f096?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - a602e366-06b6-4dca-8335-aa9af9680be7 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"cli.lock.rsrc000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002\",\r\n - \ \"etag\": \"W/\\\"4c98a0c9-5f61-43fd-9f1c-3b333ead71af\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"westus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"0d386fcc-21e8-495f-91ce-3d8a6dfd32b7\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '783' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:54 GMT - etag: - - W/"4c98a0c9-5f61-43fd-9f1c-3b333ead71af" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 35af8999-98a5-442b-bc1b-c86940ad5e45 - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock create - Connection: - - keep-alive - Content-Length: - - '41' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock show - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-type --resource-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock list - Connection: - - keep-alive - ParameterSetName: - - -g --resource-type --resource-name --query -o - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}]}' - headers: - cache-control: - - no-cache - content-length: - - '514' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15476' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '502' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"level": "ReadOnly", "notes": "notes000004"}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock update - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --resource-name --notes --lock-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '{"properties":{"level":"ReadOnly","notes":"notes000004"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003","type":"Microsoft.Authorization/locks","name":"cli-test-lock000003"}' - headers: - cache-control: - - no-cache - content-length: - - '529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1/providers/Microsoft.Authorization/locks/l4\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l4\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/providers/Microsoft.Authorization/locks/l2\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l2\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/providers/Microsoft.Authorization/locks/l3\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l3\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni/providers/Microsoft.Authorization/locks/reserved\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"reserved\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - Asir\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Authorization/locks/No-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"No-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Nanxuan - uses this for troubleshooting a high pri issue\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn/providers/Microsoft.Authorization/locks/cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lockxjl4qh7c7dmei6gakhxdn4dx5etj6bbsgikpxf635qwkbtxezall4ysvef37t\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"notes000004\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-lock000003\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/images/image/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa/providers/Microsoft.Authorization/locks/salock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"salock\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Auto-created - by Azure Backup for storage accounts registered with a Recovery Services Vault. - This lock is intended to guard against deletion of backups due to accidental - deletion of the storage account.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg6i4hl6iakg/providers/microsoft.storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m/providers/Microsoft.Authorization/locks/AzureBackupProtectionLock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"AzureBackupProtectionLock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu/providers/Microsoft.Authorization/locks/inuse\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"inuse\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Authorization/locks/NO-DELETE\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"NO-DELETE\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa/providers/Microsoft.Authorization/locks/nodelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"nodelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge/providers/Microsoft.Authorization/locks/azurecliedge-dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"azurecliedge-dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"Deleting - this App Service certificate resource is final and can\u2019t be restored, - any bindings using this certificate will become invalid and you will need - to re-purchase the certificate.\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test/providers/Microsoft.Authorization/locks/zhoxing-test\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zhoxing-test\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"ReadOnly\",\"notes\":\"sss\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/providers/Microsoft.Authorization/locks/zz\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"zz\"},{\"properties\":{\"level\":\"ReadOnly\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test/subnets/default/providers/Microsoft.Authorization/locks/vnetlock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"vnetlock\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"In - case of deleting by incident\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azuresdktest_reserved/providers/Microsoft.Authorization/locks/LockReservedResources\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"LockReservedResources\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Authorization/locks/delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Authorization/locks/donotdelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotdelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Authorization/locks/antidelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"antidelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/azps-test-group/providers/Microsoft.Authorization/locks/do-not-delete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"do-not-delete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev/providers/Microsoft.Authorization/locks/donotedelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"donotedelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Authorization/locks/l\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver/providers/Microsoft.Authorization/locks/l1\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"l1\"},{\"properties\":{\"level\":\"CanNotDelete\",\"notes\":\"for - customer issue repro (snowflake)\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/storage-v2rt-repro/providers/Microsoft.Authorization/locks/DontDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DontDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Authorization/locks/dl\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dl\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6/providers/Microsoft.Authorization/locks/cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"cli-test-locklxyko2yruqpd6z2mdw7bw43sff3nuyz2n5ygpm5opgtajrdjgyb7c7fau6kgw\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93/providers/Microsoft.Authorization/locks/DoNotDelete\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"DoNotDelete\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707/providers/Microsoft.Authorization/locks/dont_delete_me\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"dont_delete_me\"},{\"properties\":{\"level\":\"CanNotDelete\"},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Authorization/locks/lock\",\"type\":\"Microsoft.Authorization/locks\",\"name\":\"lock\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '15503' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding,Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource lock delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name -g --resource-name --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_lock000001/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc000002/providers/Microsoft.Authorization/locks/cli-test-lock000003?api-version=2016-09-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_move.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_move.yaml deleted file mode 100644 index 17e2f8243ec..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_move.yaml +++ /dev/null @@ -1,1558 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_move_source000002?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002","name":"cli_test_resource_move_source000002","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:21Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:23 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": - \"329ad718-ae16-4ccd-be38-1c524c0d3679\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"719dd635-f17b-4131-99a8-f7fda05c4dec\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/086065ab-90f2-409c-93f6-99c48fe0efc0?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '7053' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 6f14f6b5-58ff-4a35-98fb-65e710e13196 - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/086065ab-90f2-409c-93f6-99c48fe0efc0?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - bf948b8e-69c9-42e6-9329-44ea075723a3 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"329ad718-ae16-4ccd-be38-1c524c0d3679\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"54f20d09-d877-4a63-9ecf-ee13380967c7\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:32 GMT - etag: - - W/"54f20d09-d877-4a63-9ecf-ee13380967c7" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - cc66f0a6-fa76-49ae-bc84-a7cf53efbe28 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_move_source000002?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002","name":"cli_test_resource_move_source000002","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:34:21Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "westus"}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - Content-Length: - - '22' - Content-Type: - - application/json - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": - \"dc9aff3b-1ecf-47dc-a11e-5434ee3db2f4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"725f257e-bf95-427a-a936-7969fe49d3d0\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/de6f1745-7769-4fd1-9eb2-7c7d02af9b72?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '7053' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 2cb3e9c7-0051-44fd-9d81-153e4358a512 - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/westus/operations/de6f1745-7769-4fd1-9eb2-7c7d02af9b72?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 400020c7-cc66-493f-ab34-287d2064dc92 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg create - Connection: - - keep-alive - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"dc9aff3b-1ecf-47dc-a11e-5434ee3db2f4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"929d4fd1-8e68-496d-b423-2166f37ef6fd\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:42 GMT - etag: - - W/"929d4fd1-8e68-496d-b423-2166f37ef6fd" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 8ece18ce-6bca-4615-8f2e-f90e9eb3e89f - status: - code: 200 - message: OK -- request: - body: '{"resources": ["/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003", - "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004"], - "targetResourceGroup": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001"}' - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - Content-Length: - - '618' - Content-Type: - - application/json - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_source000002/moveResources?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:48 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:03 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:19 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:34 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:35:49 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:36:05 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:36:20 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:36:35 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:36:52 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:37:07 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:37:22 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:37:38 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:37:53 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:38:08 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource move - Connection: - - keep-alive - ParameterSetName: - - --ids --destination-group - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFQkFUQ0hNT1ZFSk9CLUNMSTo1RlRFU1Q6NUZSRVNPVVJDRTo1Rk1PVkU6NUZTT1VSQ0VQTjJYUElBUk1RfDZEOENFNTFFOUUwMzRGOEYtV0VTVFVTLU1PVkUiLCJqb2JMb2NhdGlvbiI6Indlc3R1cyJ9?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - date: - - Mon, 19 Apr 2021 09:38:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"329ad718-ae16-4ccd-be38-1c524c0d3679\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000003/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"1e135a1d-9500-4cd5-9196-ef774dbdc116\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:25 GMT - etag: - - W/"1e135a1d-9500-4cd5-9196-ef774dbdc116" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - d27902a8-b23b-4ad3-8496-aee7a63a5b57 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network nsg show - Connection: - - keep-alive - ParameterSetName: - - -g -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"nsg-move000004\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n \"type\": - \"Microsoft.Network/networkSecurityGroups\",\r\n \"location\": \"westus\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": - \"dc9aff3b-1ecf-47dc-a11e-5434ee3db2f4\",\r\n \"securityRules\": [],\r\n - \ \"defaultSecurityRules\": [\r\n {\r\n \"name\": \"AllowVnetInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetInBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from all VMs in VNET\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowAzureLoadBalancerInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowAzureLoadBalancerInBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow inbound traffic from azure load balancer\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"AzureLoadBalancer\",\r\n \"destinationAddressPrefix\": \"*\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": - \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllInBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllInBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all inbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Inbound\",\r\n \"sourcePortRanges\": [],\r\n - \ \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n },\r\n - \ {\r\n \"name\": \"AllowVnetOutBound\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowVnetOutBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to all VMs - in VNET\",\r\n \"protocol\": \"*\",\r\n \"sourcePortRange\": - \"*\",\r\n \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"VirtualNetwork\",\r\n \"destinationAddressPrefix\": \"VirtualNetwork\",\r\n - \ \"access\": \"Allow\",\r\n \"priority\": 65000,\r\n \"direction\": - \"Outbound\",\r\n \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"AllowInternetOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/AllowInternetOutBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Allow outbound traffic from all VMs to Internet\",\r\n - \ \"protocol\": \"*\",\r\n \"sourcePortRange\": \"*\",\r\n - \ \"destinationPortRange\": \"*\",\r\n \"sourceAddressPrefix\": - \"*\",\r\n \"destinationAddressPrefix\": \"Internet\",\r\n \"access\": - \"Allow\",\r\n \"priority\": 65001,\r\n \"direction\": \"Outbound\",\r\n - \ \"sourcePortRanges\": [],\r\n \"destinationPortRanges\": - [],\r\n \"sourceAddressPrefixes\": [],\r\n \"destinationAddressPrefixes\": - []\r\n }\r\n },\r\n {\r\n \"name\": \"DenyAllOutBound\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_dest000001/providers/Microsoft.Network/networkSecurityGroups/nsg-move000004/defaultSecurityRules/DenyAllOutBound\",\r\n - \ \"etag\": \"W/\\\"18dd5eeb-cc86-4560-b077-5cca2282d982\\\"\",\r\n - \ \"type\": \"Microsoft.Network/networkSecurityGroups/defaultSecurityRules\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"description\": \"Deny all outbound traffic\",\r\n \"protocol\": - \"*\",\r\n \"sourcePortRange\": \"*\",\r\n \"destinationPortRange\": - \"*\",\r\n \"sourceAddressPrefix\": \"*\",\r\n \"destinationAddressPrefix\": - \"*\",\r\n \"access\": \"Deny\",\r\n \"priority\": 65500,\r\n - \ \"direction\": \"Outbound\",\r\n \"sourcePortRanges\": - [],\r\n \"destinationPortRanges\": [],\r\n \"sourceAddressPrefixes\": - [],\r\n \"destinationAddressPrefixes\": []\r\n }\r\n }\r\n - \ ]\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '7060' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:25 GMT - etag: - - W/"18dd5eeb-cc86-4560-b077-5cca2282d982" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - ef54adff-842d-48c5-8930-64625a7c8980 - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml deleted file mode 100644 index 7b674199d2a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_default.yaml +++ /dev/null @@ -1,23294 +0,0 @@ -interactions: -- request: - body: '{"properties": {"mode": "Indexed", "displayName": "test_policy000003", - "description": "desc_for_test_policy_123", "policyRule": {"if": {"not": {"field": - "location", "in": "[parameters(''allowedLocations'')]"}}, "then": {"effect": - "deny"}}, "parameters": {"allowedLocations": {"type": "array", "metadata": {"description": - "The list of locations that can be specified when deploying resources", "strongType": - "location", "displayName": "Allowed locations"}}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition create - Connection: - - keep-alive - Content-Length: - - '459' - Content-Type: - - application/json - ParameterSetName: - - -n --rules --params --display-name --description --mode - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '828' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1194' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition update - Connection: - - keep-alive - ParameterSetName: - - -n --description --display-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '828' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_policy000003_new", "description": - "desc_for_test_policy_123_new", "policyRule": {"if": {"not": {"field": "location", - "in": "[parameters(''allowedLocations'')]"}}, "then": {"effect": "deny"}}, "metadata": - {"createdBy": "9ac534f1-d577-4034-a32d-48de400dacbf", "createdOn": "2021-04-19T09:35:32.6525377Z", - "updatedBy": null, "updatedOn": null}, "parameters": {"allowedLocations": {"type": - "array", "metadata": {"description": "The list of locations that can be specified - when deploying resources", "strongType": "location", "displayName": "Allowed - locations"}}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition update - Connection: - - keep-alive - Content-Length: - - '598' - Content-Type: - - application/json - ParameterSetName: - - -n --description --display-name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T09:35:33.3011182Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '896' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1196' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control - 1599 - Developer Configuration Management | Software / Firmware Integrity - Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\":{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your Synapse workspaces\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0049a6b3-a662-4f3e-8635-39cf44ace45a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"},{\"properties\":{\"displayName\":\"SQL - Server Integration Services integration runtimes on Azure Data Factory should - be joined to a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0088bc63-6dee-4a9c-9d29-91cfdc848952\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure - Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - protection of your Azure Virtual Machines by enabling Azure Backup. Azure - Backup is a secure and cost effective data protection solution for Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1099 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1709 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1052 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1034 - Least Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1623 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1515 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1361 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"},{\"properties\":{\"displayName\":\"Azure - Kubernetes Service Private Clusters should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"040732e8-d947-40b8-95d6-854c95024bf8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1594 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB allowed locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying Azure Cosmos DB resources.\",\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\",\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))), - ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\":\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"}]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"},{\"properties\":{\"displayName\":\"SQL - managed instances should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Linux VMs - monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"},{\"properties\":{\"displayName\":\"Shared - dashboards should not have markdown tiles with inline content\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that's hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Portal\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Portal/dashboards\"},{\"anyof\":[{\"not\":{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2020-09-01-alpha\"}},{\"count\":{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type\",\"equals\":\"Extension/HubsExtension/PartType/MarkdownPart\"},{\"anyOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"equals\":\"1\"}]}]}},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c655fe-0ac7-48ae-9a32-3a2e208c7624\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1572 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use a customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Azure Front Door Service - service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"},{\"properties\":{\"displayName\":\"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send scan reports to' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\",\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"},\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Data Lake Store should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1223 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1420 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1688 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - access the private endpoint(s) for Storage Sync Service resource interfaces - from a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint's private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateDnsZoneId\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"Private - DNS Zone Identifier\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"afs\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-afs\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06695360-db88-47f6-b976-7500d4297475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1455 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit SQL DB Level Audit Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - DB level audit setting for SQL databases\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Audit - VMs that do not use managed disks\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\",\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\",\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that Cognitive Services - account isn't exposed on the public internet. Creating private endpoints can - limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - \",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1583 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the DSC configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure - Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"},{\"properties\":{\"displayName\":\"Adaptive - network hardening recommendations should be applied on internet facing virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"},{\"properties\":{\"displayName\":\"There - should be more than one owner assigned to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1159 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"},{\"properties\":{\"displayName\":\"Disk - encryption should be applied on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"},{\"properties\":{\"displayName\":\"Configure - backup on virtual machines without a given tag to an existing recovery services - vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location - (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.\",\"strongType\":\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Backup - Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding VMs from - the scope of this policy. This should be used along with the Exclusion Tag - Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exclusion - Tag Values\",\"description\":\"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"value\":\"[empty(parameters('exclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('exclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"},{\"properties\":{\"displayName\":\"Azure - Policy Add-on for Kubernetes service (AKS) should be installed and enabled - on your clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1654 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1428 - Media Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"},{\"properties\":{\"displayName\":\"Audit - resource location matches resource group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that the resource location matches its resource group location\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[resourcegroup().location]\"},{\"field\":\"location\",\"notEquals\":\"global\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Management'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl\",\"exists\":false},{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0aa61e00-0a01-4a3c-9945-e93cffedf0e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"},{\"properties\":{\"displayName\":\"Email - notification to subscription owner for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"not\":{\"allOf\":[{\"field\":\"Microsoft.Security/securityContacts/alertsToAdmins\",\"equals\":\"Off\"},{\"field\":\"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity\",\"equals\":\"High\"}]}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"},{\"properties\":{\"displayName\":\"Key - vaults should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB throughput should be limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max - RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned - to a container via the Resource Provider during create or update.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"},{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\",\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\",\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1239 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"},{\"properties\":{\"displayName\":\"Ensure - API app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Automation Accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"},{\"properties\":{\"displayName\":\"SQL - servers should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for IoT Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d40b058-9f95-4a19-93e3-9b0330baa2a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1518 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1466 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"},{\"properties\":{\"displayName\":\"Deploy - a flow log resource with target network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG - Region\",\"description\":\"This Policy will review NSGs only in the selected - region. You can create other assignments to include other regions.\",\"strongType\":\"location\"}},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - id\",\"description\":\"A string with the storage id for the flowlogs to be - sent to. It will be used for deployment purposes only. Make sure this storage - account is located in the same region as the NSG. The format must be: '/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watchers RG\",\"description\":\"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.\",\"strongType\":\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watcher name\",\"description\":\"The name of the network watcher under which - the flowLog resources will be created. Make sure it belongs to the same region - as the NSG.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\",\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))), - 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\",\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\":{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\":{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-', - uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\",\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\":\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'), - '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\",\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\":{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\":{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\":{\"value\":\"[concat(resourceGroup().id, - '/providers/Microsoft.Network/networkSecurityGroups/', field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure File Sync to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Azure File Sync's internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"value\":\"AllowVirtualNetworksOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e07b2e9-6cd9-4c40-9ccb-52817b95133b\"},{\"properties\":{\"displayName\":\"Authorized - IP ranges should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\",\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Key Vault provides an additional layer of protection and security - intelligence by detecting unusual and potentially harmful attempts to access - or exploit key vault accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"},{\"properties\":{\"displayName\":\"Configure - Batch accounts with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"App - Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\",\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1476 - Fire Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1430 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1574 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1164 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"count\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fda3595-9f2b-4592-8675-4231d6fa82fe\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Container registries\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fdf0491-d080-4575-b627-ad0e843cba0f\"},{\"properties\":{\"displayName\":\"CORS - should not allow every domain to access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\",\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not contain the specified - certificates in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints\",\"description\":\"A semicolon-separated list of - certificate thumbprints that should exist under the Trusted Root certificate - store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"},\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"},{\"properties\":{\"displayName\":\"Custom - subscription owner roles should not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that no custom subscription owner roles exist.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\",\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"/\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1230 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1432 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure IoT Hubs to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"114eec6e-5e59-4bad-999d-6eceeb39d582\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System settings' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies\",\"description\":\"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1655 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Security' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LAN Manager authentication level\",\"description\":\"Specify which - challenge-response authentication protocol is used for network logons. This - choice affects the level of authentication protocol used by clients, the level - of session security negotiated, and the level of authentication accepted by - servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LDAP client signing requirements\",\"description\":\"Specify the - level of data signing that is requested on behalf of clients that issue LDAP - BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients\",\"description\":\"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers\",\"description\":\"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"},{\"properties\":{\"displayName\":\"Allowlist - rules in your adaptive application control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center's adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use Key Vault for storing secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"exists\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"PWD=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"Password=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"CredString=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"pwd=\"}]}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type\",\"equals\":\"SecureString\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type\",\"equals\":\"SecureString\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"MongoDbAtlas\",\"MongoDbV2\"]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type\",\"equals\":\"SecureString\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"127ef6d7-242f-43b3-9eef-947faf1725d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1240 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System objects'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"},\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1450 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1184 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure machines to receive the Qualys vulnerability assessment agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don't need a Qualys license or even a Qualys account - everything's handled - seamlessly inside Security Center. Machines which don't have the Qualys vulnerability - assessment agent deployed automatically receive the agent if this policy is - enabled.\",\"metadata\":{\"category\":\"Security Center\",\"preview\":true,\"version\":\"2.0.0-preview\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]},\"deployment\":{\"properties\":{\"mode\":\"Incremental\",\"template\":{\"contentVersion\":\"1.0.0.0\",\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"parameters\":{\"vmName\":{\"type\":\"String\"},\"resourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.compute/virtualmachines'))]\",\"type\":\"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"},{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.hybridcompute/machines'))]\",\"type\":\"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"resourceType\":{\"value\":\"[field('type')]\"}}}},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13ce0167-8ca6-4048-8e6b-f996402e3c1b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1085 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1404 - Maintenance Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that contain certificates expiring within the specified number - of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - store path\",\"description\":\"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is 'Cert:' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher', - 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Expiration - limit in days\",\"description\":\"An integer indicating the number of days - within which to check for certificates that are expiring. For example, if - this value is 30, any certificate expiring within the next 30 days will cause - this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to include\",\"description\":\"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to exclude\",\"description\":\"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - expired certificates\",\"description\":\"Must be 'true' or 'false'. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group contains - any of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to exclude\",\"description\":\"A semicolon-separated list of members - that should be excluded in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"},\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityWindowsAgent\":\"[concat('deployAzureSecurityWindowsAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityWindowsAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityWindowsAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1537496a-b1e8-482b-a06a-1cc2415cdc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1157 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1564 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a minimum password - age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1662 - Fail In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1684 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1103 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1007 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"},{\"properties\":{\"displayName\":\"Deploy - associations for a managed application\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"},\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Managed - application ID\",\"description\":\"Resource ID of the managed application - to which resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the managed application.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetManagedApplicationId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\":{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"},{\"properties\":{\"displayName\":\"[ASC - Private Preview] Deploy - Configure system-assigned managed identity to enable - Azure Monitor assignments on VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.2.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[if(contains(field('identity.type'), - 'UserAssigned'), concat(field('identity.type'), ',SystemAssigned'), 'SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17b3de92-f710-4cf4-aa55-0e7859f1ed7b\"},{\"properties\":{\"displayName\":\"Transparent - Data Encryption on SQL databases should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1325 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1480 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1369 - Incident Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Logon-Logoff' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\":\"Audit - Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Group Membership\",\"description\":\"Specifies whether audit events are generated - when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"},{\"properties\":{\"displayName\":\"Azure - Monitor log profile should collect logs for categories 'write,' 'delete,' - and 'action'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that a log profile collects logs for categories 'write,' 'delete,' - and 'action'\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Access to App Services should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1adadefe-5f21-44f7-b931-a59b54ccdb45\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance which doesn't have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"},{\"properties\":{\"displayName\":\"Public - network access on Azure SQL Database should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"},{\"properties\":{\"displayName\":\"Azure - Service Bus namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"},{\"properties\":{\"displayName\":\"Public - network access on Azure Data Factory should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"},{\"properties\":{\"displayName\":\"Azure - File Sync should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization's network, rather than through the internet-accessible - public endpoint. Creating a private endpoint by itself does not disable the - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d320205-c6a1-4ac6-873d-46224024e8e2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using no secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires no secrets. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1538 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"},{\"properties\":{\"displayName\":\"Virtual - machines should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1595 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - a required tag and its value. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Target sub resource the private endpoint - connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('targetSubResource')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"synapse-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\"},{\"properties\":{\"displayName\":\"Key - vaults should have soft delete enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - API for FHIR should have at least one approved private endpoint connection. - Clients in a virtual network can securely access resources that have private - endpoint connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"count\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ee56206-5dd1-42ab-b02d-8aae8b1634ce\"},{\"properties\":{\"displayName\":\"An - Azure Active Directory administrator should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be encrypted with customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Shutdown'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Clear virtual memory pagefile\",\"description\":\"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\":false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"},{\"properties\":{\"displayName\":\"Logic - Apps Integration Service Environment should be encrypted with customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/integrationServiceEnvironments\"},{\"field\":\"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption at host to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure security - center has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"},{\"properties\":{\"displayName\":\"VM - Image Builder templates should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM - Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization's - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a8cd35-125e-4d13-b82d-2e19b7208bb7\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a9766a-82a5-4747-abb5-650b6dbba6d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1111 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1596 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Audit'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1399 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Management'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"},{\"properties\":{\"displayName\":\"Management - ports should be closed on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1493 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"},{\"properties\":{\"displayName\":\"Only - secure connections to your Azure Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not restrict the minimum - password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"},{\"properties\":{\"displayName\":\"Service - Bus should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Automation account so that it isn't accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Automation\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"value\":false}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1268 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1231 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a maximum password age - of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1372 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"},{\"properties\":{\"displayName\":\"Endpoint - protection solution should be installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1649 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"},{\"properties\":{\"displayName\":\"Metric - alert rules should be configured on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - configuration of metric alert rules on Batch account to enable the required - metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Metric - name\",\"description\":\"The metric name that an alert rule must be enabled - on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\":\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\",\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\",\"equals\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourcegroups/', resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', - field('name'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"},{\"properties\":{\"displayName\":\"Configure - virtual machines to be onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1396 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"},{\"properties\":{\"displayName\":\"Flow - logs should be enabled for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkWatchers/flowLogs\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27960feb-a23c-4577-8d36-ef8b5f35e0be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1074 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1527 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"},{\"properties\":{\"displayName\":\"Deploy - default Microsoft IaaSAntimalware extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file extensions to exclude from scanning\"}},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of process names to exclude from scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\":\"true\",\"metadata\":{\"description\":\"Indicates - whether or not real time protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\":{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\":\"Indicates - whether or not custom scheduled scan settings are enabled (default is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)\"}},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\",\"metadata\":{\"description\":\"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\",\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\",\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\",\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\",\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\":{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\",\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\":{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1436 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"},{\"properties\":{\"displayName\":\"Azure - Defender for App Service should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for App Service leverages the scale of the cloud, and the visibility - that Azure has as a cloud provider, to monitor for common web app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"},{\"properties\":{\"displayName\":\"Service - Bus Premium namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"},{\"not\":{\"field\":\"Microsoft.ServiceBus/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"295fc8b1-dc9f-4f53-9c61-3f313ceab40a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - User Account Control'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"},\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Policy Change' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\":\"Audit - Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\":\"Audit - Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authentication Policy Change\",\"description\":\"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authorization Policy Change\",\"description\":\"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1274 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"},{\"properties\":{\"displayName\":\"Synapse - workspace auditing settings should have action groups configured to capture - critical activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b18f286-371e-4b80-9887-04759970c0d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1434 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1388 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1344 - Authenticator Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"},{\"properties\":{\"displayName\":\"SSH - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows SSH access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"},{\"properties\":{\"displayName\":\"Unattached - disks should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any unattached disk without encryption enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1546 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1414 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1679 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1068 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"},{\"properties\":{\"displayName\":\"App - Service should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any App Service not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not store passwords using reversible - encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that allow remote connections from accounts - without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"},{\"properties\":{\"displayName\":\"Public - network access on Azure IoT Hub should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure IoT Hub should use customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"lessOrEquals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\"},{\"properties\":{\"displayName\":\"Managed - workspace virtual network on Azure Synapse workspaces should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetwork\",\"notEquals\":\"default\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d9dbfa3-927b-4cf0-9d0f-08747f971650\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1077 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1000 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1519 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System objects' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Windows - VMs monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1144 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1090 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Access'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Storage should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Storage provides detections of unusual and potentially harmful - attempts to access or exploit storage accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cache for Redis resource so that it's - not accessible over the public internet. This helps protect the cache against - data leakage risks.\",\"metadata\":{\"category\":\"Cache\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30b3dfa5-a70d-4c8e-bed6-0083858f663d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines missing any of specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to include\",\"description\":\"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not joined to the specified - domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Domain Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"},\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics Agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"},{\"properties\":{\"displayName\":\"API - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"324c7761-08db-4474-9661-d1039abc92ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1587 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the specified services - are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and 'Running'. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Service names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the services that should be installed and 'Running'. - e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"},\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"},{\"properties\":{\"displayName\":\"Azure - SQL Database should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"},{\"properties\":{\"displayName\":\"Deploy - the Linux Guest Configuration extension to enable Guest Configuration assignments - on Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"},{\"properties\":{\"displayName\":\"MySQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Audit' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: - Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to an existing recovery - services vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally include - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Location (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral\",\"strongType\":\"location\"}},\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"345fa903-145c-4fe1-8bcd-93ec2adccde8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1151 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should allow outbound data traffic only to approved targets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3484ce98-c0c5-4c83-994b-c5ac24785218\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1412 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1475 - Emergency Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1060 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premises clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"},{\"properties\":{\"displayName\":\"Resource - logs in Logic Apps should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1210 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a maximum password - age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Object Access' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit - Detailed File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\",\"AuditFileSystem\":\"Audit - File System;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File Share\",\"description\":\"Specifies whether to audit events related to - file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Firewall Properties' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\",\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPrivateUseProfileSettings\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPublicUseProfileSettings\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Private: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"},{\"properties\":{\"displayName\":\"Gateway - subnets should not be configured with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection on Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection on Storage Accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('storageAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1313 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"},{\"properties\":{\"displayName\":\"Automation - account variables should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is important to enable encryption of Automation account variable assets when - storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"},{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1685 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"},{\"properties\":{\"displayName\":\"Deploy - Threat Detection on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Security'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LAN Manager authentication level\",\"description\":\"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LDAP client signing requirements\",\"description\":\"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients\",\"description\":\"Specifies which behaviors are allowed by - clients for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services. - See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers\",\"description\":\"Specifies which behaviors are allowed by - servers for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid topics to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36ea4b4b-0f7f-4a54-89fa-ab18f555a172\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/domains/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"domain\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36f4658a-848a-467b-881c-e6fa20cf75fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Interactive Logon'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1624 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"},{\"properties\":{\"displayName\":\"Storage - accounts should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\",\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"},{\"properties\":{\"displayName\":\"Resource - logs in IoT Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"3.0.1\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"},{\"properties\":{\"displayName\":\"Deploy - the Windows Guest Configuration extension to enable Guest Configuration assignments - on Windows VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1081 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1522 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1397 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address for security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1232 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1246 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"},{\"properties\":{\"displayName\":\"Synapse - managed private endpoints should only connect to resources in approved Azure - Active Directory tenants\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"allowedTenantIds\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List - of Allowed Tenant Ids for private endpoint creation\",\"description\":\"This - parameter defines the list of Allowed Tenant Ids that are allowed to create - managed private endpoints in the workspaces\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"notIn\":\"[parameters('allowedTenantIds')]\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a003702-13d2-4679-941b-937e58c443f0\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1648 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Control - Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Control Panel' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1315 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1548 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto - approved by policy assignment\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b3b0c27-08d2-4b32-879d-19930bee3266\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1003 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Security operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Security Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\",\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"},{\"properties\":{\"displayName\":\"PostgreSQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1621 - Resource Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1127 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on virtual machines with no identities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have extra accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\":\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\":\"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Search Services in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Devices'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Log Analytics workspace\",\"description\":\"Select Log Analytics workspace - from dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\",\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - monitoring for Linux VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"},{\"properties\":{\"displayName\":\"App - Configuration should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d9f5e4c-9947-4579-9539-2a7695fbc187\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1385 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell modules - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn't available - in a location specified by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\":\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Modules\",\"description\":\"A semicolon-separated list of the names of the - PowerShell modules that should be installed. You may also specify a specific - version of a module that should be installed by including a comma after the - module name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"},{\"properties\":{\"displayName\":\"Azure - Monitor solution 'Security and Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that Security and Audit is deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1160 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1545 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Access' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths\",\"description\":\"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1561 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"},{\"properties\":{\"displayName\":\"Secure - transfer to storage accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always use classic logon\",\"description\":\"Specifies whether to force the - user to log on to the computer using the classic logon screen. This setting - only works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Boot-Start Driver Initialization Policy\",\"description\":\"Specifies which - boot-start drivers are initialized based on a classification determined by - an Early Launch Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable Windows NTP Client\",\"description\":\"Specifies whether the Windows - NTP Client is enabled. Enabling the Windows NTP Client allows your computer - to synchronize its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\":{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\":{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\":{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\":{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\":{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1202 - Access Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1438 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"},{\"properties\":{\"displayName\":\"Azure - Monitor should collect activity logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"},{\"properties\":{\"displayName\":\"Temp - disks and cache for agent node pools in Azure Kubernetes Service clusters - should be encrypted at host\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"count\":{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"false\"}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41425d9f-d1a5-499a-9932-f8ed8453932c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1263 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"},{\"properties\":{\"displayName\":\"Audit - Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Azure Front Door - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"},{\"properties\":{\"displayName\":\"Resource - logs in Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Detailed Tracking'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Process Termination\",\"description\":\"Specifies whether audit events - are generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"},\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1137 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System settings'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies\",\"description\":\"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Logon' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit - Credential Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Credential Validation\",\"description\":\"Specifies whether audit events are - generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1544 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1398 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor permissive network access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1720 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1310 - Device Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1565 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use a Private Link enabled SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"field\":\"Microsoft.SignalRService/SignalR/sku.tier\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464a1620-21b5-448d-8ce6-d4ac6d1bc49a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require SQL Server version 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"},{\"properties\":{\"displayName\":\"Require - automatic OS image patching on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\",\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\",\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedStorage\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"},{\"properties\":{\"displayName\":\"[Preview]: - IoT Hub device provisioning service data should be encrypted using customer-managed - keys (CMK)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47031206-ce96-41f8-861b-6a915f3de284\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn't exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage - accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB key based metadata write access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"},{\"properties\":{\"displayName\":\"Auto - provisioning of the Log Analytics agent should be enabled on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"},{\"properties\":{\"displayName\":\"Adaptive - application controls for defining safe applications should be enabled on your - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"},{\"properties\":{\"displayName\":\"Configure - Cognitive Services accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Cognitive Services resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Disabled\",\"Modify\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2017-04-18')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1165 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"},{\"properties\":{\"displayName\":\"Private - endpoints for Guest Configuration assignments should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"},{\"field\":\"id\",\"contains\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyof\":[{\"field\":\"[concat('tags[', - 'EnablePrivateNeworkGC', ']')]\",\"equals\":\"TRUE\"},{\"field\":\"[concat('tags[', - 'EnablePrivateNetworkGC', ']')]\",\"equals\":\"TRUE\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"480d0f91-30af-4a76-9afb-f5710ac52b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1048 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1033 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1669 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - User Account Control' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"UACRunAllAdministratorsInAdminApprovalMode\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of the elevation prompt for administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for Data factories\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"groupId\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - group Id that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - group Id\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupId\":[\"[parameters('groupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496ca26b-f669-4322-a1ad-06b7b5e41882\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on VMs with a user-assigned identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[concat(field('identity.type'), - ',SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Audit'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - 'modify' effect policies are available that support remediation of tags on - existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1677 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1094 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid topic instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"count\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"},{\"properties\":{\"displayName\":\"Function - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d0bc837-6eff-477e-9ecd-33bf8d4212a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"},{\"properties\":{\"displayName\":\"FTPS - should be required in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1156 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1312 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"},{\"properties\":{\"displayName\":\"Azure - Defender for servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for servers provides real-time threat protection for server workloads - and generates hardening recommendations as well as alerts about suspicious - activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1001 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1083 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1247 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1267 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints that connect to Batch - accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"batchAccount\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"batchAccount-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec38ebc-381f-45ee-81a4-acbc4be878f8\"},{\"properties\":{\"displayName\":\"Azure - data factories should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/encryption.vaultBaseUrl\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec52d6d-beb7-40c4-9a9e-fe753254690e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1139 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"},{\"properties\":{\"displayName\":\"A - maximum of 3 owners should be designated for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"},{\"properties\":{\"displayName\":\"Subscriptions - should have a contact email address for security issues\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"},{\"properties\":{\"displayName\":\"Add - a tag to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"},{\"properties\":{\"displayName\":\"[Preview]: - Storage account public access should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.\",\"metadata\":{\"version\":\"2.0.1-preview\",\"category\":\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The effect determines what happens when the policy - rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\",\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"},{\"properties\":{\"displayName\":\"A - vulnerability assessment solution should be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center's - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1485 - Delivery And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center regulatory compliance\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\",\"preview - \":true},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"regulatoryComplianceStandards\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - standards names\",\"description\":\"For all compliance standards, leave it - empty. For specific compliance standards, enter a list of standards names - separated by semicolons (';'). Compliance standards names are available through - the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center regulatory compliance assessment is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center regulatory compliance - assessment is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets\",\"exists\":false},{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"less\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceControlStates')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\",\"name\":\"regulatoryComplianceControlState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.state\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceControlState')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceControlStates'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceStandards')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\",\"name\":\"regulatoryComplianceStandard\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"id\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceStandard')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceStandards'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"notEquals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('regulatoryComplianceStandards'),parameters('regulatoryComplianceControlStates'))]\"},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\"},\"equals\":\"[mul(2,mul(length(parameters('regulatoryComplianceStandards')),length(parameters('regulatoryComplianceControlStates'))))]\"}]}]}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"regulatoryComplianceStandards\":{\"type\":\"array\"},\"regulatoryComplianceControlStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"regulatoryComplianceStandardsLength\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"regulatoryComplianceControlStatesLength\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"regulatoryComplianceStandardsLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsLength'), - 0), 1, variables('regulatoryComplianceStandardsLength'))]\",\"regulatoryComplianceControlStatesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceControlStatesLength'), - 0), 1, variables('regulatoryComplianceControlStatesLength'))]\",\"stateMap\":{\"Failed\":\"failed\",\"Passed\":\"passed\",\"Skipped\":\"skipped\",\"Unsupported\":\"unsupported\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center regulatory - compliance assessment is created or triggered\":\"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered\"},\"doesAllStatesSelected\":\"[if(equals(length(parameters('regulatoryComplianceControlStates')),length(variables('stateMap'))),bool('true'),bool('false'))]\",\"doesAllStandardsSelected\":\"[if(equals(variables('regulatoryComplianceStandardsLength'),0),bool('true'),bool('false'))]\",\"allRegulatoryComplianceRuleSets\":[],\"customStandardsOrCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsOrCustomStateRuleSetsArr\",\"count\":\"[if(not(variables('doesAllStandardsSelected')),variables('regulatoryComplianceStandardsLength'),if(not(variables('doesAllStatesSelected')),variables('regulatoryComplianceControlStatesLength'),1))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(not(variables('doesAllStandardsSelected')),'id',if(not(variables('doesAllStatesSelected')),'properties.state',json('null')))]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],json('null')))]\",\"operator\":\"[if(not(variables('doesAllStandardsSelected')),'Contains',if(not(variables('doesAllStatesSelected')),'Equals',json('null')))]\"}]}}]},\"customStandardsAndCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsAndCustomStateRuleSetsArr\",\"count\":\"[if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),mul(variables('regulatoryComplianceStandardsLength'),variables('regulatoryComplianceControlStatesLength')),1)]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[mod(div(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength')), variables('regulatoryComplianceStandardsLength'))],json('null'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.state\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[mod(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength'))],json('null'))]\",\"operator\":\"Equals\"}]}}]},\"sourceRuleSets\":\"[if(and(variables('doesAllStandardsSelected'),variables('doesAllStatesSelected')),variables('allRegulatoryComplianceRuleSets'),if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),variables('customStandardsAndCustomStateRuleSets').customStandardsAndCustomStateRuleSetsArr,variables('customStandardsOrCustomStateRuleSets').customStandardsOrCustomStateRuleSetsArr))]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"RegulatoryComplianceAssessment\",\"ruleSets\":\"[variables('sourceRuleSets')]\"}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"regulatoryComplianceStandards\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\"},\"regulatoryComplianceControlStates\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"509122b9-ddd9-47ba-a5f1-d0dac20be63c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1566 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"},{\"properties\":{\"displayName\":\"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"IPsecEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Encryption\",\"description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Integrity\",\"description\":\"IPsec Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Integrity\",\"description\":\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"DH - Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"PFS - Group\",\"description\":\"PFS Group\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\",\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\",\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\",\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\",\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\",\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\",\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1248 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1386 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"},{\"properties\":{\"displayName\":\"Bot - Service should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"},{\"properties\":{\"displayName\":\"Azure - Defender for Kubernetes should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Kubernetes provides real-time threat protection for containerized - environments and generates alerts for suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"},{\"properties\":{\"displayName\":\"Synapse - workspaces with SQL auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your Synapse workspace' SQL auditing to storage account destination to at - least 90 days. Confirm that you are meeting the necessary retention rules - for the regions in which you are operating. This is sometimes required for - compliance with regulatory standards.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"529ea018-6afc-4ed4-95bd-7c9ee47b00bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1642 - Network Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"},{\"properties\":{\"displayName\":\"Connection - throttling should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Azure SignalR Service - resource instead of the entire service, you'll reduce your data leakage risks. - Learn more about private links at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1467 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"},{\"properties\":{\"displayName\":\"[Preview]: - Firewall should be enabled on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Key - vault's firewall prevents unauthorized traffic from reaching your key vault - and provides an additional layer of protection for your secrets. Enable the - firewall to make sure that only traffic from allowed networks can access your - key vault.\",\"metadata\":{\"version\":\"1.0.2-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"},{\"properties\":{\"displayName\":\"Azure - Automation accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.Keyvault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56a5ee18-2ae6-4810-86f7-18e39ce5629b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"},{\"properties\":{\"displayName\":\"IP - firewall rules on Azure Synapse workspaces should be removed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces/firewallrules\"},{\"field\":\"name\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56fd377d-098c-4f02-8406-81eb055902b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"},{\"properties\":{\"displayName\":\"Windows - web servers should be configured to use secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\",\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"[SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - TLS version\",\"description\":\"The minimum TLS protocol version that should - be enabled. Windows web servers with lower TLS versions will be marked as - non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1162 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1054 - Session Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"},{\"properties\":{\"displayName\":\"Configure - disk access resources with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disk access resources in this region are validated and private endpoints are - created in this region.\"}},\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[concat('pe','-',field('name'))]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[parameters('name')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"disks\"]}}],\"manualPrivateLinkServiceConnections\":[]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Detailed Tracking' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit - Process Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Process Termination\",\"description\":\"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"},{\"properties\":{\"displayName\":\"CosmosDB - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your CosmosDB account, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1547 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which Windows Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Port Number\",\"description\":\"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Baud Rate\",\"description\":\"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1573 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1463 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1425 - Timely Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"},{\"properties\":{\"displayName\":\"Operating - system version should be the most current version for your cloud service roles\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a minimum password age - of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1032 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not restrict the minimum password - length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1005 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1105 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1433 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"},{\"properties\":{\"displayName\":\"Container - registries should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.2\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\",\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"},{\"properties\":{\"displayName\":\"Ensure - WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Remote Host Name\",\"description\":\"Specifies the Domain Name System (DNS) - name or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Port\",\"description\":\"The TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Should connect to remote host\",\"description\":\"Must be 'True' or 'False'. - 'True' indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. 'False' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"},\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"},\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Security'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be enabled in virtual machine scale sets for listed - virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1671 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1067 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"},{\"properties\":{\"displayName\":\"External - accounts with write permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1483 - Water Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1362 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1665 - Process Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Function App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"},{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1208 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: West India, South India, - Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\",\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"},{\"properties\":{\"displayName\":\"[Preview]: - Private endpoint should be configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use user-assigned managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers' security posture and protect them from attacks.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"},{\"properties\":{\"displayName\":\"External - accounts with read permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityLinuxAgent\":\"[concat('deployAzureSecurityLinuxAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityLinuxAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityLinuxAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityLinuxAgent\",\"typeHandlerVersion\":\"2.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f8eb305-9c9f-4abe-9bb0-df220d9faba2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Windows virtual machines on which the Windows Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"2.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1663 - Protection Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Object Access'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"},{\"properties\":{\"displayName\":\"Storage - Accounts should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows web servers that are not using secure communication - protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Data Security on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\":\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - variables('serverResourceGroupName'), parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', - variables('uniqueStorage')))]\"},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\":\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\":{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\":[\"[concat('Microsoft.Storage/storageAccounts/', - variables('storageName'))]\",\"[concat('Microsoft.Sql/servers/', parameters('serverName'), - '/securityAlertPolicies/Default')]\"]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"},{\"properties\":{\"displayName\":\"Configure - time zone on Windows machines.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"configurationStores\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"614ffa75-862c-456e-ad8b-eaa1b0844b07\"},{\"properties\":{\"displayName\":\"Bot - Service endpoint should be a valid HTTPS URI\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service - Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\":\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\",\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\",\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1110 - Audit Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1415 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a4d60b-7326-440e-8051-9f94394d4dd1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1153 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System objects'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the Log Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected - workspace IDs\",\"description\":\"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"},{\"properties\":{\"displayName\":\"Modify - Azure SignalR Service resources to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"Audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"value\":\"Deny\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"value\":[]}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62a3ae95-8169-403e-a2d2-b82141448092\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1660 - Session Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"},{\"properties\":{\"displayName\":\"Audit - Windows machines network connectivity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote - Host Name\",\"description\":\"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Port\",\"description\":\"The - TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Should - connect to remote host\",\"description\":\"The machine will be non-compliant - if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"},{\"properties\":{\"displayName\":\"Authentication - to Linux machines should require SSH keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1002 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1498 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1185 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Devices'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Devices: Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"64d314f6-6062-4780-a861-c23e8951bee5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit missing blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"},{\"properties\":{\"displayName\":\"Azure - Defender for SQL servers on machines should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1261 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"},{\"properties\":{\"displayName\":\"Service - principals should be used to protect your subscriptions instead of management - certificates\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1319 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedKey\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Network' for guest logons, simultaneous connections, network bridge, - ICS, and multicast name resolution. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable - insecure guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn - off multicast name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - insecure guest logons\",\"description\":\"Specifies whether the SMB client - will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked service resource type should be in allow list\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"allowedLinkedServiceResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed linked service resource types\",\"description\":\"The list of allowed - linked service resource types.\"},\"allowedValues\":[\"AdlsGen2CosmosStructuredStream\",\"AdobeExperiencePlatform\",\"AdobeIntegration\",\"AmazonRedshift\",\"AmazonS3\",\"AzureBlobFS\",\"AzureBlobStorage\",\"AzureDataExplorer\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureDataShare\",\"AzureFileStorage\",\"AzureKeyVault\",\"AzureMariaDB\",\"AzureMySql\",\"AzurePostgreSql\",\"AzureSearch\",\"AzureSqlDatabase\",\"AzureSqlDW\",\"AzureSqlMI\",\"AzureTableStorage\",\"Cassandra\",\"CommonDataServiceForApps\",\"CosmosDb\",\"CosmosDbMongoDbApi\",\"Db2\",\"DynamicsCrm\",\"FileServer\",\"FtpServer\",\"GitHub\",\"GoogleCloudStorage\",\"Hdfs\",\"Hive\",\"HttpServer\",\"Informix\",\"Kusto\",\"MicrosoftAccess\",\"MySql\",\"Netezza\",\"Odata\",\"Odbc\",\"Office365\",\"Oracle\",\"PostgreSql\",\"Salesforce\",\"SalesforceServiceCloud\",\"SapBw\",\"SapHana\",\"SapOpenHub\",\"SapTable\",\"Sftp\",\"SharePointOnlineList\",\"Snowflake\",\"SqlServer\",\"Sybase\",\"Teradata\",\"HDInsightOnDemand\",\"HDInsight\",\"AzureDataLakeAnalytics\",\"AzureBatch\",\"AzureFunction\",\"AzureML\",\"AzureMLService\",\"MongoDb\",\"GoogleBigQuery\",\"Impala\",\"ServiceNow\",\"Dynamics\",\"AzureDatabricks\",\"AmazonMWS\",\"SapCloudForCustomer\",\"SapEcc\",\"Web\",\"MongoDbAtlas\",\"HBase\",\"Spark\",\"Phoenix\",\"PayPal\",\"Marketo\",\"Responsys\",\"SalesforceMarketingCloud\",\"Presto\",\"Square\",\"Xero\",\"Jira\",\"Magento\",\"Shopify\",\"Concur\",\"Hubspot\",\"Zoho\",\"Eloqua\",\"QuickBooks\",\"Couchbase\",\"Drill\",\"Greenplum\",\"MariaDB\",\"Vertica\",\"MongoDbV2\",\"OracleServiceCloud\",\"GoogleAdWords\",\"RestService\",\"DynamicsAX\",\"AzureDataCatalog\",\"AzureDatabricksDeltaLake\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"notIn\":\"[parameters('allowedLinkedServiceResourceTypes')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6809a3d0-d354-42fb-b955-783d207c62a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the Log Analytics agent - is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Connected workspace IDs\",\"description\":\"A semicolon-separated list of - the workspace IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"},\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1597 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1588 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1727 - Memory Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1652 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to exclude\",\"description\":\"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1244 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available\",\"description\":\"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to 'Non-Compliant' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to 'Compliant' will make these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"},\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1211 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1653 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"},{\"properties\":{\"displayName\":\"Deprecated - accounts should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Service Bus in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1031 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL servers on machine should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f97aa83c-9b63-4f9a-99f6-b22c4398f936\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\"},{\"properties\":{\"displayName\":\"Not - allowed resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that cannot be deployed.\",\"displayName\":\"Not allowed - resource types\",\"strongType\":\"resourceTypes\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},{\"value\":\"[field('type')]\",\"exists\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Azure Kubernetes Service should be connected to\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AllMetrics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-apiserver\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-apiserver - - Enabled\",\"description\":\"Whether to stream kube-apiserver logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit - - Enabled\",\"description\":\"Whether to stream kube-audit logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-controller-manager\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-controller-manager - - Enabled\",\"description\":\"Whether to stream kube-controller-manager logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-scheduler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-scheduler - - Enabled\",\"description\":\"Whether to stream kube-scheduler logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"cluster-autoscaler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"cluster-autoscaler - - Enabled\",\"description\":\"Whether to stream cluster-autoscaler logs to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit-admin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit-admin - - Enabled\",\"description\":\"Whether to stream kube-audit-admin logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"guard\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"guard - - Enabled\",\"description\":\"Whether to stream guard logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AllMetrics\":{\"type\":\"string\"},\"kube-apiserver\":{\"type\":\"string\"},\"kube-audit\":{\"type\":\"string\"},\"kube-controller-manager\":{\"type\":\"string\"},\"kube-scheduler\":{\"type\":\"string\"},\"cluster-autoscaler\":{\"type\":\"string\"},\"kube-audit-admin\":{\"type\":\"string\"},\"guard\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetrics')]\"}],\"logs\":[{\"category\":\"kube-apiserver\",\"enabled\":\"[parameters('kube-apiserver')]\"},{\"category\":\"kube-audit\",\"enabled\":\"[parameters('kube-audit')]\"},{\"category\":\"kube-controller-manager\",\"enabled\":\"[parameters('kube-controller-manager')]\"},{\"category\":\"kube-scheduler\",\"enabled\":\"[parameters('kube-scheduler')]\"},{\"category\":\"cluster-autoscaler\",\"enabled\":\"[parameters('cluster-autoscaler')]\"},{\"category\":\"kube-audit-admin\",\"enabled\":\"[parameters('kube-audit-admin')]\"},{\"category\":\"guard\",\"enabled\":\"[parameters('guard')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"guard\":{\"value\":\"[parameters('guard')]\"},\"AllMetrics\":{\"value\":\"[parameters('AllMetrics')]\"},\"kube-apiserver\":{\"value\":\"[parameters('kube-apiserver')]\"},\"kube-audit\":{\"value\":\"[parameters('kube-audit')]\"},\"kube-scheduler\":{\"value\":\"[parameters('kube-scheduler')]\"},\"kube-controller-manager\":{\"value\":\"[parameters('kube-controller-manager')]\"},\"cluster-autoscaler\":{\"value\":\"[parameters('cluster-autoscaler')]\"},\"kube-audit-admin\":{\"value\":\"[parameters('kube-audit-admin')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c66c325-74c8-42fd-a286-a74b0e2939d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"},{\"properties\":{\"displayName\":\"Function - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1651 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts with private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint group id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"automationAccounts-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dd01e4f-1be1-4e80-9d0b-d109e04cb064\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"},{\"properties\":{\"displayName\":\"Email - notification for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\",\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1586 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1530 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"},{\"properties\":{\"displayName\":\"Storage - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1460 - Access Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1320 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"},{\"properties\":{\"displayName\":\"Configure - diagnostic settings for storage accounts to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"category\":\"Storage\",\"version\":\"1.3.0\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the storage account should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"servicesToDeploy\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Storage - services to deploy\",\"description\":\"List of Storage services to deploy\"},\"allowedValues\":[\"storageAccounts\",\"blobServices\",\"fileServices\",\"tableServices\",\"queueServices\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"StorageDelete\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageDelete - - Enabled\",\"description\":\"Whether to stream StorageDelete logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageWrite\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageWrite - - Enabled\",\"description\":\"Whether to stream StorageWrite logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageRead\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageRead - - Enabled\",\"description\":\"Whether to stream StorageRead logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Transaction\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Transaction - - Enabled\",\"description\":\"Whether to stream Transaction logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"servicesToDeploy\":{\"type\":\"array\"},\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Transaction\":{\"type\":\"string\"},\"StorageRead\":{\"type\":\"string\"},\"StorageWrite\":{\"type\":\"string\"},\"StorageDelete\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'blobServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'fileServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'tableServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'queueServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'storageAccounts')]\",\"type\":\"Microsoft.Storage/storageAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"Transaction\":{\"value\":\"[parameters('Transaction')]\"},\"StorageDelete\":{\"value\":\"[parameters('StorageDelete')]\"},\"StorageWrite\":{\"value\":\"[parameters('StorageWrite')]\"},\"StorageRead\":{\"value\":\"[parameters('StorageRead')]\"},\"servicesToDeploy\":{\"value\":\"[parameters('servicesToDeploy')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f8f98a4-f108-47cb-8e98-91a0d85cd474\"},{\"properties\":{\"displayName\":\"Storage - accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"},{\"properties\":{\"displayName\":\"Workbooks - should be saved to storage accounts that you control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Audit, - Deny, or Disable the execution of this policy\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"microsoft.insights/workbooks\"},{\"field\":\"microsoft.insights/workbooks/storageUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fc8115b-2008-441f-8c61-9b722c1e537f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/topics/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"topic\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Server'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"OS - and data disks should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"value\":\"[length(field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"true\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]'))]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"anyOf\":[{\"count\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]\",\"where\":{\"value\":\"[length(current('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"exists\":\"true\"}}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"702dd420-7fcc-42c5-afe8-4026edd20fe0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Components'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Send file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow Telemetry\",\"description\":\"Specifies configuration of the amount - of diagnostic and usage data reported to Microsoft. The data is transmitted - securely and sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow unencrypted traffic\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) service sends and receives unencrypted messages - over the network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always install with elevated privileges\",\"description\":\"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Automatically send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Default consent\",\"description\":\"Specifies setting of the default - consent handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Windows SmartScreen\",\"description\":\"Specifies how to manage - the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow Digest authentication\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow WinRM from storing RunAs credentials\",\"description\":\"Specifies - whether the Windows Remote Management (WinRM) service will not allow RunAs - credentials to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Do not allow passwords to be saved\",\"description\":\"Specifies whether to - prevent Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Security: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set client connection encryption level\",\"description\":\"Specifies whether - to require the use of a specific encryption level to secure communications - between client computers and RD Session Host servers during Remote Desktop - Protocol (RDP) connections. This policy only applies when you are using native - RDP encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Setup: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off Data Execution Prevention for Explorer\",\"description\":\"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Specify the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\":{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\":{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\":{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"},\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"},\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\":{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1509 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1541 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1481 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the DSC configuration is not - compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Network'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"},{\"properties\":{\"displayName\":\"[Preview]: - Windows machines should meet requirements of the Azure Security Center baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureWindowsBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureWindowsBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that allow re-use of the previous - 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"},{\"properties\":{\"displayName\":\"Add - a tag to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Synapse workspace, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"},{\"properties\":{\"displayName\":\"Configure - App Configuration to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for App Configuration so that it isn't accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73290fa2-dfa7-4bbb-945d-a5e23b75df2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1456 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"For all recommendations, leave empty. For specific - recommendations, enter a list of recommendation IDs separated by semicolons - (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Determines recommendation severities. Example: - High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - states\",\"description\":\"Determines recommendation states. Recommendations - with unhealthy state require your attention to resolve. When a recommendation - state is healthy, it no longer applies to the resource as Security Center - detects it as healthy. A recommendation is not-applicable if, for example, - it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"},\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not - Applicable\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Recommendation is - created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(if(equals(length(parameters('recommendationNames')),0),array('Microsoft.Security/assessments'),parameters('recommendationNames')),parameters('recommendationSeverities'),if(contains(parameters('recommendationStates'),'Not - Applicable'),union(parameters('recommendationStates'), array('notapplicable')),parameters('recommendationStates')))]\"},{\"count\":{\"value\":\"[parameters('recommendationSeverities')]\",\"name\":\"recommendationSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.metadata.severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationSeverity')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationSeverities'))]\"},{\"count\":{\"value\":\"[parameters('recommendationStates')]\",\"name\":\"recommendationState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.status.code\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[replace(current('recommendationState'), - ' ','')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationSeverities')))]\"}},\"equals\":\"[length(parameters('recommendationStates'))]\"},{\"count\":{\"value\":\"[parameters('recommendationNames')]\",\"name\":\"recommendationName\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"name\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationName')]\"}]}},\"equals\":\"[mul(length(parameters('recommendationSeverities')),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationNames'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\":\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\":\"[if(equals(variables('recommendationStatesLength'), - 0), 1, variables('recommendationStatesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\",\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\":\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not - Applicable\":\"notapplicable\"},\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When - an Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), - mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'Microsoft.Security/assessments', parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationName')), variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\",\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"},{\"properties\":{\"displayName\":\"API - Management service should use a SKU that supports virtual networks\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for Azure API Management service.\",\"displayName\":\"Allowed - SKUs\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Isolated\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"not\":{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73ef9241-5d81-4cd4-b483-8443d1730fe5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1581 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"},{\"properties\":{\"displayName\":\"Storage - accounts should be limited by allowed SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Restrict - the set of storage account SKUs that your organization can deploy.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for storage accounts.\",\"displayName\":\"Allowed - SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public - IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Diagnostic - setting name\",\"description\":\"Profile name for the Azure diagnostic settings - resource\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The target Log Analytics workspace - for the diagnostic settings\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Logs\",\"description\":\"Enable Logs - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Metrics\",\"description\":\"Enable Metrics - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/publicIPAddresses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('LogsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('MetricsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('name'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"DDoSProtectionNotifications\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationFlowLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationReports\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('name'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"name\":{\"value\":\"[field('name')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752154a7-1e0f-45c6-a880-ac75a7e4f648\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit enabling of diagnostic logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"},{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"},{\"properties\":{\"displayName\":\"Configure - Azure Migrate resources to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Migrate\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"Default\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/assessmentProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/migrateProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.OffAzure/masterSites\"}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"default-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7590a335-57cf-4c95-babd-ecbc8fafeb1f\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1459 - Access Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Vulnerabilities should be remediated by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Azure SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"},{\"properties\":{\"displayName\":\"Audit - delegation of scopes to a managing tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"},{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1508 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"},{\"properties\":{\"displayName\":\"Azure - subscriptions should have a log profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory should use a Git repository for source control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"exists\":\"false\"},{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77d40665-3120-4348-b539-3192ec808307\"},{\"properties\":{\"displayName\":\"Virtual - network firewall rule on Azure SQL Database should be enabled to allow traffic - from the specified subnet\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\",\"description\":\"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your Azure Cache for Redis instances, data leakage risks are reduced. Learn - more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"amlworkspace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7838fd83-5cbb-4b5d-888c-bfa240972597\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1010 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1647 - Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your CosmosDB account - isn't exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1384 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Port Number\",\"description\":\"An integer indicating the COM port to - be used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Baud Rate\",\"description\":\"An integer indicating the baud rate to be - used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"},\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\":{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1093 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1708 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1289 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints connected to App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"configurationStores\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-azconfig-io\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a860e27-9ca2-4fc6-822d-c2d248c300df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1687 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"},{\"properties\":{\"displayName\":\"Allow - managing tenant ids to onboard through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\":{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - tenants\",\"description\":\"List of the tenants IDs that can be onboarded - through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"},{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\",\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1492 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"},{\"properties\":{\"displayName\":\"Azure - Attestation providers should use private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Attestation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Attestation/attestationProviders\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b256a2d-058b-41f8-bed9-3f870541c40a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"},{\"properties\":{\"displayName\":\"Resource - logs in Virtual Machine Scale Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - AKS Clusters\",\"description\":\"Whether to include AKS Clusters to resource - logs extension - True or False\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1051 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1279 - Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should reside within a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"},{\"properties\":{\"displayName\":\"Both - operating systems and data disks in Azure Kubernetes Service clusters should - be encrypted by customer-managed keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encrypting - OS and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d7be79c-23ba-4033-84dd-45e2a5ccdd67\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d890f7f-100c-473d-baa1-2777e2266535\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1471 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1011 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have not restarted within the specified - number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure SQL Database server to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the server should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"logAnalyticsWorkspaceId\":{\"type\":\"string\"}},\"variables\":{\"diagnosticSettingsName\":\"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1\"},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"name\":\"[concat(parameters('serverName'),'/master/microsoft.insights/',variables('diagnosticSettingsName'))]\",\"apiVersion\":\"2017-05-01-preview\",\"properties\":{\"name\":\"[variables('diagnosticSettingsName')]\",\"workspaceId\":\"[parameters('logAnalyticsWorkspaceId')]\",\"logs\":[{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":true,\"retentionPolicy\":{\"days\":0,\"enabled\":false}}]}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[concat('Microsoft.Sql/servers/', - parameters('serverName'),'/databases/master/providers/microsoft.insights/diagnosticSettings/', - variables('diagnosticSettingsName'))]\"],\"properties\":{\"state\":\"Enabled\",\"isAzureMonitorTargetEnabled\":true}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"logAnalyticsWorkspaceId\":{\"value\":\"[parameters('logAnalyticsWorkspaceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ea8a143-05e3-4553-abfe-f56bef8b0b70\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1520 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Privilege Use'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"},{\"properties\":{\"displayName\":\"Audit - diagnostic setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - diagnostic setting for selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - Types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"},{\"properties\":{\"displayName\":\"Azure - Defender for Azure SQL Database servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"},{\"properties\":{\"displayName\":\"SQL - Auditing settings should have Action-Groups configured to capture critical - activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"},{\"properties\":{\"displayName\":\"Deploy - - Configure suppression rules for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0\"},\"parameters\":{\"alertType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - Type\",\"description\":\"Enter the alert type field of the alert you would - like to suppress. Alert type could be queried via alerts api or PowerShell, - learn more at https://aka.ms/asc-alertsPwoershell\"}},\"suppressionRuleName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Rule - name\",\"description\":\"Rule names must begin with a letter or a number, - be between 2 and 50 characters, and contain no symbols other than dashes ( - - ) or underscores ( _ )\"}},\"state\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"State\"},\"allowedValues\":[\"Enabled\",\"Disabled\"]},\"reason\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Reason\"},\"allowedValues\":[\"The - severity of the alert should be lower\",\"The alert detecting too many normal - activities\",\"The alert is too noisy - hitting on the same resources too - many times\",\"The resource isn't relevant for me to monitor\",\"The alert - detecting normal activity on specific entity\",\"The alert isn't actionable - - not clear how to investigate the threat\",\"Other\"]},\"comment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Comment\"}},\"expirationDate\":{\"type\":\"DateTime\",\"metadata\":{\"displayName\":\"Expiration - date\"}},\"entityOneType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entityOneOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entityOneValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}},\"entitySecondType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entitySecondOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entitySecondValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"name\":\"[parameters('suppressionRuleName')]\",\"existenceScope\":\"subscription\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"location\":\"centralus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"alertType\":{\"type\":\"String\"},\"suppressionRuleName\":{\"type\":\"String\"},\"state\":{\"type\":\"String\"},\"reason\":{\"type\":\"String\"},\"comment\":{\"type\":\"String\"},\"expirationDate\":{\"type\":\"String\"},\"entityOneType\":{\"type\":\"String\"},\"entityOneOp\":{\"type\":\"String\"},\"entityOneValue\":{\"type\":\"String\"},\"entitySecondType\":{\"type\":\"String\"},\"entitySecondOp\":{\"type\":\"String\"},\"entitySecondValue\":{\"type\":\"String\"}},\"variables\":{\"reasonToEnum\":{\"The - severity of the alert should be lower\":\"AlertSeverityTooHigh\",\"The alert - detecting too many normal activities\":\"FalsePositive\",\"The alert is too - noisy - hitting on the same resources too many times\":\"Noise\",\"The resource - isn't relevant for me to monitor\":\"NotRelevant\",\"The alert detecting normal - activity on specific entity\":\"SpecificEntityFalsePositive\",\"The alert - isn't actionable - not clear how to investigate the threat\":\"Unclear\",\"Other\":\"Other\"},\"entityNameToType\":{\"User - account - name\":\"entities.account.name\",\"User account - AAD user ID\":\"entities.account.aaduserid\",\"User - account - UPN suffix\":\"entities.account.upnsuffix\",\"Azure resource ID\":\"entities.azureresource.resourceid\",\"File - - name\":\"entities.file.name\",\"File - directory\":\"entities.file.directory\",\"File - hash\":\"entities.filehash.value\",\"Host - name\":\"entities.host.hostname\",\"Host - - Azure ID\":\"entities.host.azureid\",\"Host - DNS Domain\":\"entities.host.dnsdomain\",\"Host - - OMS agent ID\":\"entities.host.omsagentid\",\"IP address\":\"entities.ip.address\",\"Malware - - name\":\"entities.malware.name\",\"Malware - category\":\"entities.malware.category\",\"Process - - command line: \":\"entities.process.commandline\"},\"entityOperationNameToOperation\":{\"Equals\":\"in\",\"Contains\":\"contains\"}},\"resources\":[{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"apiVersion\":\"2019-01-01-preview\",\"name\":\"[parameters('suppressionRuleName')]\",\"location\":\"centralus\",\"properties\":{\"alertType\":\"[parameters('alertType')]\",\"state\":\"[parameters('state')]\",\"reason\":\"[variables('reasonToEnum')[parameters('reason')]]\",\"comment\":\"[parameters('comment')]\",\"expirationDateUtc\":\"[parameters('expirationDate')]\",\"suppressionAlertsScope\":\"[if(and(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue')))), - null(), json(concat('{ \\\"allOf\\\": [', if(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), '', - concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entityOneType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entityOneOp')], - '\\\":', if(equals(parameters('entityOneOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entityOneValue'), '\\\"', if(equals(parameters('entityOneOp'), - 'Equals'), ']', ''), ' }', if(or(empty(parameters('entitySecondType')), empty(parameters('entitySecondOp')), - empty(parameters('entitySecondValue'))), '', ', '))), if(or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue'))), - '', concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entitySecondType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entitySecondOp')], - '\\\":', if(equals(parameters('entitySecondOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entitySecondValue'), '\\\"', if(equals(parameters('entitySecondOp'), - 'Equals'), ']', ''), ' } ')), '] }')))]\"}}]},\"parameters\":{\"alertType\":{\"value\":\"[parameters('alertType')]\"},\"suppressionRuleName\":{\"value\":\"[parameters('suppressionRuleName')]\"},\"state\":{\"value\":\"[parameters('state')]\"},\"reason\":{\"value\":\"[parameters('reason')]\"},\"comment\":{\"value\":\"[parameters('comment')]\"},\"expirationDate\":{\"value\":\"[parameters('expirationDate')]\"},\"entityOneType\":{\"value\":\"[parameters('entityOneType')]\"},\"entityOneOp\":{\"value\":\"[parameters('entityOneOp')]\"},\"entityOneValue\":{\"value\":\"[parameters('entityOneValue')]\"},\"entitySecondType\":{\"value\":\"[parameters('entitySecondType')]\"},\"entitySecondOp\":{\"value\":\"[parameters('entitySecondOp')]\"},\"entitySecondValue\":{\"value\":\"[parameters('entitySecondValue')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80e94a21-c6cd-4c95-a2c7-beb5704e61c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1505 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1614 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'User Rights Assignment'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on locally\",\"description\":\"Specifies which - users or groups can interactively log on to the computer. Users who attempt - to log on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the system time\",\"description\":\"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the time zone\",\"description\":\"Specifies - which users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may create a token object\",\"description\":\"Specifies - which users and groups are permitted to create an access token, which may - provide elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied local logon\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - User and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may shut down the system\",\"description\":\"Specifies - which users and groups who are logged on locally to the computers in your - environment are permitted to shut down the operating system with the Shut - Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1287 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"},{\"properties\":{\"displayName\":\"Azure - Data Explorer encryption at rest should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyName\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81e74cea-30fd-40d5-802f-d72103c2aaaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1448 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1452 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - System' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\":\"Audit - Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Other System Events\",\"description\":\"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1262 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1008 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to a new recovery services - vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally include virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"value\":\"[empty(parameters('inclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('inclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83644c87-93dd-49fe-bf9f-6aff8fd0834e\"},{\"properties\":{\"displayName\":\"Resource - logs in Event Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"},{\"properties\":{\"displayName\":\"Network - interfaces should not have public IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\",\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"},{\"properties\":{\"displayName\":\"Managed - disks should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that a managed disk isn't - exposed on the public internet. Creating private endpoints can limit exposure - of managed disks. Learn more at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"DenyAll\",\"AllowPrivate\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8405fdab-1faf-48aa-b702-999c9c172094\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1382 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"},{\"properties\":{\"displayName\":\"Configure - managed disks to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your managed disk resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disks in this region are validated and disk access resource would be associated - with them.\"}},\"diskAccessId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked\",\"strongType\":\"Microsoft.Compute/diskAccesses\",\"description\":\"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"AllowPrivate\",\"DenyAll\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/diskAccessId\",\"value\":\"[parameters('diskAccessId')]\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"value\":\"AllowPrivate\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8426280e-b5be-43d9-979e-653d12a08638\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1098 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\":\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain - Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) that - the Windows machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Components' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send - file samples when further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\":\"Allow - indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow - unencrypted traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always - install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\":\"Always - prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\":\"Configure - Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\":\"Configure - Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\":\"Disallow - Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\":\"Do - not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\":\"Set - client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\":\"Specify - the interval to check for definition updates;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send - file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - install with elevated privileges\",\"description\":\"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically - send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Default consent\",\"description\":\"Specifies setting of the default consent - handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Windows SmartScreen\",\"description\":\"Specifies how to manage the behavior - of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning - users before running unrecognized programs downloaded from the Internet. Some - information is sent to Microsoft about files and programs run on PCs with - this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - Digest authentication\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - WinRM from storing RunAs credentials\",\"description\":\"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Do - not allow passwords to be saved\",\"description\":\"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - client connection encryption level\",\"description\":\"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off Data Execution Prevention for Explorer\",\"description\":\"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Specify - the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1580 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your IoT Hub device provisioning instance so that - it's not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"859dfc91-ea35-43a6-8256-31271c363794\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory integration runtime should have a limit for number of cores\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - manage your resources and costs, limit the number of cores for an integration - runtime.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"maxCores\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed max number of cores\",\"description\":\"The max number of cores allowed - for dataflow.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"greater\":\"[parameters('maxCores')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85bb39b5-2f66-49f8-9306-77da3ac5130f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1326 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should have firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"},\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Server'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"},{\"properties\":{\"displayName\":\"Deploy - SQL DB transparent data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables - transparent data encryption on SQL databases\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), - '/current')]\",\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"},{\"properties\":{\"displayName\":\"System - updates should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints that connect to Azure Data Factory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"listOfGroupIds\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of Group Ids that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - Group Ids\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"in\":\"[parameters('listOfGroupIds')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"dataFactory-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86cd96e1-1745-420d-94d4-d3f2fe415aa4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should use a customer-managed key to encrypt the device unlock - password\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support customer-managed key - encryption key\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType\",\"notEquals\":\"CustomerManaged\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86efb160-8de7-451d-bc08-5d475b0aadae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"},{\"properties\":{\"displayName\":\"Require - a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - existence of a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Privilege Use' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Devices' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: - Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Control Panel'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"},{\"properties\":{\"displayName\":\"Azure - Stream Analytics jobs should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy\",\"equals\":\"SystemAccount\"},{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87ba29ef-1ab3-4d82-b763-87fcd4f531f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1317 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1501 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"},{\"properties\":{\"displayName\":\"Network - interfaces should disable IP forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure's check of the source and destination for - a network interface. This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1215 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"},{\"properties\":{\"displayName\":\"SQL - servers with auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Sql/servers/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1411 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid domains to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898e9824-104c-4965-8e0e-5197588fa5d4\"},{\"properties\":{\"displayName\":\"App - Configuration should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you'll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/sku.name\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89c8a434-18f0-402c-8147-630a8dea54e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System settings'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should deploy into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"field\":\"Microsoft.ContainerInstance/containerGroups/networkProfile.id\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8af8f826-edcb-4178-b35f-851ea6fea615\"},{\"properties\":{\"displayName\":\"Azure - Data Factory should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Data Factory, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1534 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1170 - Penetration Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Firewall Properties'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1683 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - a required tag and its value on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1324 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1288 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1250 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Arc enabled Kubernetes clusters should have Azure Defender's extension - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender's extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Object Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File Share\",\"description\":\"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"},\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"},\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\":{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\",\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to enable private endpoint connections\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - to use for Private Endpoints\",\"description\":\"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].id\",\"exists\":\"false\"}},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/privateEndpointConnections\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"subnetlocation\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"name\":\"[variables('privateEndpointName')]\",\"location\":\"[parameters('subnetlocation')]\",\"properties\":{\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"sqlServer\"],\"privateLinkServiceConnectionState\":{\"status\":\"Approved\",\"description\":\"Auto-approved\",\"actionsRequired\":\"None\"}}}],\"manualPrivateLinkServiceConnections\":[],\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"customDnsConfigs\":[]}}]},\"parameters\":{\"name\":{\"value\":\"[parameters('name')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"subnetlocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e8ca470-d980-4831-99e6-dc70d9f6af87\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1517 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1668 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1147 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not store passwords using - reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1550 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Firewall - Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Firewall Properties'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Domain: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Private: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Public: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Modules\",\"description\":\"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"},\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1355 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91678b7c-d721-4fc5-b179-3cdf74e96b1c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Components'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"},{\"properties\":{\"displayName\":\"Resource - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91a78b24-f231-4a8a-8da9-02c35b2b6510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"},{\"properties\":{\"displayName\":\"Configure - Dependency agent to be enabled on Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"resources\":[{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"apiVersion\":\"2020-03-11-preview\",\"name\":\"[concat(parameters('vmName'), - '/', variables('DaExtensionName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"},{\"properties\":{\"displayName\":\"MFA - should be enabled accounts with write permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1290 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that contain certificates expiring within - the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not contain the specified certificates in Trusted - Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\\\LocalMachine\\\\Root) does not contain one - or more of the certificates listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints\",\"description\":\"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain all the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to include\",\"description\":\"A semicolon-separated list of members - that should be included in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"},\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1379 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1371 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Management' for auditing application, security, and - user group management, and other management events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"},{\"properties\":{\"displayName\":\"Virtual - networks should be protected by Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Audit\",\"Disabled\"]},\"ddosPlan\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DDoS - Protection Plan\",\"description\":\"DDoS Protection Plan resource to be associated - to the virtual networks\",\"strongType\":\"Microsoft.Network/ddosProtectionPlans\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"notEquals\":true},{\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"value\":true},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id\",\"value\":\"[parameters('ddosPlan')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Key Vault should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AuditEventEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AuditEvent - - Enabled\",\"description\":\"Whether to stream AuditEvent logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AllMetricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AuditEventEnabled\":{\"type\":\"string\"},\"AllMetricsEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetricsEnabled')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('AuditEventEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"AuditEventEnabled\":{\"value\":\"[parameters('AllMetricsEnabled')]\"},\"AllMetricsEnabled\":{\"value\":\"[parameters('AuditEventEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"951af2fa-529b-416e-ab6e-066fd85ac459\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1526 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"},{\"properties\":{\"displayName\":\"Automation - accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1163 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"},{\"properties\":{\"displayName\":\"Require - a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - existence of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"},{\"properties\":{\"displayName\":\"App - Configuration should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - System' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always - use classic logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\":\"Enable - Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\":\"Turn on - convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - use classic logon\",\"description\":\"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start - Driver Initialization Policy\",\"description\":\"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1453 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"},{\"properties\":{\"displayName\":\"Add - a tag to subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96d9a89c-0d67-41fc-899d-2b9599f76a24\"},{\"properties\":{\"displayName\":\"HPC - Cache accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageCache/caches\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"970f84d8-71b6-4091-9979-ace7e3fb6dbb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - MSS (Legacy)'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Policy Change'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authentication Policy Change\",\"description\":\"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authorization Policy Change\",\"description\":\"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\":{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\":{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"},\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1136 - Audit Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1378 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid domain instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\",\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Network'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable insecure guest logons\",\"description\":\"Specifies whether the SMB - client will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\":{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1076 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines without a given tag to a new recovery - services vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally exclude virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Name\",\"description\":\"Name of the tag to use for excluding - VMs from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Values\",\"description\":\"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1102 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"},{\"properties\":{\"displayName\":\"Azure - Batch account should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Batch account's - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"},{\"properties\":{\"displayName\":\"Virtual - network injection should be enabled for Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1049 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1563 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1462 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"},{\"properties\":{\"displayName\":\"Microsoft - IaaSAntimalware extension should be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/provisioningServices\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"greaterOrEquals\":1},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotDps\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b75ea5b-c796-4c99-aaaf-21c204daac43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1236 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1525 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1138 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1135 - Non-Repudiation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9cee519f-d9c1-4fd9-9f79-24ec3449ed30\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1489 - Location Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1322 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1233 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1259 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"},{\"properties\":{\"displayName\":\"All - network ports should be restricted on network security groups associated to - your virtual machine\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified some of your network security groups' inbound - rules to be too permissive. Inbound rules should not allow access from 'Any' - or 'Internet' ranges. This can potentially enable attackers to target your - resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"},{\"properties\":{\"displayName\":\"Application - definition for Managed Application should use customer provided storage account\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed - Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\":\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1500 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1504 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1494 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1187 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not set to the specified time - zone\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"},{\"properties\":{\"displayName\":\"Configure - Storage account to use a private link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"The subnetId that private endpoint - connections should link to\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access\"},\"allowedValues\":[\"blob\",\"blob_secondary\",\"table\",\"table_secondary\",\"queue\",\"queue_secondary\",\"file\",\"web\",\"web_secondary\",\"dfs\",\"dfs_secondary\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"in\":[\"StorageV2\",\"BlobStorage\",\"BlockBlobStorage\",\"FileStorage\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":\"[array(parameters('targetSubResource'))]\",\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f766f00-8d11-464e-80e1-4091d7874074\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1354 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the Log Analytics agent is not - connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search service should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or Deny the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"equals\":\"free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a049bf77-880b-470f-ba6d-9f21c530cf83\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1145 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"},{\"properties\":{\"displayName\":\"Allowed - resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support 'tags' and 'location' will be affected - by this policy. To restrict all resources please duplicate this policy and - change the 'mode' to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that can be deployed.\",\"displayName\":\"Allowed resource - types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1245 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"},{\"properties\":{\"displayName\":\"Security - Center standard pricing tier should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"field\":\"Microsoft.EventHub/namespaces/clusterArmId\",\"exists\":\"true\"},{\"not\":{\"field\":\"Microsoft.EventHub/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Logic Apps in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1612 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1059 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2a5b911-5617-447e-a49e-59dbe0e0434b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1532 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not restrict the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1238 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"},{\"properties\":{\"displayName\":\"Configure - Container registries to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Container Registry resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3701552-92ea-433e-9d17-33b7f1208fc9\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine scale sets for - Azure Security Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux Azure Monitor agent to enable Azure Monitor assignments - on Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorLinuxAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorLinuxAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorLinuxAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4034bc6-ae50-406d-bf76-50f4ee5a7811\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"},{\"properties\":{\"displayName\":\"Audit - usage of custom RBAC rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - built-in roles such as 'Owner, Contributer, Reader' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"},{\"properties\":{\"displayName\":\"Web - Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine for Azure Security - Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1617 - Application Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to CosmosDB account. - Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Dns Zone Id\",\"description\":\"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Group Id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"cosmosDB-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a63cc0bd-cda4-4178-b705-37dc439d3e0f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to an Event Hub to be enabled on Azure Key - Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Azure Key Vault Managed HSMs in this location will be linked to this Event - Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"hsmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('hsmName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('hsmName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"hsmName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6d2c800-5230-4a40-bff3-8268b4987d42\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using HTTPS secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires HTTPS user and key secrets stored in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"httpsUserKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - user name Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name.\"}},\"httpsKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - key Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"httpsUser\":{\"type\":\"securestring\"},\"httpsKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"httpsUser\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsUserKeyVaultSecretName')]\"}},\"httpsKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6f560f4-f582-4b67-b123-a37dcd1bf7ea\"},{\"properties\":{\"displayName\":\"Auditing - on SQL server should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1431 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1027 - Access Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"},{\"properties\":{\"displayName\":\"Azure - DDoS Protection Standard should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1570 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"},{\"properties\":{\"displayName\":\"Require - encryption on Data Lake Store accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures encryption is enabled on all Data Lake Store accounts\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Lake\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"SQL - Managed Instance should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"},{\"properties\":{\"displayName\":\"Deploy - Azure Policy Add-on to Azure Kubernetes Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\":\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\":{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', - parameters('clusterName'))]\",\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', - parameters('clusterName'))]\"},\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\":{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'), - 'Microsoft.ContainerService/managedClusters', parameters('clusterName')), - '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\":\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\",\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'), - 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\":\"[if(contains(parameters('aksClusterContent'), - 'identity'), parameters('aksClusterContent').identity, json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\",\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\",\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties, - 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles, - json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile, - json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile, - json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile, - json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\",\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties, - 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\",\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties, - 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy, - json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'networkProfile'), parameters('aksClusterContent').properties.networkProfile, - json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\",\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile, - json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile, - json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties, - 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID, - json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'identityProfile'), parameters('aksClusterContent').properties.identityProfile, - json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\":\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"}}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1400 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"},{\"properties\":{\"displayName\":\"SQL - Managed Instances should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Detailed Tracking'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"},{\"properties\":{\"displayName\":\"Deploy - network watcher when virtual networks are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\":\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\",\"name\":\"[concat('networkWatcher_', - parameters('location'))]\",\"location\":\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1511 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning instances to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotDps\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices-provisioning.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1539 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1006 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1461 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1073 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that 'PHP version' is the latest, if used as a part of the Function - app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP - cannot be used with Function apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Latest PHP version\",\"description\":\"Latest supported PHP version for App - Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Automatic provisioning of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1323 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - SQL servers without Advanced Data Security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance without advanced data security.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"},{\"properties\":{\"displayName\":\"Enable - Azure Security Center on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\\r\\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\\r\\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\\r\\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\\r\\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\":{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"},{\"properties\":{\"displayName\":\"Configure - disaster recovery on virtual machines by enabling replication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Compute\"},\"parameters\":{\"sourceRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Source - Region\",\"description\":\"Region in which the virtual machine is originally - deployed\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Region\",\"description\":\"Region to be used to deploy the virtual machine - in case of a natural disaster\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Resource Group\",\"description\":\"Resource group to be used to create the - virtual machine in the target region\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Vault - Resource Group\",\"description\":\"The resource group containing the recovery - services vault used for disaster recovery configurations\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Services Vault\",\"description\":\"ID of the recovery services vault to be - used for disaster recovery configurations\",\"strongType\":\"Microsoft.RecoveryServices/vaults\",\"serviceName\":\"ASR\"}},\"recoveryNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Virtual Network\",\"description\":\"Existing Recovery Virtual Network ID or - name of the Virtual Network to be created in Target Region\",\"strongType\":\"Microsoft.Network/virtualNetworks\",\"serviceName\":\"ASR\"}},\"targetZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Availability Zone\",\"description\":\"Availability zone in the designated - target region to be used by virtual machines during disaster\",\"strongType\":\"zone\",\"serviceName\":\"ASR\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('sourceRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings\",\"exists\":\"false\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"location\",\"equals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones[*]\",\"notEquals\":\"[parameters('targetZone')]\"}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"value\":\"[length(parameters('targetZone'))]\",\"greater\":0}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"name\",\"like\":\"ASR-Protect-*\"},{\"field\":\"Microsoft.Resources/links/targetId\",\"contains\":\"/replicationProtectedItems/\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"apiVersion\":{\"type\":\"String\"},\"avSetId\":{\"type\":\"String\"},\"dataDiskIds\":{\"type\":\"object\"},\"osDiskId\":{\"type\":\"String\"},\"ppgId\":{\"type\":\"String\"},\"recoveryNetworkId\":{\"type\":\"String\"},\"recoverySubscriptionId\":{\"type\":\"String\"},\"sourceRegion\":{\"type\":\"String\"},\"sourceResourceGroupName\":{\"type\":\"String\"},\"targetRegion\":{\"type\":\"String\"},\"targetResourceGroupName\":{\"type\":\"String\"},\"targetZone\":{\"type\":\"String\"},\"vaultName\":{\"type\":\"String\"},\"vaultResourceGroupName\":{\"type\":\"String\"},\"vmId\":{\"type\":\"String\"},\"vmZones\":{\"type\":\"Object\"}},\"variables\":{\"avSetApiVersion\":\"2019-03-01\",\"deploymentApiVersion\":\"2017-05-10\",\"vmApiVersion\":\"2019-07-01\",\"ppgApiVersion\":\"2019-12-01\",\"portalLinkPrefix\":\"https://portal.azure.com/aaa@foo.com\",\"schemaLink\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"defaultAvSet\":\"defaultAvSet-asr\",\"defaultPPG\":\"defaultPPG-asr\",\"eligibilityResultsDefault\":\"default\",\"protectedItemSuffix\":\"-policy\",\"recoveryAvSetPrefix\":\"RecoveryAvSet-\",\"recoveryPPGPrefix\":\"RecoveryPPG-\",\"avSetType\":\"Microsoft.Compute/availabilitySets\",\"deploymentType\":\"Microsoft.Resources/deployments\",\"networkType\":\"Microsoft.Network/virtualNetworks\",\"ppgType\":\"Microsoft.Compute/proximityPlacementGroups\",\"replicationEligibilityResultsType\":\"Microsoft.RecoveryServices/replicationEligibilityResults\",\"storageType\":\"Microsoft.Storage/storageAccounts\",\"vaultType\":\"Microsoft.RecoveryServices/vaults\",\"avSetTemplateName\":\"[concat(variables('recoveryAvSetPrefix'), - last(split(parameters('vmId'), '/')))]\",\"avSetTemplateName64\":\"[if(greater(length(variables('avSetTemplateName')), - 64), substring(variables('avSetTemplateName'), 0, 64), variables('avSetTemplateName'))]\",\"ppgTemplateName\":\"[concat(variables('recoveryPPGPrefix'), - last(split(parameters('vmId'), '/')))]\",\"ppgTemplateName64\":\"[if(greater(length(variables('ppgTemplateName')), - 64), substring(variables('ppgTemplateName'), 0, 64), variables('ppgTemplateName'))]\",\"replicationProtectedIntentTemplateName\":\"[concat('ASR-', - parameters('sourceResourceGroupName'), '-', last(split(parameters('vmId'), - '/')))]\",\"replicationProtectedIntentTemplateName64\":\"[if(greater(length(variables('replicationProtectedIntentTemplateName')), - 64), substring(variables('replicationProtectedIntentTemplateName'), 0, 64), - variables('replicationProtectedIntentTemplateName'))]\",\"vmDataDiskIds\":\"[array(parameters('dataDiskIds').rawValue)]\",\"vmDiskCount\":\"[add(length(variables('vmDataDiskIds')), - int(1))]\",\"diskIds\":\"[concat(array(parameters('osDiskId')), array(parameters('dataDiskIds').rawValue))]\",\"vaultId\":\"[resourceId(parameters('vaultResourceGroupName'), - variables('vaultType'), parameters('vaultName'))]\",\"eligibilityResultsId\":\"[extensionResourceId(parameters('vmId'), - variables('replicationEligibilityResultsType'), variables('eligibilityResultsDefault'))]\",\"protectedIntentName\":\"[concat(parameters('vaultName'), - '/', guid(resourceGroup().id, last(split(parameters('vmId'), '/'))), variables('protectedItemSuffix'))]\",\"recoveryAvSetName\":\"[if(empty(parameters('avSetId')), - variables('defaultAvSet'), concat(last(split(parameters('avSetId'), '/')), - '-asr'))]\",\"recoveryAvSetId\":\"[if(empty(parameters('avSetId')), '', resourceId(parameters('targetResourceGroupName'), - variables('avSetType'), variables('recoveryAvSetName')))]\",\"recoveryAvType\":\"[if(not(empty(parameters('avSetId'))), - 'AvailabilitySet', if(greater(length(parameters('vmZones').rawValue), 0), - 'AvailabilityZone', 'Single'))]\",\"recoveryAvZone\":\"[if(greater(length(parameters('vmZones').rawValue), - 0), parameters('targetZone'), '')]\",\"recoveryPPGName\":\"[if(empty(parameters('ppgId')), - variables('defaultPPG'), concat(last(split(parameters('ppgId'), '/')), '-asr'))]\",\"recoveryPPGId\":\"[if(empty(parameters('ppgId')), - '', resourceId(parameters('targetResourceGroupName'), variables('ppgType'), - variables('recoveryPPGName')))]\",\"targetResourceGroupId\":\"[concat('/subscriptions/', - parameters('recoverySubscriptionId'), '/resourceGroups/', parameters('targetResourceGroupName'))]\"},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('ppgTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"type\":\"[variables('ppgType')]\",\"name\":\"[variables('recoveryPPGName')]\",\"apiVersion\":\"[variables('ppgApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"properties\":{\"proximityPlacementGroupType\":\"[if(empty(parameters('ppgId')), - 'Standard', reference(parameters('ppgId'), variables('ppgApiVersion')).proximityPlacementGroupType)]\"}}]},\"parameters\":{}}},{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('avSetTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"type\":\"[variables('avSetType')]\",\"sku\":{\"name\":\"[if(empty(parameters('avSetId')), - 'Aligned', reference(parameters('avSetId'), variables('avSetApiVersion'), - 'Full').sku.name)]\"},\"name\":\"[variables('recoveryAvSetName')]\",\"apiVersion\":\"[variables('avSetApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"tags\":{},\"properties\":{\"platformUpdateDomainCount\":\"[if(empty(parameters('avSetId')), - '5', reference(parameters('avSetId'), variables('avSetApiVersion')).platformUpdateDomainCount)]\",\"platformFaultDomainCount\":\"[if(empty(parameters('avSetId')), - '2', reference(parameters('avSetId'), variables('avSetApiVersion')).platformFaultDomainCount)]\",\"proximityPlacementGroup\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"id\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\"}}]},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\"]},{\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('replicationProtectedIntentTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('vaultResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/replicationProtectionIntents\",\"name\":\"[variables('protectedIntentName')]\",\"apiVersion\":\"[parameters('apiVersion')]\",\"properties\":{\"providerSpecificDetails\":{\"instanceType\":\"A2A\",\"fabricObjectId\":\"[parameters('vmId')]\",\"primaryLocation\":\"[parameters('sourceRegion')]\",\"recoveryLocation\":\"[parameters('targetRegion')]\",\"recoverySubscriptionId\":\"[parameters('recoverySubscriptionId')]\",\"recoveryAvailabilityType\":\"[variables('recoveryAvType')]\",\"recoveryAvailabilityZone\":\"[variables('recoveryAvZone')]\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\",\"recoveryAvailabilitySetCustomInput\":\"[if(empty(parameters('avSetId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryAvailabilitySetId\\\"', ':', '\\\"', variables('recoveryAvSetId'), - '\\\"', '}')))]\",\"recoveryProximityPlacementGroupCustomInput\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryProximityPlacementGroupId\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\",\"recoveryVirtualNetworkCustomInput\":\"[if(contains(parameters('recoveryNetworkId'), - '/'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryVirtualNetworkId\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"New\\\",', - '\\\"recoveryVirtualNetworkName\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')))]\",\"vmDisks\":[],\"copy\":[{\"name\":\"vmManagedDisks\",\"count\":\"[variables('vmDiskCount')]\",\"input\":{\"diskId\":\"[if(equals(copyIndex('vmManagedDisks'), - int(0)), reference(parameters('vmId'), variables('vmApiVersion')).storageProfile.osDisk.managedDisk.Id, - variables('vmDataDiskIds')[sub(copyIndex('vmManagedDisks'), int(1))])]\",\"recoveryResourceGroupCustomInput\":{\"resourceType\":\"Existing\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\"}}}]}}}],\"outputs\":{\"vmName\":{\"value\":\"[last(split(parameters('vmId'), - '/'))]\",\"type\":\"string\"},\"availabilitySetUrl\":{\"value\":\"[if(empty(parameters('avSetId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryAvSetId')))]\",\"type\":\"string\"},\"proximityPlacementGroupUrl\":{\"value\":\"[if(empty(parameters('ppgId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryPPGId')))]\",\"type\":\"string\"},\"replicationEligibilityResults\":{\"value\":\"[reference(variables('eligibilityResultsId'), - parameters('apiVersion'))]\",\"type\":\"Object\"}}},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\",\"[variables('avSetTemplateName64')]\"]}],\"outputs\":{}},\"parameters\":{\"apiVersion\":{\"value\":\"2018-07-10\"},\"avSetId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/availabilitySet.id')]\"},\"dataDiskIds\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id')]\",\"emptyArray\":[]}},\"osDiskId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id')]\"},\"ppgId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/proximityPlacementGroup.id')]\"},\"recoveryNetworkId\":{\"value\":\"[parameters('recoveryNetworkId')]\"},\"recoverySubscriptionId\":{\"value\":\"[subscription().subscriptionId]\"},\"sourceRegion\":{\"value\":\"[parameters('sourceRegion')]\"},\"sourceResourceGroupName\":{\"value\":\"[resourcegroup().Name]\"},\"targetRegion\":{\"value\":\"[parameters('targetRegion')]\"},\"targetResourceGroupName\":{\"value\":\"[last(split(parameters('targetResourceGroupId'), - '/'))]\"},\"targetZone\":{\"value\":\"[parameters('targetZone')]\"},\"vaultName\":{\"value\":\"[last(split(parameters('vaultId'), - '/'))]\"},\"vaultResourceGroupName\":{\"value\":\"[last(split(parameters('vaultResourceGroupId'), - '/'))]\"},\"vmId\":{\"value\":\"[field('id')]\"},\"vmZones\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/zones')]\",\"emptyArray\":[]}}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac34a73f-9fa5-4067-9247-a3ecae514468\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"},{\"properties\":{\"displayName\":\"Role-Based - Access Control (RBAC) should be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"},{\"properties\":{\"displayName\":\"Configure - Synapse workspaces to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"Integer\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a Synapse workspace is created that will be - shared by all Synapse workspaces in that region). Important - for proper operation - of Auditing do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"workspaceName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"int\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[parameters('auditRetentionDays')]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('workspaceaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('workspaceAuditingStorageAccount-', - uniqueString(variables('locationCode'), deployment().name))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure Synapse workspaces to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('workspaceName'), - '/Default')]\",\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"workspaceName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation if the 'environment' tag is set to one of the following - values: production, dev, test, staging\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\",\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1569 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1454 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1272 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"},{\"properties\":{\"displayName\":\"SQL - Server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1598 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"},{\"properties\":{\"displayName\":\"Guest - Configuration extension should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as 'Windows Exploit guard should be enabled'. Learn more - at https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\",\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae89ebca-1c92-4898-ac2c-9f63decb045c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL Managed Instance advanced - data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1413 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1710 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"},{\"properties\":{\"displayName\":\"Azure - Spring Cloud should use network injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Spring Cloud instances should use virtual network injection for the following - purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring - Cloud to interact with systems in either on premises data centers or Azure - service in other virtual networks. 3. Empower customers to control inbound - and outbound network communications for Azure Spring Cloud.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Platform\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure - Spring Cloud SKU Names\",\"description\":\"List of Azure Spring Cloud SKUs - against which this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"},{\"properties\":{\"displayName\":\"Monitor - missing Endpoint Protection in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"SQL - servers which don't have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: 'Auditing should be enabled on advanced data security - settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1725 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"},{\"properties\":{\"displayName\":\"Activity - log should be retained for at least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1429 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1711 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"count\":{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet\",\"exists\":false}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0ab5b05-1c98-40f7-bb9e-dc568e41b501\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints connect to Azure SignalR - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"description\":\"Private DNS zone to integrate with private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"signalr\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-service-signalr-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0e86710-7fb7-4a6c-a064-32e9b829509e\"},{\"properties\":{\"displayName\":\"Management - ports of virtual machines should be protected with just-in-time network access - control\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1571 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"},{\"properties\":{\"displayName\":\"SQL - Database should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1091 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1009 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1234 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1107 - Content Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows web servers that are not using secure - communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum TLS version\",\"description\":\"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\":\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\":{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is deployed for the indicated Storage Sync Service resource. - This enables you to address your Storage Sync Service resource from within - the private IP address space of your organization's network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet with private endpoint network policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"afs\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b35dddd9-daf7-423b-8375-5a5b86806d5a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Logon-Logoff'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to a Log Analytics workspace to be enabled - on Azure Key Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - to send log to. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3884c81-31aa-473d-a9bb-9466fe0ec2a0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1380 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"},{\"properties\":{\"displayName\":\"Resource - logs in Search services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1172 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1131 - Protection Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Shutdown' for allowing shutdown without logon and clearing the virtual - memory pagefile. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Clear virtual memory pagefile\",\"description\":\"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"},{\"properties\":{\"displayName\":\"Azure - Stack Edge devices should use double-encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - secure the data at rest on the device, ensure it's double-encrypted, the access - to data is controlled, and once the device is deactivated, the data is securely - erased off the data disks. Double encryption is the use of two layers of encryption: - BitLocker XTS-AES 256-bit encryption on the data volumes and built-in encryption - of the hard drives. Learn more in the security overview documentation for - the specific Stack Edge device.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Stack Edge\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBoxEdge/DataBoxEdgeDevices\"},{\"field\":\"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name\",\"notIn\":[\"TEA_1Node\",\"TEA_1Node_UPS\",\"TEA_1Node_Heater\",\"TEA_1Node_UPS_Heater\",\"TEA_4Node_Heater\",\"TEA_4Node_UPS_Heater\",\"TMA\",\"EdgePR_Base\",\"EdgePR_Base_UPS\",\"EdgeMR_Mini\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4ac1030-89c5-4697-8e00-28b5ba6a8811\"},{\"properties\":{\"displayName\":\"[Deprecated]: - A security contact phone number should be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should only use Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection for Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection across Cosmos DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('cosmosDbAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"},{\"properties\":{\"displayName\":\"Diagnostic - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts with private endpoints \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A - group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"privateEndpointGroupId\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"String\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"[parameters('privateEndpointGroupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b609e813-3156-4079-91fa-a8494c1471c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"notEquals\":\"free\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Search/searchServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"searchService\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b698b005-b660-4837-b833-a7aaab26ddba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1568 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"},{\"properties\":{\"displayName\":\"Network - Watcher should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"listOfLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\":\"Audit - if Network Watcher is not enabled for region(s).\",\"strongType\":\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NetworkWatcher - resource group name\",\"description\":\"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1608 - Supply Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1401 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for SQL Databases to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select the Log Analytics workspace - from dropdown list\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreRuntimeStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreRuntimeStatistics - logs to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreWaitStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"ErrorsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Errors - - Enabled\",\"description\":\"Whether to stream Errors logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DatabaseWaitStatistics - - Enabled\",\"description\":\"Whether to stream DatabaseWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"BlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Blocks - - Enabled\",\"description\":\"Whether to stream Blocks logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLInsightsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLInsights - - Enabled\",\"description\":\"Whether to stream SQLInsights logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLSecurityAuditEvents - - Enabled\",\"description\":\"Whether to stream SQLSecurityAuditEvents logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"TimeoutsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Timeouts - - Enabled\",\"description\":\"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AutomaticTuningEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AutomaticTuning - - Enabled\",\"description\":\"Whether to stream AutomaticTuning logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DeadlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Deadlocks - - Enabled\",\"description\":\"Whether to stream Deadlocks logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Basic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Basic - (metric) - Enabled\",\"description\":\"Whether to stream Basic metrics to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"InstanceAndAppAdvanced\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"InstanceAndAppAdvanced - (metric) - Enabled\",\"description\":\"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"WorkloadManagement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"WorkloadManagement - (metric) - Enabled\",\"description\":\"Whether to stream WorkloadManagement - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"matchInsensitively\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Basic\":{\"type\":\"string\"},\"InstanceAndAppAdvanced\":{\"type\":\"string\"},\"WorkloadManagement\":{\"type\":\"string\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"string\"},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"string\"},\"ErrorsEnabled\":{\"type\":\"string\"},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"string\"},\"BlocksEnabled\":{\"type\":\"string\"},\"SQLInsightsEnabled\":{\"type\":\"string\"},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"string\"},\"TimeoutsEnabled\":{\"type\":\"string\"},\"AutomaticTuningEnabled\":{\"type\":\"string\"},\"DeadlocksEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Basic\",\"enabled\":\"[parameters('Basic')]\"},{\"category\":\"InstanceAndAppAdvanced\",\"enabled\":\"[parameters('InstanceAndAppAdvanced')]\"},{\"category\":\"WorkloadManagement\",\"enabled\":\"[parameters('WorkloadManagement')]\"}],\"logs\":[{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('SQLInsightsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('AutomaticTuningEnabled')]\"},{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('ErrorsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('TimeoutsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('BlocksEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('DeadlocksEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"Basic\":{\"value\":\"[parameters('Basic')]\"},\"InstanceAndAppAdvanced\":{\"value\":\"[parameters('InstanceAndAppAdvanced')]\"},\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"WorkloadManagement\":{\"value\":\"[parameters('WorkloadManagement')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('fullName')]\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},\"QueryStoreWaitStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},\"ErrorsEnabled\":{\"value\":\"[parameters('ErrorsEnabled')]\"},\"DatabaseWaitStatisticsEnabled\":{\"value\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},\"BlocksEnabled\":{\"value\":\"[parameters('BlocksEnabled')]\"},\"SQLInsightsEnabled\":{\"value\":\"[parameters('SQLInsightsEnabled')]\"},\"SQLSecurityAuditEventsEnabled\":{\"value\":\"[parameters('SQLSecurityAuditEventsEnabled')]\"},\"TimeoutsEnabled\":{\"value\":\"[parameters('TimeoutsEnabled')]\"},\"AutomaticTuningEnabled\":{\"value\":\"[parameters('AutomaticTuningEnabled')]\"},\"DeadlocksEnabled\":{\"value\":\"[parameters('DeadlocksEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b79fa14e-238a-4c2d-b376-442ce508fc84\"},{\"properties\":{\"displayName\":\"API - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members\",\"description\":\"A semicolon-separated list of all the expected - members of the Administrators local group. Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\":{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Event Hub namespaces, data - leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Accounts'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Administrative operations with no activity log alerts - configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Administrative Operation name for which activity - log alert should be configured\"},\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\",\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\",\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1257 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1186 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1447 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1625 - Boundary Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Recovery console'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\",\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"topic\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"topic-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baf19753-7502-405f-8745-370519b20483\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1726 - Information Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1166 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1188 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"},{\"properties\":{\"displayName\":\"Non-internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1533 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Client'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1095 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1050 - Concurrent Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"},{\"properties\":{\"displayName\":\"IP - Forwarding on your virtual machine should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling - IP forwarding on a virtual machine's NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"},{\"properties\":{\"displayName\":\"Container - registries should have SKUs that support Private Links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"notEquals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL Managed Instance - advanced data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It's - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for DNS should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for DNS provides an additional layer of protection for your cloud - resources by continuously monitoring all DNS queries from your Azure resources. - Azure Defender alerts you about suspicious activity at the DNS layer. Learn - more about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Dns\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bdc59948-5574-49b3-bb91-76b7c986428d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group contains any - of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1360 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be enabled for Azure Front Door Service or - Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have not restarted within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\",\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number - of days\",\"description\":\"The number of days without restart until the machine - is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"},{\"properties\":{\"displayName\":\"Windows - Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.1.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\",\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status - if Windows Defender is not available on machine\",\"description\":\"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to 'Non-Compliant' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' - shows these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1152 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"},{\"properties\":{\"displayName\":\"Geo-redundant - storage should be enabled for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - geo-redundancy to create highly available applications\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub's - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotHub\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf684997-3909-404e-929c-d4a38ed23b2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Logon-Logoff'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Group Membership\",\"description\":\"Specifies whether audit events - are generated when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"},\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using SSH secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires a SSH private key secret in Key Vault. - For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"sshKnownHostsContents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Base64-encoded - known hosts content\",\"description\":\"The base64-encoded known hosts content.\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"sshPrivateKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SSH - private key Key Vault secret\",\"description\":\"The name of the Key Vault - secret that holds the base64-encoded SSH private key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents\",\"equals\":\"[parameters('sshKnownHostsContents')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"sshKnownHostsContents\":{\"type\":\"string\"},\"sshPrivateKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":{\"value\":\"[parameters('sshKnownHostsContents')]\"},\"sshPrivateKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('sshPrivateKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c050047b-b21b-4822-8a2d-c1e37c3c0c6a\"},{\"properties\":{\"displayName\":\"Configure - private endpoint connections on Azure Automation accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only - approved VM extensions should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy governs the virtual machine extensions that are not approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"approvedExtensions\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of approved extension types that can be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved - extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1676 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1719 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"},{\"properties\":{\"displayName\":\"Deploy - associations for a custom provider\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom - Provider\"},\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Custom - provider ID\",\"description\":\"Resource ID of the Custom provider to which - resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the custom provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetCustomProviderId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\":{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1004 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Logon'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Credential Validation\",\"description\":\"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"},\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1503 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not set to the specified - time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Time zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"},{\"properties\":{\"displayName\":\"Flow - logs should be configured for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"},{\"properties\":{\"displayName\":\"Azure - Defender for container registries should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the specified services are not - installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and 'Running'. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1176 - Baseline Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should enable double encryption for data at rest on the device\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support software-based double - encryption\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c349d81b-9985-44ae-a8da-ff98d108ede8\"},{\"properties\":{\"displayName\":\"Azure - Key Vault Managed HSM should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHsms/enableSoftDelete\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.KeyVault/managedHsms/enablePurgeProtection\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39ba22d-4428-4149-b981-70acb31fc383\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1389 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for Resource Manager should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Arm\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3d20c29-b36d-48fe-808b-99a87530ad99\"},{\"properties\":{\"displayName\":\"System - updates on virtual machine scale sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"},{\"properties\":{\"displayName\":\"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"},{\"properties\":{\"displayName\":\"[Preview]: - Container Registry should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1235 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1173 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Policy operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Policy Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that contain certificates expiring - within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate store path\",\"description\":\"The path to the certificate store - containing the certificates to check the expiration dates of. Default value - is 'Cert:' which is the root certificate store path, so all certificates on - the machine will be checked. Other example paths: 'Cert:\\\\LocalMachine', - 'Cert:\\\\LocalMachine\\\\TrustedPublisher', 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Expiration limit in days\",\"description\":\"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to include\",\"description\":\"A semicolon-separated - list of certificate thumbprints to check under the specified path. If a value - is not specified, all certificates under the certificate store path will be - checked. If a value is specified, no certificates other than those with the - thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to exclude\",\"description\":\"A semicolon-separated - list of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Include expired certificates\",\"description\":\"Must be 'true' or 'false'. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"},\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"},\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"},\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\":{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"},\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1670 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not set to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\",\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell execution - policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\":{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Execution Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1190 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter.\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Value\",\"description\":\"Value of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Name parameter.\"}}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"not\":{\"field\":\"[concat('tags[',parameters('tagName'), - ']')]\",\"equals\":\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\",\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\",\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\",\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\":\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/', - parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1619 - Information In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1353 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL server advanced data - security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - API App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1470 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Interactive Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"},{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"},{\"properties\":{\"displayName\":\"Resource - logs in Data Lake Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'User Rights Assignment'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotHub\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Network Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name '{storagePrefixParameter}{NSGLocation}' will be - automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - Account Prefix for Regional Storage Account\",\"description\":\"This prefix - will be combined with the network security group location to form the created - storage account name.\"}},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Group Name for Storage Account (must exist)\",\"description\":\"The resource - group that the storage account will be created in. This resource group must - already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\":\"[concat('policyStorage_', - uniqueString(parameters('location'), parameters('nsgName')))]\"},\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\",\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\",\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\",\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\":\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\",\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[concat(parameters('storageprefix'), - parameters('location'))]\",\"sku\":{\"name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\":\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\":null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\":\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\":\"[resourceId(parameters('rgName'), - 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'), parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"},\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"},{\"properties\":{\"displayName\":\"Storage - accounts should allow access from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Some - Microsoft services that interact with storage accounts operate from networks - that can't be granted access through network rules. To help this type of service - work as intended, allow the set of trusted Microsoft services to bypass the - network rules. These services will then use strong authentication to access - the storage account.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"},{\"properties\":{\"displayName\":\"App - Configuration should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your app configuration instances - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows Azure Monitor agent to enable Azure Monitor assignments - on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorWindowsAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorWindowsAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca817e41-e85a-4783-bc7f-dc532d36235e\"},{\"properties\":{\"displayName\":\"Managed - disks should be double encrypted with both platform-managed and customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskEncryptionSets\"},{\"field\":\"Microsoft.Compute/diskEncryptionSets/encryptionType\",\"notEquals\":\"EncryptionAtRestWithPlatformAndCustomerKeys\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca91455f-eace-4f96-be59-e6e2c35b4816\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Server' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1486 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1167 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1374 - Incident Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"},{\"properties\":{\"displayName\":\"[Preview]: - Sensitive data in your SQL databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Security - Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"},{\"properties\":{\"displayName\":\"Allowed - virtual machine size SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"},\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of size SKUs that can be specified for virtual machines.\",\"displayName\":\"Allowed - Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1443 - Media Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation only if the 'department' tag is set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1582 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1104 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"},{\"properties\":{\"displayName\":\"Deploy - export to Event Hub for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Event Hub configuration is created. If you enter a name for a resource group - that doesn't exist, it'll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Event Hub configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub details\",\"description\":\"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with 'Send' claim.\",\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\":\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Event Hub via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', - variables('SeperatedEventHubDetails')[1], '/', variables('SeperatedEventHubDetails')[2], - '/', variables('SeperatedEventHubDetails')[3], '/', variables('SeperatedEventHubDetails')[4], - '/', variables('SeperatedEventHubDetails')[5], '/', variables('SeperatedEventHubDetails')[6], - '/', variables('SeperatedEventHubDetails')[7], '/', variables('SeperatedEventHubDetails')[8], - '/', variables('SeperatedEventHubDetails')[9], '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\":\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"eventHubDetails\":{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Privilege Use'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1209 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"},{\"properties\":{\"displayName\":\"Resource - logs in Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1724 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"},{\"properties\":{\"displayName\":\"Container - registries should not allow unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn't have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1084 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against 'man in the middle' attacks by encrypting the data stream - between the server and your application. This configuration enforces that - SSL is always enabled for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1620 - Denial Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Function Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1721 - Spam Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"},{\"properties\":{\"displayName\":\"Virtual - machines' Guest Configuration extension should be deployed with system-assigned - managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines\",\"name\":\"[first(split(field('fullName'), - '/'))]\",\"existenceCondition\":{\"field\":\"identity.type\",\"contains\":\"SystemAssigned\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d26f7642-7545-4e18-9b75-8c9bbdee3a9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"domain\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"domain-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d389df0a-e0d7-4607-833c-75a6fdac2c2d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the DSC configuration is - not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"},{\"properties\":{\"displayName\":\"Long-term - geo-redundant backup should be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\",\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1249 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1562 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"},{\"properties\":{\"displayName\":\"Virtual - machines should be connected to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual machine connected to a virtual network that is not - approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network Id\",\"description\":\"Resource Id of the virtual network. Example: - /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\",\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1383 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"},{\"properties\":{\"displayName\":\"Managed - disks should use a specific set of disk encryption sets for the customer-managed - key encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"allowedEncryptionSets\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - disk encryption set\",\"description\":\"The list of allowed disk encryption - sets for managed disks.\",\"strongType\":\"Microsoft.Compute/diskEncryptionSets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d461a302-a187-421a-89ac-84acdb4edc04\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1112 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs for Application Insights should be linked to a Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that's enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1585 - Security Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"},{\"properties\":{\"displayName\":\"Log - Analytics agent health issues should be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1150 - Security Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"},{\"properties\":{\"displayName\":\"Event - Hub should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1549 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Client' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1473 - Emergency Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1529 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn't exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d82101f3-f3ce-4fc5-8708-4c09f4009546\"},{\"properties\":{\"displayName\":\"Configure - Container registries with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"registry\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d85c6833-7d33-4cf5-a915-aaa2de84405f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1488 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption in transit to encrypt communication - between Azure HDInsight cluster nodes\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9da03a1-f3c3-412a-9709-947156872263\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not store passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1516 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your CosmosDB resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Batch Accounts in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"},{\"properties\":{\"displayName\":\"Logic - Apps should be deployed into Integration Service Environment\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"field\":\"Microsoft.Logic/workflows/integrationServiceEnvironment\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc595cb1-1cde-45f6-8faf-f88874e1c0e1\"},{\"properties\":{\"displayName\":\"Web - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dcbc65aa-59f3-4239-8978-3bb869d82604\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1439 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Policy Change'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1678 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1391 - Information Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1146 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Settings - Account Policies'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Recovery console'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1689 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1528 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Recovery Services vaults should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"count\":{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState\",\"equals\":\"Succeeded\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deeddb44-9f94-4903-9fa0-081d524406e3\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df39c015-56a4-45de-b4a3-efe77bed320d\"},{\"properties\":{\"displayName\":\"MariaDB - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - resource id of the private DNS zone\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"redisCache\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-redis-cache-windows-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e016b22b-e0eb-436d-8fd7-160c4eaed6e2\"},{\"properties\":{\"displayName\":\"Auditing - on Synapse workspace should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e04e5000-cd89-451d-bb21-a14d24ff9c73\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'User - Rights Assignment' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access - this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"Allow - log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":\"Deny - access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":\"Manage - auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":\"Back - up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\":\"Change - the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\":\"Change - the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\":\"Create - a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":\"Deny - log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":\"Deny - log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\":\"Deny - log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":\"Force - shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":\"Restore - files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\":\"Shut - down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":\"Take - ownership of files or other objects;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on locally\",\"description\":\"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the system time\",\"description\":\"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the time zone\",\"description\":\"Specifies which - users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may create a token object\",\"description\":\"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied local logon\",\"description\":\"Specifies which - users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"User - and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may shut down the system\",\"description\":\"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"},{\"properties\":{\"displayName\":\"Cosmos - DB should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - MSS (Legacy)' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Execution Policy\",\"description\":\"The expected PowerShell execution - policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"},\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1686 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1047 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled in virtual machine scale sets for listed virtual machine - images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1161 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1387 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"},{\"properties\":{\"displayName\":\"Azure - VPN gateways should not use 'basic' SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\":\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\",\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"},{\"properties\":{\"displayName\":\"RDP - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows RDP access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Shutdown'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Settings - - Account Policies'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enforce password history\",\"description\":\"Specifies limits on password - reuse - how many times a new password must be created for a user account before - the password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Maximum password age\",\"description\":\"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password age\",\"description\":\"Specifies the minimum number of days - that must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password length\",\"description\":\"Specifies the minimum number of - characters that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Password must meet complexity requirements\",\"description\":\"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\":{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\":{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\":{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\":{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\":{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1451 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - User Account Control'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode\",\"description\":\"Specifies the behavior of the elevation prompt for - administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1381 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1421 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1023 - Account Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"},{\"properties\":{\"displayName\":\"Allowed - locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\":\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1499 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Accounts'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Accounts: Guest account status\",\"description\":\"Specifies whether the local - Guest account is disabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"},\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that do not have the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the specified services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the services that should be installed and 'Running'. e.g. - 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"},{\"properties\":{\"displayName\":\"Subnets - should be associated with a Network Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1567 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1311 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL server Advanced - Data Security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"},{\"properties\":{\"displayName\":\"Allowed - locations for resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that resource groups can be created in.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1273 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - 'man in the middle' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in container security configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Storage in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"},{\"properties\":{\"displayName\":\"Container - registries should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network.By mapping private endpoints to your container registries - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1723 - Information Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"},{\"properties\":{\"displayName\":\"Configure - Container registries to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint's associated VNET.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"registry\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"containerRegistry-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1200 - Security Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1487 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be created with infrastructure-encryption enabled - (double encryption)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"},{\"properties\":{\"displayName\":\"Key - Vault should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that allow remote connections from accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1422 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1542 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"},{\"properties\":{\"displayName\":\"Function - apps should have 'Client Certificates (Incoming client certificates)' enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1321 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"},{\"properties\":{\"displayName\":\"Log - checkpoints should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"},{\"properties\":{\"displayName\":\"Log - connections should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"},{\"properties\":{\"displayName\":\"Disconnections - should be logged for PostgreSQL database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"},{\"properties\":{\"displayName\":\"Log - duration should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"},{\"properties\":{\"displayName\":\"Deprecated - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts with owner permissions should be removed from your subscription. - \ Deprecated accounts are accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\":{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"},{\"properties\":{\"displayName\":\"Double - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that allow remote connections from - accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Control Panel'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1622 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed66d4f5-8220-45dc-ab4a-20d1749c74e6\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Key Vaults in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Stream Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"amlworkspace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"amlworkspace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee40564d-486e-4f68-a5ca-7a621edae0fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1189 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee980b6d-0eca-4501-8d54-f6290fd512c3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Accounts' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: - Guest account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Accounts: - Guest account status\",\"description\":\"Specifies whether the local Guest - account is disabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1089 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1314 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1128 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints to Azure SignalR Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"signalr\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef45854f-b33f-49a3-8041-9057e915d88f\"},{\"properties\":{\"displayName\":\"API - Management services should use a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API - Management SKU Names\",\"description\":\"List of API Management SKUs against - which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Destination Location\",\"description\":\"The location the Event Hub that - will get diagnostic data resides in. Only source Event Hubs in this location - will be linked to this destination Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1472 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1012 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1358 - Incident Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1531 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0fcf93c-c063-4071-9668-c47474bd3564\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - name contains\",\"description\":\"String included in the required alert name. - For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Alert is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Alert is created - or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('alertSeverities'),if(equals(parameters('alertName'), - ''), array('3.'), array(parameters('alertName'))))]\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"in\":\"[union(array('Severity'),if(equals(parameters('alertName'), - ''), array('Version'), array('AlertDisplayName')))]\"},{\"count\":{\"value\":\"[parameters('alertSeverities')]\",\"name\":\"alertSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"Severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('alertSeverity')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('alertSeverities'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert - is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'), - ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(parameters('alertName'), - ''), '3.', parameters('alertName'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'), - variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1028 - Information Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"},{\"properties\":{\"displayName\":\"Virtual - networks should use specified virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network gateway Id\",\"description\":\"Resource Id of the virtual network - gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\",\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), - '/')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - MSS (Legacy)'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Settings - Account Policies' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\":\"Enforce - password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum password - age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\",\"MinimumPasswordLength\":\"Minimum - password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\":\"Password - must meet complexity requirements;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce - password history\",\"description\":\"Specifies limits on password reuse - - how many times a new password must be created for a user account before the - password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Maximum - password age\",\"description\":\"Specifies the maximum number of days that - may elapse before a user account password must be changed. The format of the - value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password age\",\"description\":\"Specifies the minimum number of days that - must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password length\",\"description\":\"Specifies the minimum number of characters - that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password - must meet complexity requirements\",\"description\":\"Specifies whether a - user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1457 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"},{\"properties\":{\"displayName\":\"Disk - access resources should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to diskAccesses, data leakage - risks are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f39f5f49-4abf-44de-8c70-0756997bfb51\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - all of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not contain the specified certificates - in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"},{\"properties\":{\"displayName\":\"Audit - Log Analytics workspace for VM - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - VMs as non-compliant if they aren't logging to the Log Analytics workspace - specified in the policy/initiative assignment.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics Workspace Id that VMs should be configured for\",\"description\":\"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"},{\"properties\":{\"displayName\":\"Authorization - rules on the Event Hub instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1495 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have not restarted within the - specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Number of days\",\"description\":\"The number of days without restart until - the machine is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"},\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"},{\"properties\":{\"displayName\":\"Disk - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b53539-8df9-40e4-86c6-6b607703bd4e\"},{\"properties\":{\"displayName\":\"Configure - SQL servers to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, SQL - servers should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a SQL Server is created that will be shared - by all servers in that region). Important - for proper operation of Auditing - do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('sqlaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-', - uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure SQL servers to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1469 - Power Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1618 - Security Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths\",\"description\":\"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be a set mode for Application Gateway and - Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Mode Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"},{\"properties\":{\"displayName\":\"Internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1214 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Recovery console' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1540 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1449 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use system-assigned managed identity - authentication when it is supported\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Using - system-assigned managed identity when communicating with data stores via linked - services avoids the use of less secured credentials such as passwords or connection - strings.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"AzureSqlDatabase\",\"AzureSqlMI\",\"AzureSqlDW\",\"AzureBlobFS\",\"AdlsGen2CosmosStructuredStream\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureBlobStorage\",\"AzureDatabricks\"]},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"User - ID=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f78ccdb4-7bf4-4106-8647-270491d2978a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/encryption.cmk.key.name\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d52b2d-e161-4dfa-a82b-55e564167385\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"},{\"properties\":{\"displayName\":\"External - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1345 - Cryptographic Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Other System Events\",\"description\":\"Specifies whether audit events - are generated for Windows Firewall Service and Windows Firewall driver start - and stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"},\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"},{\"properties\":{\"displayName\":\"Resource - logs in Service Bus should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8f774be-6aee-492a-9e29-486ef81f3a68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1535 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Stream Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"},{\"properties\":{\"displayName\":\"Saved-queries - in Azure Monitor should be saved in customer storage account for logs encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1435 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Linux virtual machines on which the Linux Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1086 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1222 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"},{\"properties\":{\"displayName\":\"Kubernetes - Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\",\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"},{\"properties\":{\"displayName\":\"Storage - account containing the container with activity logs must be encrypted with - BYOK\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"},{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'), - subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\":\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"searchService\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"searchService-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbc14a67-53e4-4932-abcc-2049c6706009\"},{\"properties\":{\"displayName\":\"Virtual - machines and virtual machine scale sets should have encryption at host enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc4d8e41-e223-45ea-9bf5-eada37891d87\"},{\"properties\":{\"displayName\":\"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified that some of your subnets aren't protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable All Internet traffic should be - routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\",\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\",\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\",\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\",\"like\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/', - first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"}},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based - \ Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"},{\"properties\":{\"displayName\":\"[Preview]: - Linux machines should meet requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.1.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureLinuxBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureLinuxBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Client'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1318 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1543 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1611 - Developer-Provided Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1613 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use a managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe3fd216-4f83-4fc1-8984-2bbec80a3418\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL databases should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers\",\"Microsoft.Sql/managedinstances\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"},{\"properties\":{\"displayName\":\"Deploy - export to Log Analytics workspace for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Log Analytics workspace configuration is created. If you enter a name for - a resource group that doesn't exist, it'll be created in the subscription. - Note that each resource group can only have one export to Log Analytics workspace - configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Log Analytics workspace configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The Log Analytics workspace of where - the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"workspaceResourceId\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Log Analytics workspace via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"workspaceResourceId\":{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1158 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"},{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"},{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"},{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"},{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"},{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"},{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"},{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"},{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"},{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"},{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"},{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"},{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"},{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"},{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"},{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"},{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"},{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"},{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"},{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"},{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"},{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"},{\"properties\":{\"displayName\":\"test_policyusm7pczwi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-04T22:57:00.9569478Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydntotaowa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydntotaowa\"},{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"},{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"},{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"},{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"},{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"},{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"},{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"},{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"},{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"},{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"},{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"},{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"},{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"},{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"},{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"},{\"properties\":{\"displayName\":\"test_policyunbs5wtft\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-08T23:45:16.8769261Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyj2uyuq36z\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyj2uyuq36z\"},{\"properties\":{\"displayName\":\"test_policy2wlyo2jcx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T08:52:29.0384373Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T08:52:29.6504961Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjatom4uiu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjatom4uiu\"},{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"},{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"},{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"},{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"},{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"},{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"},{\"properties\":{\"displayName\":\"test_policy000003_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T09:35:32.6525377Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T09:35:33.3011182Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy000002\"},{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"},{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"},{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"},{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"},{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"},{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"},{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"},{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"},{\"properties\":{\"displayName\":\"test_policy4ljtwhrb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T09:04:36.2666163Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T09:04:36.9195862Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policynphpv4hoz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policynphpv4hoz\"},{\"properties\":{\"displayName\":\"test_policywr7fgwb3h_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-03-25T07:14:53.2365929Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-03-25T07:14:54.8167247Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyoawd757s5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyoawd757s5\"},{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"},{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"},{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"},{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"},{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"},{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"},{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"},{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"},{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"},{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"},{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"},{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"},{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"},{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"},{\"properties\":{\"displayName\":\"test_policybflkk7cf2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:48:53.5703427Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:48:54.2065695Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysnxqzmcgi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysnxqzmcgi\"},{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"},{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"},{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"},{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"},{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"},{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"},{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"},{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"},{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"},{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"},{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"},{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"},{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"},{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"},{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"},{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"},{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"},{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"},{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"},{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"},{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\",\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')), - 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')), - 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"},{\"properties\":{\"displayName\":\"clitestvgcwukwfkdrnt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:08:49.3743392Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitest7syw4jlpt6vnzk5vvmal7tz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitest7syw4jlpt6vnzk5vvmal7tz\"},{\"properties\":{\"displayName\":\"clitestmwd5emng54d7h\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:29.7005931Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesta744fed3lbeyk3atxfl22hh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesta744fed3lbeyk3atxfl22hh\"},{\"properties\":{\"displayName\":\"clitestasb6ki5xu3s5n\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:32.4697746Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestaccirnpsjl4xcry6egrdxcc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestaccirnpsjl4xcry6egrdxcc\"},{\"properties\":{\"displayName\":\"clitestyfehqscfzl66v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:18:08.1664207Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestatcrgfr7h3bzxn2n2l643lx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestatcrgfr7h3bzxn2n2l643lx\"},{\"properties\":{\"displayName\":\"clitest546cgekm2cmto\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T08:58:45.8641083Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestiympxjk7m7b7zm5ife6siwj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestiympxjk7m7b7zm5ife6siwj\"},{\"properties\":{\"displayName\":\"clitestx3chgt5ixyfdg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T06:59:50.0631487Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestkhjp2fkvvvmtlfh54o7b7db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestkhjp2fkvvvmtlfh54o7b7db\"},{\"properties\":{\"displayName\":\"clitestcv4zaidsjskxz\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:01.5383822Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestlgubbwxnbxedc6oqemfvyul\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestlgubbwxnbxedc6oqemfvyul\"},{\"properties\":{\"displayName\":\"clitest4t542r65t7vdo\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:21:45.5602849Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestm2i27iey5uu3k34mmckjoc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestm2i27iey5uu3k34mmckjoc6\"},{\"properties\":{\"displayName\":\"clitest4fmzwsy5ekwaj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T09:02:35.0596019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestr3x24dreg2li4idugas3fi3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestr3x24dreg2li4idugas3fi3\"},{\"properties\":{\"displayName\":\"clitestsoroll7id56c6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:09:20.8262259Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestxxdb7o7f2qrwygu4p4pupsu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestxxdb7o7f2qrwygu4p4pupsu\"},{\"properties\":{\"displayName\":\"clitestlcamaprqvpmyp\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:29.9142438Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesty3kzkcsdlkgkwcocvpjwcyr\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesty3kzkcsdlkgkwcocvpjwcyr\"},{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\",\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\",\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"Deny - cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\",\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"},{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"},{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"},{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"},{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"},{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"},{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"},{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"},{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"},{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-25T23:50:17.3899118Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:30:32.2645779Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"westus2\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-bicep-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-bicep-test\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:26:03.8364554Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"},{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"},{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"},{\"properties\":{\"displayName\":\"Sumit- - NSG X on every subnet\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"This - policy enforces a specific NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '2901321' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T09:35:33.3011182Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '896' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - ParameterSetName: - - --policy -n --display-name -g --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T09:35:33.3011182Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '896' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_assignment000005", "policyDefinitionId": - "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002", - "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001", - "parameters": {"allowedLocations": {"value": ["australiaeast", "eastus", "japaneast", - "westus"]}}}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - Content-Length: - - '469' - Content-Type: - - application/json - ParameterSetName: - - --policy -n --display-name -g --params - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}' - headers: - cache-control: - - no-cache - content-length: - - '800' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - ParameterSetName: - - --policy -n --display-name -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''06a78e20-9358-41c9-923c-fb736d382a4d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:35:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - ParameterSetName: - - --policy -n --display-name -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit VMs that do not use managed disks","policyType":"BuiltIn","mode":"All","description":"This - policy audits VMs that do not use managed disks","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osDisk.uri","exists":"True"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/VirtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers","exists":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl","exists":"True"}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a4d"}' - headers: - cache-control: - - no-cache - content-length: - - '915' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"properties": {"displayName": "test_assignment000005", "policyDefinitionId": - "/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d", - "scope": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001"}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment create - Connection: - - keep-alive - Content-Length: - - '325' - Content-Type: - - application/json - ParameterSetName: - - --policy -n --display-name -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment2000006?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment2000006","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment2000006"}' - headers: - cache-control: - - no-cache - content-length: - - '663' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1195' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment2000006?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment2000006","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment2000006"}' - headers: - cache-control: - - no-cache - content-length: - - '663' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8831' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - ParameterSetName: - - --disable-scope-strict-match - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"},{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8831' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n -g - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_assignment000005","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","scope":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001","parameters":{"allowedLocations":{"value":["australiaeast","eastus","japaneast","westus"]}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy000001/providers/Microsoft.Authorization/policyAssignments/azurecli-test-policy-assignment000004","type":"Microsoft.Authorization/policyAssignments","name":"azurecli-test-policy-assignment000004"}' - headers: - cache-control: - - no-cache - content-length: - - '800' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy assignment list - Connection: - - keep-alive - ParameterSetName: - - --disable-scope-strict-match - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments?api-version=2016-12-01 - response: - body: - string: '{"value":[{"properties":{"displayName":"deny-nsg-rule-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. Assign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/36e07b214d59455886a2b76b","type":"Microsoft.Authorization/policyAssignments","name":"36e07b214d59455886a2b76b"},{"properties":{"displayName":"deny-nsg-internet-inbound","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted it from my resource group - and found that it applied to the the whole subscription.\nRe assign the policy."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5b5ec388a1b6480391640d13","type":"Microsoft.Authorization/policyAssignments","name":"5b5ec388a1b6480391640d13"},{"properties":{"displayName":"deny_load_balancer_rules_and_inbound_nat_rules","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":""},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/5d00856604b74b80927cca6e","type":"Microsoft.Authorization/policyAssignments","name":"5d00856604b74b80927cca6e"},{"properties":{"displayName":"deny-nic-no-nsg","policyDefinitionId":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"The - policy block deployment of domain service, I deleted the policy in my resource - group, and found that will apply to the whole subscription. \nAssign the policy - again."},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/8805e4466db647d1beda40e2","type":"Microsoft.Authorization/policyAssignments","name":"8805e4466db647d1beda40e2"},{"properties":{"displayName":"ASC - DataProtection (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/9cb3cc7a-b39b-4b82-bc89-e5a5d9ff7b97","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/DataProtectionSecurityCenter","type":"Microsoft.Authorization/policyAssignments","name":"DataProtectionSecurityCenter"},{"properties":{"displayName":"ASC - Default (subscription: 0b1f6471-1bf0-4dda-aec3-cb9272f09590)","policyDefinitionId":"/providers/Microsoft.Authorization/policySetDefinitions/1f3afdf9-d0c9-4c3d-847f-89da613e70a8","scope":"/subscriptions/00000000-0000-0000-0000-000000000000","parameters":{"systemUpdatesMonitoringEffect":{"value":"AuditIfNotExists"},"systemConfigurationsMonitoringEffect":{"value":"AuditIfNotExists"},"endpointProtectionMonitoringEffect":{"value":"AuditIfNotExists"},"diskEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"networkSecurityGroupsMonitoringEffect":{"value":"AuditIfNotExists"},"webApplicationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"nextGenerationFirewallMonitoringEffect":{"value":"AuditIfNotExists"},"vulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"storageEncryptionMonitoringEffect":{"value":"Audit"},"jitNetworkAccessMonitoringEffect":{"value":"AuditIfNotExists"},"adaptiveApplicationControlsMonitoringEffect":{"value":"AuditIfNotExists"},"sqlAuditingMonitoringEffect":{"value":"AuditIfNotExists"},"sqlEncryptionMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"metricAlertsInBatchAccountMonitoringEffect":{"value":"AuditIfNotExists"},"classicComputeVMsMonitoringEffect":{"value":"Audit"},"classicStorageAccountsMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInDataLakeAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInDataLakeStoreMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInEventHubMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInKeyVaultMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInLogicAppsMonitoringEffect":{"value":"AuditIfNotExists"},"diagnosticsLogsInRedisCacheMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInSearchServiceMonitoringEffect":{"value":"AuditIfNotExists"},"aadAuthenticationInServiceFabricMonitoringEffect":{"value":"Audit"},"clusterProtectionLevelInServiceFabricMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceBusMonitoringEffect":{"value":"AuditIfNotExists"},"namespaceAuthorizationRulesInServiceBusMonitoringEffect":{"value":"Audit"},"aadAuthenticationInSqlServerMonitoringEffect":{"value":"AuditIfNotExists"},"secureTransferToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInStreamAnalyticsMonitoringEffect":{"value":"AuditIfNotExists"},"disableUnrestrictedNetworkToStorageAccountMonitoringEffect":{"value":"Audit"},"diagnosticsLogsInServiceFabricMonitoringEffect":{"value":"AuditIfNotExists"},"sqlDbVulnerabilityAssesmentMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateLessThanOwnersMonitoringEffect":{"value":"AuditIfNotExists"},"identityDesignateMoreThanOneOwnerMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityEnableMFAForReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveDeprecatedAccountMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithOwnerPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithWritePermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"identityRemoveExternalAccountWithReadPermissionsMonitoringEffect":{"value":"AuditIfNotExists"},"azurePolicyAddonStatusEffect":{"value":"Audit"},"allowedContainerImagesInKubernetesClusterEffect":{"value":"audit"},"privilegedContainersShouldBeAvoidedEffect":{"value":"audit"},"allowedContainerPortsInKubernetesClusterEffect":{"value":"audit"},"allowedServicePortsInKubernetesClusterEffect":{"value":"audit"},"noPrivilegeEscalationInKubernetesClusterEffect":{"value":"audit"},"noSharingSensitiveHostNamespacesInKubernetesEffect":{"value":"audit"},"readOnlyRootFileSystemInKubernetesClusterEffect":{"value":"audit"},"allowedCapabilitiesInKubernetesClusterEffect":{"value":"audit"},"allowedAppArmorProfilesInKubernetesClusterEffect":{"value":"audit"},"allowedHostNetworkingAndPortsInKubernetesClusterEffect":{"value":"audit"},"allowedHostPathVolumesInKubernetesClusterEffect":{"value":"audit"},"memoryAndCPULimitsInKubernetesClusterEffect":{"value":"audit"},"mustRunAsNonRootNamespaceEffect":{"value":"audit"}},"description":"This - policy assignment was automatically created by Azure Security Center"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn","type":"Microsoft.Authorization/policyAssignments","name":"SecurityCenterBuiltIn"}]}' - headers: - cache-control: - - no-cache - content-length: - - '8030' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"test_policy000003_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"9ac534f1-d577-4034-a32d-48de400dacbf","createdOn":"2021-04-19T09:35:32.6525377Z","updatedBy":"9ac534f1-d577-4034-a32d-48de400dacbf","updatedOn":"2021-04-19T09:35:33.3011182Z"},"parameters":{"allowedLocations":{"type":"array","metadata":{"description":"The - list of locations that can be specified when deploying resources","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}' - headers: - cache-control: - - no-cache - content-length: - - '896' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control - 1599 - Developer Configuration Management | Software / Firmware Integrity - Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\":{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your Synapse workspaces\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0049a6b3-a662-4f3e-8635-39cf44ace45a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"},{\"properties\":{\"displayName\":\"SQL - Server Integration Services integration runtimes on Azure Data Factory should - be joined to a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0088bc63-6dee-4a9c-9d29-91cfdc848952\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure - Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - protection of your Azure Virtual Machines by enabling Azure Backup. Azure - Backup is a secure and cost effective data protection solution for Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1099 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1709 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1052 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1034 - Least Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1623 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1515 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1361 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"},{\"properties\":{\"displayName\":\"Azure - Kubernetes Service Private Clusters should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"040732e8-d947-40b8-95d6-854c95024bf8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1594 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB allowed locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying Azure Cosmos DB resources.\",\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\",\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))), - ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\":\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"}]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"},{\"properties\":{\"displayName\":\"SQL - managed instances should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Linux VMs - monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"},{\"properties\":{\"displayName\":\"Shared - dashboards should not have markdown tiles with inline content\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that's hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Portal\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Portal/dashboards\"},{\"anyof\":[{\"not\":{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2020-09-01-alpha\"}},{\"count\":{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type\",\"equals\":\"Extension/HubsExtension/PartType/MarkdownPart\"},{\"anyOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"equals\":\"1\"}]}]}},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c655fe-0ac7-48ae-9a32-3a2e208c7624\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1572 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use a customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Azure Front Door Service - service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"},{\"properties\":{\"displayName\":\"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send scan reports to' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\",\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"},\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Data Lake Store should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1223 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1420 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1688 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - access the private endpoint(s) for Storage Sync Service resource interfaces - from a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint's private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateDnsZoneId\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"Private - DNS Zone Identifier\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"afs\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-afs\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06695360-db88-47f6-b976-7500d4297475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1455 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit SQL DB Level Audit Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - DB level audit setting for SQL databases\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Audit - VMs that do not use managed disks\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\",\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\",\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that Cognitive Services - account isn't exposed on the public internet. Creating private endpoints can - limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - \",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1583 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the DSC configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure - Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"},{\"properties\":{\"displayName\":\"Adaptive - network hardening recommendations should be applied on internet facing virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"},{\"properties\":{\"displayName\":\"There - should be more than one owner assigned to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1159 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"},{\"properties\":{\"displayName\":\"Disk - encryption should be applied on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"},{\"properties\":{\"displayName\":\"Configure - backup on virtual machines without a given tag to an existing recovery services - vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location - (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.\",\"strongType\":\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Backup - Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding VMs from - the scope of this policy. This should be used along with the Exclusion Tag - Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exclusion - Tag Values\",\"description\":\"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"value\":\"[empty(parameters('exclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('exclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"},{\"properties\":{\"displayName\":\"Azure - Policy Add-on for Kubernetes service (AKS) should be installed and enabled - on your clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1654 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1428 - Media Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"},{\"properties\":{\"displayName\":\"Audit - resource location matches resource group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that the resource location matches its resource group location\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[resourcegroup().location]\"},{\"field\":\"location\",\"notEquals\":\"global\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Management'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl\",\"exists\":false},{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0aa61e00-0a01-4a3c-9945-e93cffedf0e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"},{\"properties\":{\"displayName\":\"Email - notification to subscription owner for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"not\":{\"allOf\":[{\"field\":\"Microsoft.Security/securityContacts/alertsToAdmins\",\"equals\":\"Off\"},{\"field\":\"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity\",\"equals\":\"High\"}]}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"},{\"properties\":{\"displayName\":\"Key - vaults should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB throughput should be limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max - RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned - to a container via the Resource Provider during create or update.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"},{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\",\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\",\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1239 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"},{\"properties\":{\"displayName\":\"Ensure - API app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Automation Accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"},{\"properties\":{\"displayName\":\"SQL - servers should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for IoT Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d40b058-9f95-4a19-93e3-9b0330baa2a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1518 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1466 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"},{\"properties\":{\"displayName\":\"Deploy - a flow log resource with target network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG - Region\",\"description\":\"This Policy will review NSGs only in the selected - region. You can create other assignments to include other regions.\",\"strongType\":\"location\"}},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - id\",\"description\":\"A string with the storage id for the flowlogs to be - sent to. It will be used for deployment purposes only. Make sure this storage - account is located in the same region as the NSG. The format must be: '/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watchers RG\",\"description\":\"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.\",\"strongType\":\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watcher name\",\"description\":\"The name of the network watcher under which - the flowLog resources will be created. Make sure it belongs to the same region - as the NSG.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\",\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))), - 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\",\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\":{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\":{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-', - uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\",\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\":\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'), - '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\",\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\":{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\":{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\":{\"value\":\"[concat(resourceGroup().id, - '/providers/Microsoft.Network/networkSecurityGroups/', field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure File Sync to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Azure File Sync's internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"value\":\"AllowVirtualNetworksOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e07b2e9-6cd9-4c40-9ccb-52817b95133b\"},{\"properties\":{\"displayName\":\"Authorized - IP ranges should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\",\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Key Vault provides an additional layer of protection and security - intelligence by detecting unusual and potentially harmful attempts to access - or exploit key vault accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"},{\"properties\":{\"displayName\":\"Configure - Batch accounts with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"App - Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\",\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1476 - Fire Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1430 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1574 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1164 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"count\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fda3595-9f2b-4592-8675-4231d6fa82fe\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Container registries\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fdf0491-d080-4575-b627-ad0e843cba0f\"},{\"properties\":{\"displayName\":\"CORS - should not allow every domain to access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\",\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not contain the specified - certificates in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints\",\"description\":\"A semicolon-separated list of - certificate thumbprints that should exist under the Trusted Root certificate - store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"},\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"},{\"properties\":{\"displayName\":\"Custom - subscription owner roles should not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that no custom subscription owner roles exist.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\",\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"/\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1230 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1432 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure IoT Hubs to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"114eec6e-5e59-4bad-999d-6eceeb39d582\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System settings' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies\",\"description\":\"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1655 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Security' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LAN Manager authentication level\",\"description\":\"Specify which - challenge-response authentication protocol is used for network logons. This - choice affects the level of authentication protocol used by clients, the level - of session security negotiated, and the level of authentication accepted by - servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LDAP client signing requirements\",\"description\":\"Specify the - level of data signing that is requested on behalf of clients that issue LDAP - BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients\",\"description\":\"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers\",\"description\":\"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"},{\"properties\":{\"displayName\":\"Allowlist - rules in your adaptive application control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center's adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use Key Vault for storing secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"exists\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"PWD=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"Password=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"CredString=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"pwd=\"}]}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type\",\"equals\":\"SecureString\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type\",\"equals\":\"SecureString\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"MongoDbAtlas\",\"MongoDbV2\"]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type\",\"equals\":\"SecureString\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"127ef6d7-242f-43b3-9eef-947faf1725d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1240 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System objects'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"},\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1450 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1184 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure machines to receive the Qualys vulnerability assessment agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don't need a Qualys license or even a Qualys account - everything's handled - seamlessly inside Security Center. Machines which don't have the Qualys vulnerability - assessment agent deployed automatically receive the agent if this policy is - enabled.\",\"metadata\":{\"category\":\"Security Center\",\"preview\":true,\"version\":\"2.0.0-preview\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]},\"deployment\":{\"properties\":{\"mode\":\"Incremental\",\"template\":{\"contentVersion\":\"1.0.0.0\",\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"parameters\":{\"vmName\":{\"type\":\"String\"},\"resourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.compute/virtualmachines'))]\",\"type\":\"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"},{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.hybridcompute/machines'))]\",\"type\":\"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"resourceType\":{\"value\":\"[field('type')]\"}}}},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13ce0167-8ca6-4048-8e6b-f996402e3c1b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1085 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1404 - Maintenance Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that contain certificates expiring within the specified number - of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - store path\",\"description\":\"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is 'Cert:' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher', - 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Expiration - limit in days\",\"description\":\"An integer indicating the number of days - within which to check for certificates that are expiring. For example, if - this value is 30, any certificate expiring within the next 30 days will cause - this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to include\",\"description\":\"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to exclude\",\"description\":\"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - expired certificates\",\"description\":\"Must be 'true' or 'false'. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group contains - any of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to exclude\",\"description\":\"A semicolon-separated list of members - that should be excluded in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"},\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityWindowsAgent\":\"[concat('deployAzureSecurityWindowsAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityWindowsAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityWindowsAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1537496a-b1e8-482b-a06a-1cc2415cdc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1157 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1564 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a minimum password - age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1662 - Fail In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1684 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1103 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1007 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"},{\"properties\":{\"displayName\":\"Deploy - associations for a managed application\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"},\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Managed - application ID\",\"description\":\"Resource ID of the managed application - to which resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the managed application.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetManagedApplicationId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\":{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"},{\"properties\":{\"displayName\":\"[ASC - Private Preview] Deploy - Configure system-assigned managed identity to enable - Azure Monitor assignments on VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.2.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[if(contains(field('identity.type'), - 'UserAssigned'), concat(field('identity.type'), ',SystemAssigned'), 'SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17b3de92-f710-4cf4-aa55-0e7859f1ed7b\"},{\"properties\":{\"displayName\":\"Transparent - Data Encryption on SQL databases should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1325 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1480 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1369 - Incident Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Logon-Logoff' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\":\"Audit - Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Group Membership\",\"description\":\"Specifies whether audit events are generated - when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"},{\"properties\":{\"displayName\":\"Azure - Monitor log profile should collect logs for categories 'write,' 'delete,' - and 'action'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that a log profile collects logs for categories 'write,' 'delete,' - and 'action'\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Access to App Services should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1adadefe-5f21-44f7-b931-a59b54ccdb45\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance which doesn't have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"},{\"properties\":{\"displayName\":\"Public - network access on Azure SQL Database should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"},{\"properties\":{\"displayName\":\"Azure - Service Bus namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"},{\"properties\":{\"displayName\":\"Public - network access on Azure Data Factory should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"},{\"properties\":{\"displayName\":\"Azure - File Sync should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization's network, rather than through the internet-accessible - public endpoint. Creating a private endpoint by itself does not disable the - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d320205-c6a1-4ac6-873d-46224024e8e2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using no secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires no secrets. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1538 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"},{\"properties\":{\"displayName\":\"Virtual - machines should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1595 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - a required tag and its value. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Target sub resource the private endpoint - connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('targetSubResource')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"synapse-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\"},{\"properties\":{\"displayName\":\"Key - vaults should have soft delete enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - API for FHIR should have at least one approved private endpoint connection. - Clients in a virtual network can securely access resources that have private - endpoint connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"count\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ee56206-5dd1-42ab-b02d-8aae8b1634ce\"},{\"properties\":{\"displayName\":\"An - Azure Active Directory administrator should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be encrypted with customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Shutdown'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Clear virtual memory pagefile\",\"description\":\"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\":false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"},{\"properties\":{\"displayName\":\"Logic - Apps Integration Service Environment should be encrypted with customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/integrationServiceEnvironments\"},{\"field\":\"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption at host to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure security - center has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"},{\"properties\":{\"displayName\":\"VM - Image Builder templates should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM - Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization's - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a8cd35-125e-4d13-b82d-2e19b7208bb7\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a9766a-82a5-4747-abb5-650b6dbba6d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1111 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1596 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Audit'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1399 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Management'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"},{\"properties\":{\"displayName\":\"Management - ports should be closed on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1493 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"},{\"properties\":{\"displayName\":\"Only - secure connections to your Azure Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not restrict the minimum - password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"},{\"properties\":{\"displayName\":\"Service - Bus should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Automation account so that it isn't accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Automation\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"value\":false}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1268 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1231 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a maximum password age - of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1372 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"},{\"properties\":{\"displayName\":\"Endpoint - protection solution should be installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1649 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"},{\"properties\":{\"displayName\":\"Metric - alert rules should be configured on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - configuration of metric alert rules on Batch account to enable the required - metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Metric - name\",\"description\":\"The metric name that an alert rule must be enabled - on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\":\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\",\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\",\"equals\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourcegroups/', resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', - field('name'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"},{\"properties\":{\"displayName\":\"Configure - virtual machines to be onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1396 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"},{\"properties\":{\"displayName\":\"Flow - logs should be enabled for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkWatchers/flowLogs\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27960feb-a23c-4577-8d36-ef8b5f35e0be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1074 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1527 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"},{\"properties\":{\"displayName\":\"Deploy - default Microsoft IaaSAntimalware extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file extensions to exclude from scanning\"}},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of process names to exclude from scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\":\"true\",\"metadata\":{\"description\":\"Indicates - whether or not real time protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\":{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\":\"Indicates - whether or not custom scheduled scan settings are enabled (default is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)\"}},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\",\"metadata\":{\"description\":\"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\",\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\",\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\",\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\",\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\":{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\",\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\":{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1436 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"},{\"properties\":{\"displayName\":\"Azure - Defender for App Service should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for App Service leverages the scale of the cloud, and the visibility - that Azure has as a cloud provider, to monitor for common web app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"},{\"properties\":{\"displayName\":\"Service - Bus Premium namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"},{\"not\":{\"field\":\"Microsoft.ServiceBus/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"295fc8b1-dc9f-4f53-9c61-3f313ceab40a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - User Account Control'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"},\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Policy Change' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\":\"Audit - Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\":\"Audit - Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authentication Policy Change\",\"description\":\"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authorization Policy Change\",\"description\":\"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1274 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"},{\"properties\":{\"displayName\":\"Synapse - workspace auditing settings should have action groups configured to capture - critical activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b18f286-371e-4b80-9887-04759970c0d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1434 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1388 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1344 - Authenticator Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"},{\"properties\":{\"displayName\":\"SSH - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows SSH access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"},{\"properties\":{\"displayName\":\"Unattached - disks should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any unattached disk without encryption enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1546 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1414 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1679 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1068 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"},{\"properties\":{\"displayName\":\"App - Service should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any App Service not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not store passwords using reversible - encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that allow remote connections from accounts - without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"},{\"properties\":{\"displayName\":\"Public - network access on Azure IoT Hub should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure IoT Hub should use customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"lessOrEquals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\"},{\"properties\":{\"displayName\":\"Managed - workspace virtual network on Azure Synapse workspaces should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetwork\",\"notEquals\":\"default\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d9dbfa3-927b-4cf0-9d0f-08747f971650\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1077 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1000 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1519 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System objects' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Windows - VMs monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1144 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1090 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Access'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Storage should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Storage provides detections of unusual and potentially harmful - attempts to access or exploit storage accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cache for Redis resource so that it's - not accessible over the public internet. This helps protect the cache against - data leakage risks.\",\"metadata\":{\"category\":\"Cache\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30b3dfa5-a70d-4c8e-bed6-0083858f663d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines missing any of specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to include\",\"description\":\"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not joined to the specified - domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Domain Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"},\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics Agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"},{\"properties\":{\"displayName\":\"API - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"324c7761-08db-4474-9661-d1039abc92ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1587 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the specified services - are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and 'Running'. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Service names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the services that should be installed and 'Running'. - e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"},\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"},{\"properties\":{\"displayName\":\"Azure - SQL Database should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"},{\"properties\":{\"displayName\":\"Deploy - the Linux Guest Configuration extension to enable Guest Configuration assignments - on Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"},{\"properties\":{\"displayName\":\"MySQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Audit' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: - Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to an existing recovery - services vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally include - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Location (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral\",\"strongType\":\"location\"}},\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"345fa903-145c-4fe1-8bcd-93ec2adccde8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1151 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should allow outbound data traffic only to approved targets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3484ce98-c0c5-4c83-994b-c5ac24785218\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1412 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1475 - Emergency Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1060 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premises clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"},{\"properties\":{\"displayName\":\"Resource - logs in Logic Apps should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1210 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a maximum password - age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Object Access' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit - Detailed File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\",\"AuditFileSystem\":\"Audit - File System;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File Share\",\"description\":\"Specifies whether to audit events related to - file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Firewall Properties' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\",\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPrivateUseProfileSettings\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPublicUseProfileSettings\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Private: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"},{\"properties\":{\"displayName\":\"Gateway - subnets should not be configured with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection on Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection on Storage Accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('storageAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1313 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"},{\"properties\":{\"displayName\":\"Automation - account variables should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is important to enable encryption of Automation account variable assets when - storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"},{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1685 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"},{\"properties\":{\"displayName\":\"Deploy - Threat Detection on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Security'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LAN Manager authentication level\",\"description\":\"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LDAP client signing requirements\",\"description\":\"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients\",\"description\":\"Specifies which behaviors are allowed by - clients for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services. - See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers\",\"description\":\"Specifies which behaviors are allowed by - servers for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid topics to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36ea4b4b-0f7f-4a54-89fa-ab18f555a172\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/domains/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"domain\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36f4658a-848a-467b-881c-e6fa20cf75fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Interactive Logon'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1624 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"},{\"properties\":{\"displayName\":\"Storage - accounts should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\",\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"},{\"properties\":{\"displayName\":\"Resource - logs in IoT Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"3.0.1\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"},{\"properties\":{\"displayName\":\"Deploy - the Windows Guest Configuration extension to enable Guest Configuration assignments - on Windows VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1081 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1522 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1397 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address for security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1232 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1246 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"},{\"properties\":{\"displayName\":\"Synapse - managed private endpoints should only connect to resources in approved Azure - Active Directory tenants\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"allowedTenantIds\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List - of Allowed Tenant Ids for private endpoint creation\",\"description\":\"This - parameter defines the list of Allowed Tenant Ids that are allowed to create - managed private endpoints in the workspaces\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"notIn\":\"[parameters('allowedTenantIds')]\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a003702-13d2-4679-941b-937e58c443f0\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1648 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Control - Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Control Panel' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1315 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1548 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto - approved by policy assignment\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b3b0c27-08d2-4b32-879d-19930bee3266\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1003 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Security operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Security Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\",\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"},{\"properties\":{\"displayName\":\"PostgreSQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1621 - Resource Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1127 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on virtual machines with no identities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have extra accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\":\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\":\"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Search Services in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Devices'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Log Analytics workspace\",\"description\":\"Select Log Analytics workspace - from dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\",\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - monitoring for Linux VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"},{\"properties\":{\"displayName\":\"App - Configuration should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d9f5e4c-9947-4579-9539-2a7695fbc187\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1385 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell modules - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn't available - in a location specified by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\":\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Modules\",\"description\":\"A semicolon-separated list of the names of the - PowerShell modules that should be installed. You may also specify a specific - version of a module that should be installed by including a comma after the - module name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"},{\"properties\":{\"displayName\":\"Azure - Monitor solution 'Security and Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that Security and Audit is deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1160 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1545 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Access' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths\",\"description\":\"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1561 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"},{\"properties\":{\"displayName\":\"Secure - transfer to storage accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always use classic logon\",\"description\":\"Specifies whether to force the - user to log on to the computer using the classic logon screen. This setting - only works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Boot-Start Driver Initialization Policy\",\"description\":\"Specifies which - boot-start drivers are initialized based on a classification determined by - an Early Launch Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable Windows NTP Client\",\"description\":\"Specifies whether the Windows - NTP Client is enabled. Enabling the Windows NTP Client allows your computer - to synchronize its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\":{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\":{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\":{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\":{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\":{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1202 - Access Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1438 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"},{\"properties\":{\"displayName\":\"Azure - Monitor should collect activity logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"},{\"properties\":{\"displayName\":\"Temp - disks and cache for agent node pools in Azure Kubernetes Service clusters - should be encrypted at host\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"count\":{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"false\"}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41425d9f-d1a5-499a-9932-f8ed8453932c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1263 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"},{\"properties\":{\"displayName\":\"Audit - Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Azure Front Door - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"},{\"properties\":{\"displayName\":\"Resource - logs in Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Detailed Tracking'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Process Termination\",\"description\":\"Specifies whether audit events - are generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"},\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1137 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System settings'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies\",\"description\":\"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Logon' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit - Credential Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Credential Validation\",\"description\":\"Specifies whether audit events are - generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1544 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1398 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor permissive network access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1720 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1310 - Device Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1565 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use a Private Link enabled SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"field\":\"Microsoft.SignalRService/SignalR/sku.tier\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464a1620-21b5-448d-8ce6-d4ac6d1bc49a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require SQL Server version 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"},{\"properties\":{\"displayName\":\"Require - automatic OS image patching on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\",\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\",\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedStorage\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"},{\"properties\":{\"displayName\":\"[Preview]: - IoT Hub device provisioning service data should be encrypted using customer-managed - keys (CMK)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47031206-ce96-41f8-861b-6a915f3de284\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn't exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage - accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB key based metadata write access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"},{\"properties\":{\"displayName\":\"Auto - provisioning of the Log Analytics agent should be enabled on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"},{\"properties\":{\"displayName\":\"Adaptive - application controls for defining safe applications should be enabled on your - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"},{\"properties\":{\"displayName\":\"Configure - Cognitive Services accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Cognitive Services resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Disabled\",\"Modify\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2017-04-18')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1165 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"},{\"properties\":{\"displayName\":\"Private - endpoints for Guest Configuration assignments should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"},{\"field\":\"id\",\"contains\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyof\":[{\"field\":\"[concat('tags[', - 'EnablePrivateNeworkGC', ']')]\",\"equals\":\"TRUE\"},{\"field\":\"[concat('tags[', - 'EnablePrivateNetworkGC', ']')]\",\"equals\":\"TRUE\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"480d0f91-30af-4a76-9afb-f5710ac52b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1048 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1033 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1669 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - User Account Control' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"UACRunAllAdministratorsInAdminApprovalMode\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of the elevation prompt for administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for Data factories\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"groupId\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - group Id that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - group Id\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupId\":[\"[parameters('groupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496ca26b-f669-4322-a1ad-06b7b5e41882\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on VMs with a user-assigned identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[concat(field('identity.type'), - ',SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Audit'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - 'modify' effect policies are available that support remediation of tags on - existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1677 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1094 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid topic instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"count\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"},{\"properties\":{\"displayName\":\"Function - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d0bc837-6eff-477e-9ecd-33bf8d4212a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"},{\"properties\":{\"displayName\":\"FTPS - should be required in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1156 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1312 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"},{\"properties\":{\"displayName\":\"Azure - Defender for servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for servers provides real-time threat protection for server workloads - and generates hardening recommendations as well as alerts about suspicious - activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1001 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1083 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1247 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1267 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints that connect to Batch - accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"batchAccount\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"batchAccount-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec38ebc-381f-45ee-81a4-acbc4be878f8\"},{\"properties\":{\"displayName\":\"Azure - data factories should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/encryption.vaultBaseUrl\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec52d6d-beb7-40c4-9a9e-fe753254690e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1139 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"},{\"properties\":{\"displayName\":\"A - maximum of 3 owners should be designated for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"},{\"properties\":{\"displayName\":\"Subscriptions - should have a contact email address for security issues\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"},{\"properties\":{\"displayName\":\"Add - a tag to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"},{\"properties\":{\"displayName\":\"[Preview]: - Storage account public access should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.\",\"metadata\":{\"version\":\"2.0.1-preview\",\"category\":\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The effect determines what happens when the policy - rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\",\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"},{\"properties\":{\"displayName\":\"A - vulnerability assessment solution should be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center's - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1485 - Delivery And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center regulatory compliance\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\",\"preview - \":true},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"regulatoryComplianceStandards\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - standards names\",\"description\":\"For all compliance standards, leave it - empty. For specific compliance standards, enter a list of standards names - separated by semicolons (';'). Compliance standards names are available through - the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center regulatory compliance assessment is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center regulatory compliance - assessment is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets\",\"exists\":false},{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"less\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceControlStates')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\",\"name\":\"regulatoryComplianceControlState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.state\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceControlState')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceControlStates'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceStandards')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\",\"name\":\"regulatoryComplianceStandard\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"id\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceStandard')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceStandards'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"notEquals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('regulatoryComplianceStandards'),parameters('regulatoryComplianceControlStates'))]\"},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\"},\"equals\":\"[mul(2,mul(length(parameters('regulatoryComplianceStandards')),length(parameters('regulatoryComplianceControlStates'))))]\"}]}]}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"regulatoryComplianceStandards\":{\"type\":\"array\"},\"regulatoryComplianceControlStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"regulatoryComplianceStandardsLength\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"regulatoryComplianceControlStatesLength\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"regulatoryComplianceStandardsLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsLength'), - 0), 1, variables('regulatoryComplianceStandardsLength'))]\",\"regulatoryComplianceControlStatesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceControlStatesLength'), - 0), 1, variables('regulatoryComplianceControlStatesLength'))]\",\"stateMap\":{\"Failed\":\"failed\",\"Passed\":\"passed\",\"Skipped\":\"skipped\",\"Unsupported\":\"unsupported\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center regulatory - compliance assessment is created or triggered\":\"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered\"},\"doesAllStatesSelected\":\"[if(equals(length(parameters('regulatoryComplianceControlStates')),length(variables('stateMap'))),bool('true'),bool('false'))]\",\"doesAllStandardsSelected\":\"[if(equals(variables('regulatoryComplianceStandardsLength'),0),bool('true'),bool('false'))]\",\"allRegulatoryComplianceRuleSets\":[],\"customStandardsOrCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsOrCustomStateRuleSetsArr\",\"count\":\"[if(not(variables('doesAllStandardsSelected')),variables('regulatoryComplianceStandardsLength'),if(not(variables('doesAllStatesSelected')),variables('regulatoryComplianceControlStatesLength'),1))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(not(variables('doesAllStandardsSelected')),'id',if(not(variables('doesAllStatesSelected')),'properties.state',json('null')))]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],json('null')))]\",\"operator\":\"[if(not(variables('doesAllStandardsSelected')),'Contains',if(not(variables('doesAllStatesSelected')),'Equals',json('null')))]\"}]}}]},\"customStandardsAndCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsAndCustomStateRuleSetsArr\",\"count\":\"[if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),mul(variables('regulatoryComplianceStandardsLength'),variables('regulatoryComplianceControlStatesLength')),1)]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[mod(div(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength')), variables('regulatoryComplianceStandardsLength'))],json('null'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.state\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[mod(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength'))],json('null'))]\",\"operator\":\"Equals\"}]}}]},\"sourceRuleSets\":\"[if(and(variables('doesAllStandardsSelected'),variables('doesAllStatesSelected')),variables('allRegulatoryComplianceRuleSets'),if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),variables('customStandardsAndCustomStateRuleSets').customStandardsAndCustomStateRuleSetsArr,variables('customStandardsOrCustomStateRuleSets').customStandardsOrCustomStateRuleSetsArr))]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"RegulatoryComplianceAssessment\",\"ruleSets\":\"[variables('sourceRuleSets')]\"}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"regulatoryComplianceStandards\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\"},\"regulatoryComplianceControlStates\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"509122b9-ddd9-47ba-a5f1-d0dac20be63c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1566 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"},{\"properties\":{\"displayName\":\"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"IPsecEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Encryption\",\"description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Integrity\",\"description\":\"IPsec Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Integrity\",\"description\":\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"DH - Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"PFS - Group\",\"description\":\"PFS Group\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\",\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\",\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\",\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\",\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\",\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\",\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1248 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1386 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"},{\"properties\":{\"displayName\":\"Bot - Service should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"},{\"properties\":{\"displayName\":\"Azure - Defender for Kubernetes should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Kubernetes provides real-time threat protection for containerized - environments and generates alerts for suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"},{\"properties\":{\"displayName\":\"Synapse - workspaces with SQL auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your Synapse workspace' SQL auditing to storage account destination to at - least 90 days. Confirm that you are meeting the necessary retention rules - for the regions in which you are operating. This is sometimes required for - compliance with regulatory standards.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"529ea018-6afc-4ed4-95bd-7c9ee47b00bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1642 - Network Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"},{\"properties\":{\"displayName\":\"Connection - throttling should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Azure SignalR Service - resource instead of the entire service, you'll reduce your data leakage risks. - Learn more about private links at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1467 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"},{\"properties\":{\"displayName\":\"[Preview]: - Firewall should be enabled on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Key - vault's firewall prevents unauthorized traffic from reaching your key vault - and provides an additional layer of protection for your secrets. Enable the - firewall to make sure that only traffic from allowed networks can access your - key vault.\",\"metadata\":{\"version\":\"1.0.2-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"},{\"properties\":{\"displayName\":\"Azure - Automation accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.Keyvault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56a5ee18-2ae6-4810-86f7-18e39ce5629b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"},{\"properties\":{\"displayName\":\"IP - firewall rules on Azure Synapse workspaces should be removed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces/firewallrules\"},{\"field\":\"name\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56fd377d-098c-4f02-8406-81eb055902b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"},{\"properties\":{\"displayName\":\"Windows - web servers should be configured to use secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\",\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"[SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - TLS version\",\"description\":\"The minimum TLS protocol version that should - be enabled. Windows web servers with lower TLS versions will be marked as - non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1162 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1054 - Session Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"},{\"properties\":{\"displayName\":\"Configure - disk access resources with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disk access resources in this region are validated and private endpoints are - created in this region.\"}},\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[concat('pe','-',field('name'))]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[parameters('name')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"disks\"]}}],\"manualPrivateLinkServiceConnections\":[]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Detailed Tracking' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit - Process Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Process Termination\",\"description\":\"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"},{\"properties\":{\"displayName\":\"CosmosDB - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your CosmosDB account, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1547 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which Windows Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Port Number\",\"description\":\"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Baud Rate\",\"description\":\"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1573 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1463 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1425 - Timely Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"},{\"properties\":{\"displayName\":\"Operating - system version should be the most current version for your cloud service roles\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a minimum password age - of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1032 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not restrict the minimum password - length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1005 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1105 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1433 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"},{\"properties\":{\"displayName\":\"Container - registries should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.2\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\",\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"},{\"properties\":{\"displayName\":\"Ensure - WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Remote Host Name\",\"description\":\"Specifies the Domain Name System (DNS) - name or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Port\",\"description\":\"The TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Should connect to remote host\",\"description\":\"Must be 'True' or 'False'. - 'True' indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. 'False' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"},\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"},\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Security'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be enabled in virtual machine scale sets for listed - virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1671 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1067 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"},{\"properties\":{\"displayName\":\"External - accounts with write permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1483 - Water Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1362 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1665 - Process Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Function App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"},{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1208 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: West India, South India, - Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\",\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"},{\"properties\":{\"displayName\":\"[Preview]: - Private endpoint should be configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use user-assigned managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers' security posture and protect them from attacks.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"},{\"properties\":{\"displayName\":\"External - accounts with read permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityLinuxAgent\":\"[concat('deployAzureSecurityLinuxAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityLinuxAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityLinuxAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityLinuxAgent\",\"typeHandlerVersion\":\"2.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f8eb305-9c9f-4abe-9bb0-df220d9faba2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Windows virtual machines on which the Windows Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"2.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1663 - Protection Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Object Access'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"},{\"properties\":{\"displayName\":\"Storage - Accounts should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows web servers that are not using secure communication - protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Data Security on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\":\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - variables('serverResourceGroupName'), parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', - variables('uniqueStorage')))]\"},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\":\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\":{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\":[\"[concat('Microsoft.Storage/storageAccounts/', - variables('storageName'))]\",\"[concat('Microsoft.Sql/servers/', parameters('serverName'), - '/securityAlertPolicies/Default')]\"]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"},{\"properties\":{\"displayName\":\"Configure - time zone on Windows machines.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"configurationStores\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"614ffa75-862c-456e-ad8b-eaa1b0844b07\"},{\"properties\":{\"displayName\":\"Bot - Service endpoint should be a valid HTTPS URI\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service - Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\":\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\",\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\",\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1110 - Audit Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1415 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a4d60b-7326-440e-8051-9f94394d4dd1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1153 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System objects'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the Log Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected - workspace IDs\",\"description\":\"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"},{\"properties\":{\"displayName\":\"Modify - Azure SignalR Service resources to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"Audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"value\":\"Deny\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"value\":[]}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62a3ae95-8169-403e-a2d2-b82141448092\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1660 - Session Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"},{\"properties\":{\"displayName\":\"Audit - Windows machines network connectivity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote - Host Name\",\"description\":\"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Port\",\"description\":\"The - TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Should - connect to remote host\",\"description\":\"The machine will be non-compliant - if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"},{\"properties\":{\"displayName\":\"Authentication - to Linux machines should require SSH keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1002 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1498 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1185 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Devices'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Devices: Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"64d314f6-6062-4780-a861-c23e8951bee5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit missing blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"},{\"properties\":{\"displayName\":\"Azure - Defender for SQL servers on machines should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1261 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"},{\"properties\":{\"displayName\":\"Service - principals should be used to protect your subscriptions instead of management - certificates\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1319 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedKey\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Network' for guest logons, simultaneous connections, network bridge, - ICS, and multicast name resolution. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable - insecure guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn - off multicast name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - insecure guest logons\",\"description\":\"Specifies whether the SMB client - will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked service resource type should be in allow list\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"allowedLinkedServiceResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed linked service resource types\",\"description\":\"The list of allowed - linked service resource types.\"},\"allowedValues\":[\"AdlsGen2CosmosStructuredStream\",\"AdobeExperiencePlatform\",\"AdobeIntegration\",\"AmazonRedshift\",\"AmazonS3\",\"AzureBlobFS\",\"AzureBlobStorage\",\"AzureDataExplorer\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureDataShare\",\"AzureFileStorage\",\"AzureKeyVault\",\"AzureMariaDB\",\"AzureMySql\",\"AzurePostgreSql\",\"AzureSearch\",\"AzureSqlDatabase\",\"AzureSqlDW\",\"AzureSqlMI\",\"AzureTableStorage\",\"Cassandra\",\"CommonDataServiceForApps\",\"CosmosDb\",\"CosmosDbMongoDbApi\",\"Db2\",\"DynamicsCrm\",\"FileServer\",\"FtpServer\",\"GitHub\",\"GoogleCloudStorage\",\"Hdfs\",\"Hive\",\"HttpServer\",\"Informix\",\"Kusto\",\"MicrosoftAccess\",\"MySql\",\"Netezza\",\"Odata\",\"Odbc\",\"Office365\",\"Oracle\",\"PostgreSql\",\"Salesforce\",\"SalesforceServiceCloud\",\"SapBw\",\"SapHana\",\"SapOpenHub\",\"SapTable\",\"Sftp\",\"SharePointOnlineList\",\"Snowflake\",\"SqlServer\",\"Sybase\",\"Teradata\",\"HDInsightOnDemand\",\"HDInsight\",\"AzureDataLakeAnalytics\",\"AzureBatch\",\"AzureFunction\",\"AzureML\",\"AzureMLService\",\"MongoDb\",\"GoogleBigQuery\",\"Impala\",\"ServiceNow\",\"Dynamics\",\"AzureDatabricks\",\"AmazonMWS\",\"SapCloudForCustomer\",\"SapEcc\",\"Web\",\"MongoDbAtlas\",\"HBase\",\"Spark\",\"Phoenix\",\"PayPal\",\"Marketo\",\"Responsys\",\"SalesforceMarketingCloud\",\"Presto\",\"Square\",\"Xero\",\"Jira\",\"Magento\",\"Shopify\",\"Concur\",\"Hubspot\",\"Zoho\",\"Eloqua\",\"QuickBooks\",\"Couchbase\",\"Drill\",\"Greenplum\",\"MariaDB\",\"Vertica\",\"MongoDbV2\",\"OracleServiceCloud\",\"GoogleAdWords\",\"RestService\",\"DynamicsAX\",\"AzureDataCatalog\",\"AzureDatabricksDeltaLake\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"notIn\":\"[parameters('allowedLinkedServiceResourceTypes')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6809a3d0-d354-42fb-b955-783d207c62a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the Log Analytics agent - is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Connected workspace IDs\",\"description\":\"A semicolon-separated list of - the workspace IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"},\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1597 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1588 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1727 - Memory Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1652 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to exclude\",\"description\":\"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1244 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available\",\"description\":\"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to 'Non-Compliant' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to 'Compliant' will make these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"},\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1211 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1653 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"},{\"properties\":{\"displayName\":\"Deprecated - accounts should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Service Bus in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1031 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL servers on machine should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f97aa83c-9b63-4f9a-99f6-b22c4398f936\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\"},{\"properties\":{\"displayName\":\"Not - allowed resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that cannot be deployed.\",\"displayName\":\"Not allowed - resource types\",\"strongType\":\"resourceTypes\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},{\"value\":\"[field('type')]\",\"exists\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Azure Kubernetes Service should be connected to\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AllMetrics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-apiserver\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-apiserver - - Enabled\",\"description\":\"Whether to stream kube-apiserver logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit - - Enabled\",\"description\":\"Whether to stream kube-audit logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-controller-manager\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-controller-manager - - Enabled\",\"description\":\"Whether to stream kube-controller-manager logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-scheduler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-scheduler - - Enabled\",\"description\":\"Whether to stream kube-scheduler logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"cluster-autoscaler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"cluster-autoscaler - - Enabled\",\"description\":\"Whether to stream cluster-autoscaler logs to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit-admin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit-admin - - Enabled\",\"description\":\"Whether to stream kube-audit-admin logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"guard\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"guard - - Enabled\",\"description\":\"Whether to stream guard logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AllMetrics\":{\"type\":\"string\"},\"kube-apiserver\":{\"type\":\"string\"},\"kube-audit\":{\"type\":\"string\"},\"kube-controller-manager\":{\"type\":\"string\"},\"kube-scheduler\":{\"type\":\"string\"},\"cluster-autoscaler\":{\"type\":\"string\"},\"kube-audit-admin\":{\"type\":\"string\"},\"guard\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetrics')]\"}],\"logs\":[{\"category\":\"kube-apiserver\",\"enabled\":\"[parameters('kube-apiserver')]\"},{\"category\":\"kube-audit\",\"enabled\":\"[parameters('kube-audit')]\"},{\"category\":\"kube-controller-manager\",\"enabled\":\"[parameters('kube-controller-manager')]\"},{\"category\":\"kube-scheduler\",\"enabled\":\"[parameters('kube-scheduler')]\"},{\"category\":\"cluster-autoscaler\",\"enabled\":\"[parameters('cluster-autoscaler')]\"},{\"category\":\"kube-audit-admin\",\"enabled\":\"[parameters('kube-audit-admin')]\"},{\"category\":\"guard\",\"enabled\":\"[parameters('guard')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"guard\":{\"value\":\"[parameters('guard')]\"},\"AllMetrics\":{\"value\":\"[parameters('AllMetrics')]\"},\"kube-apiserver\":{\"value\":\"[parameters('kube-apiserver')]\"},\"kube-audit\":{\"value\":\"[parameters('kube-audit')]\"},\"kube-scheduler\":{\"value\":\"[parameters('kube-scheduler')]\"},\"kube-controller-manager\":{\"value\":\"[parameters('kube-controller-manager')]\"},\"cluster-autoscaler\":{\"value\":\"[parameters('cluster-autoscaler')]\"},\"kube-audit-admin\":{\"value\":\"[parameters('kube-audit-admin')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c66c325-74c8-42fd-a286-a74b0e2939d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"},{\"properties\":{\"displayName\":\"Function - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1651 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts with private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint group id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"automationAccounts-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dd01e4f-1be1-4e80-9d0b-d109e04cb064\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"},{\"properties\":{\"displayName\":\"Email - notification for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\",\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1586 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1530 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"},{\"properties\":{\"displayName\":\"Storage - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1460 - Access Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1320 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"},{\"properties\":{\"displayName\":\"Configure - diagnostic settings for storage accounts to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"category\":\"Storage\",\"version\":\"1.3.0\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the storage account should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"servicesToDeploy\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Storage - services to deploy\",\"description\":\"List of Storage services to deploy\"},\"allowedValues\":[\"storageAccounts\",\"blobServices\",\"fileServices\",\"tableServices\",\"queueServices\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"StorageDelete\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageDelete - - Enabled\",\"description\":\"Whether to stream StorageDelete logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageWrite\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageWrite - - Enabled\",\"description\":\"Whether to stream StorageWrite logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageRead\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageRead - - Enabled\",\"description\":\"Whether to stream StorageRead logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Transaction\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Transaction - - Enabled\",\"description\":\"Whether to stream Transaction logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"servicesToDeploy\":{\"type\":\"array\"},\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Transaction\":{\"type\":\"string\"},\"StorageRead\":{\"type\":\"string\"},\"StorageWrite\":{\"type\":\"string\"},\"StorageDelete\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'blobServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'fileServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'tableServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'queueServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'storageAccounts')]\",\"type\":\"Microsoft.Storage/storageAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"Transaction\":{\"value\":\"[parameters('Transaction')]\"},\"StorageDelete\":{\"value\":\"[parameters('StorageDelete')]\"},\"StorageWrite\":{\"value\":\"[parameters('StorageWrite')]\"},\"StorageRead\":{\"value\":\"[parameters('StorageRead')]\"},\"servicesToDeploy\":{\"value\":\"[parameters('servicesToDeploy')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f8f98a4-f108-47cb-8e98-91a0d85cd474\"},{\"properties\":{\"displayName\":\"Storage - accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"},{\"properties\":{\"displayName\":\"Workbooks - should be saved to storage accounts that you control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Audit, - Deny, or Disable the execution of this policy\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"microsoft.insights/workbooks\"},{\"field\":\"microsoft.insights/workbooks/storageUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fc8115b-2008-441f-8c61-9b722c1e537f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/topics/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"topic\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Server'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"OS - and data disks should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"value\":\"[length(field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"true\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]'))]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"anyOf\":[{\"count\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]\",\"where\":{\"value\":\"[length(current('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"exists\":\"true\"}}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"702dd420-7fcc-42c5-afe8-4026edd20fe0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Components'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Send file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow Telemetry\",\"description\":\"Specifies configuration of the amount - of diagnostic and usage data reported to Microsoft. The data is transmitted - securely and sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow unencrypted traffic\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) service sends and receives unencrypted messages - over the network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always install with elevated privileges\",\"description\":\"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Automatically send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Default consent\",\"description\":\"Specifies setting of the default - consent handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Windows SmartScreen\",\"description\":\"Specifies how to manage - the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow Digest authentication\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow WinRM from storing RunAs credentials\",\"description\":\"Specifies - whether the Windows Remote Management (WinRM) service will not allow RunAs - credentials to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Do not allow passwords to be saved\",\"description\":\"Specifies whether to - prevent Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Security: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set client connection encryption level\",\"description\":\"Specifies whether - to require the use of a specific encryption level to secure communications - between client computers and RD Session Host servers during Remote Desktop - Protocol (RDP) connections. This policy only applies when you are using native - RDP encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Setup: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off Data Execution Prevention for Explorer\",\"description\":\"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Specify the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\":{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\":{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\":{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"},\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"},\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\":{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1509 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1541 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1481 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the DSC configuration is not - compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Network'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"},{\"properties\":{\"displayName\":\"[Preview]: - Windows machines should meet requirements of the Azure Security Center baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureWindowsBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureWindowsBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that allow re-use of the previous - 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"},{\"properties\":{\"displayName\":\"Add - a tag to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Synapse workspace, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"},{\"properties\":{\"displayName\":\"Configure - App Configuration to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for App Configuration so that it isn't accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73290fa2-dfa7-4bbb-945d-a5e23b75df2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1456 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"For all recommendations, leave empty. For specific - recommendations, enter a list of recommendation IDs separated by semicolons - (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Determines recommendation severities. Example: - High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - states\",\"description\":\"Determines recommendation states. Recommendations - with unhealthy state require your attention to resolve. When a recommendation - state is healthy, it no longer applies to the resource as Security Center - detects it as healthy. A recommendation is not-applicable if, for example, - it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"},\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not - Applicable\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Recommendation is - created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(if(equals(length(parameters('recommendationNames')),0),array('Microsoft.Security/assessments'),parameters('recommendationNames')),parameters('recommendationSeverities'),if(contains(parameters('recommendationStates'),'Not - Applicable'),union(parameters('recommendationStates'), array('notapplicable')),parameters('recommendationStates')))]\"},{\"count\":{\"value\":\"[parameters('recommendationSeverities')]\",\"name\":\"recommendationSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.metadata.severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationSeverity')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationSeverities'))]\"},{\"count\":{\"value\":\"[parameters('recommendationStates')]\",\"name\":\"recommendationState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.status.code\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[replace(current('recommendationState'), - ' ','')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationSeverities')))]\"}},\"equals\":\"[length(parameters('recommendationStates'))]\"},{\"count\":{\"value\":\"[parameters('recommendationNames')]\",\"name\":\"recommendationName\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"name\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationName')]\"}]}},\"equals\":\"[mul(length(parameters('recommendationSeverities')),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationNames'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\":\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\":\"[if(equals(variables('recommendationStatesLength'), - 0), 1, variables('recommendationStatesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\",\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\":\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not - Applicable\":\"notapplicable\"},\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When - an Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), - mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'Microsoft.Security/assessments', parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationName')), variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\",\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"},{\"properties\":{\"displayName\":\"API - Management service should use a SKU that supports virtual networks\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for Azure API Management service.\",\"displayName\":\"Allowed - SKUs\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Isolated\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"not\":{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73ef9241-5d81-4cd4-b483-8443d1730fe5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1581 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"},{\"properties\":{\"displayName\":\"Storage - accounts should be limited by allowed SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Restrict - the set of storage account SKUs that your organization can deploy.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for storage accounts.\",\"displayName\":\"Allowed - SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public - IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Diagnostic - setting name\",\"description\":\"Profile name for the Azure diagnostic settings - resource\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The target Log Analytics workspace - for the diagnostic settings\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Logs\",\"description\":\"Enable Logs - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Metrics\",\"description\":\"Enable Metrics - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/publicIPAddresses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('LogsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('MetricsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('name'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"DDoSProtectionNotifications\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationFlowLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationReports\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('name'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"name\":{\"value\":\"[field('name')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752154a7-1e0f-45c6-a880-ac75a7e4f648\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit enabling of diagnostic logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"},{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"},{\"properties\":{\"displayName\":\"Configure - Azure Migrate resources to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Migrate\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"Default\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/assessmentProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/migrateProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.OffAzure/masterSites\"}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"default-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7590a335-57cf-4c95-babd-ecbc8fafeb1f\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1459 - Access Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Vulnerabilities should be remediated by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Azure SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"},{\"properties\":{\"displayName\":\"Audit - delegation of scopes to a managing tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"},{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1508 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"},{\"properties\":{\"displayName\":\"Azure - subscriptions should have a log profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory should use a Git repository for source control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"exists\":\"false\"},{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77d40665-3120-4348-b539-3192ec808307\"},{\"properties\":{\"displayName\":\"Virtual - network firewall rule on Azure SQL Database should be enabled to allow traffic - from the specified subnet\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\",\"description\":\"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your Azure Cache for Redis instances, data leakage risks are reduced. Learn - more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"amlworkspace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7838fd83-5cbb-4b5d-888c-bfa240972597\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1010 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1647 - Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your CosmosDB account - isn't exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1384 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Port Number\",\"description\":\"An integer indicating the COM port to - be used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Baud Rate\",\"description\":\"An integer indicating the baud rate to be - used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"},\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\":{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1093 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1708 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1289 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints connected to App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"configurationStores\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-azconfig-io\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a860e27-9ca2-4fc6-822d-c2d248c300df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1687 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"},{\"properties\":{\"displayName\":\"Allow - managing tenant ids to onboard through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\":{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - tenants\",\"description\":\"List of the tenants IDs that can be onboarded - through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"},{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\",\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1492 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"},{\"properties\":{\"displayName\":\"Azure - Attestation providers should use private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Attestation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Attestation/attestationProviders\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b256a2d-058b-41f8-bed9-3f870541c40a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"},{\"properties\":{\"displayName\":\"Resource - logs in Virtual Machine Scale Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - AKS Clusters\",\"description\":\"Whether to include AKS Clusters to resource - logs extension - True or False\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1051 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1279 - Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should reside within a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"},{\"properties\":{\"displayName\":\"Both - operating systems and data disks in Azure Kubernetes Service clusters should - be encrypted by customer-managed keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encrypting - OS and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d7be79c-23ba-4033-84dd-45e2a5ccdd67\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d890f7f-100c-473d-baa1-2777e2266535\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1471 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1011 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have not restarted within the specified - number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure SQL Database server to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the server should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"logAnalyticsWorkspaceId\":{\"type\":\"string\"}},\"variables\":{\"diagnosticSettingsName\":\"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1\"},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"name\":\"[concat(parameters('serverName'),'/master/microsoft.insights/',variables('diagnosticSettingsName'))]\",\"apiVersion\":\"2017-05-01-preview\",\"properties\":{\"name\":\"[variables('diagnosticSettingsName')]\",\"workspaceId\":\"[parameters('logAnalyticsWorkspaceId')]\",\"logs\":[{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":true,\"retentionPolicy\":{\"days\":0,\"enabled\":false}}]}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[concat('Microsoft.Sql/servers/', - parameters('serverName'),'/databases/master/providers/microsoft.insights/diagnosticSettings/', - variables('diagnosticSettingsName'))]\"],\"properties\":{\"state\":\"Enabled\",\"isAzureMonitorTargetEnabled\":true}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"logAnalyticsWorkspaceId\":{\"value\":\"[parameters('logAnalyticsWorkspaceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ea8a143-05e3-4553-abfe-f56bef8b0b70\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1520 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Privilege Use'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"},{\"properties\":{\"displayName\":\"Audit - diagnostic setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - diagnostic setting for selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - Types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"},{\"properties\":{\"displayName\":\"Azure - Defender for Azure SQL Database servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"},{\"properties\":{\"displayName\":\"SQL - Auditing settings should have Action-Groups configured to capture critical - activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"},{\"properties\":{\"displayName\":\"Deploy - - Configure suppression rules for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0\"},\"parameters\":{\"alertType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - Type\",\"description\":\"Enter the alert type field of the alert you would - like to suppress. Alert type could be queried via alerts api or PowerShell, - learn more at https://aka.ms/asc-alertsPwoershell\"}},\"suppressionRuleName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Rule - name\",\"description\":\"Rule names must begin with a letter or a number, - be between 2 and 50 characters, and contain no symbols other than dashes ( - - ) or underscores ( _ )\"}},\"state\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"State\"},\"allowedValues\":[\"Enabled\",\"Disabled\"]},\"reason\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Reason\"},\"allowedValues\":[\"The - severity of the alert should be lower\",\"The alert detecting too many normal - activities\",\"The alert is too noisy - hitting on the same resources too - many times\",\"The resource isn't relevant for me to monitor\",\"The alert - detecting normal activity on specific entity\",\"The alert isn't actionable - - not clear how to investigate the threat\",\"Other\"]},\"comment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Comment\"}},\"expirationDate\":{\"type\":\"DateTime\",\"metadata\":{\"displayName\":\"Expiration - date\"}},\"entityOneType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entityOneOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entityOneValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}},\"entitySecondType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entitySecondOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entitySecondValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"name\":\"[parameters('suppressionRuleName')]\",\"existenceScope\":\"subscription\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"location\":\"centralus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"alertType\":{\"type\":\"String\"},\"suppressionRuleName\":{\"type\":\"String\"},\"state\":{\"type\":\"String\"},\"reason\":{\"type\":\"String\"},\"comment\":{\"type\":\"String\"},\"expirationDate\":{\"type\":\"String\"},\"entityOneType\":{\"type\":\"String\"},\"entityOneOp\":{\"type\":\"String\"},\"entityOneValue\":{\"type\":\"String\"},\"entitySecondType\":{\"type\":\"String\"},\"entitySecondOp\":{\"type\":\"String\"},\"entitySecondValue\":{\"type\":\"String\"}},\"variables\":{\"reasonToEnum\":{\"The - severity of the alert should be lower\":\"AlertSeverityTooHigh\",\"The alert - detecting too many normal activities\":\"FalsePositive\",\"The alert is too - noisy - hitting on the same resources too many times\":\"Noise\",\"The resource - isn't relevant for me to monitor\":\"NotRelevant\",\"The alert detecting normal - activity on specific entity\":\"SpecificEntityFalsePositive\",\"The alert - isn't actionable - not clear how to investigate the threat\":\"Unclear\",\"Other\":\"Other\"},\"entityNameToType\":{\"User - account - name\":\"entities.account.name\",\"User account - AAD user ID\":\"entities.account.aaduserid\",\"User - account - UPN suffix\":\"entities.account.upnsuffix\",\"Azure resource ID\":\"entities.azureresource.resourceid\",\"File - - name\":\"entities.file.name\",\"File - directory\":\"entities.file.directory\",\"File - hash\":\"entities.filehash.value\",\"Host - name\":\"entities.host.hostname\",\"Host - - Azure ID\":\"entities.host.azureid\",\"Host - DNS Domain\":\"entities.host.dnsdomain\",\"Host - - OMS agent ID\":\"entities.host.omsagentid\",\"IP address\":\"entities.ip.address\",\"Malware - - name\":\"entities.malware.name\",\"Malware - category\":\"entities.malware.category\",\"Process - - command line: \":\"entities.process.commandline\"},\"entityOperationNameToOperation\":{\"Equals\":\"in\",\"Contains\":\"contains\"}},\"resources\":[{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"apiVersion\":\"2019-01-01-preview\",\"name\":\"[parameters('suppressionRuleName')]\",\"location\":\"centralus\",\"properties\":{\"alertType\":\"[parameters('alertType')]\",\"state\":\"[parameters('state')]\",\"reason\":\"[variables('reasonToEnum')[parameters('reason')]]\",\"comment\":\"[parameters('comment')]\",\"expirationDateUtc\":\"[parameters('expirationDate')]\",\"suppressionAlertsScope\":\"[if(and(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue')))), - null(), json(concat('{ \\\"allOf\\\": [', if(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), '', - concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entityOneType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entityOneOp')], - '\\\":', if(equals(parameters('entityOneOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entityOneValue'), '\\\"', if(equals(parameters('entityOneOp'), - 'Equals'), ']', ''), ' }', if(or(empty(parameters('entitySecondType')), empty(parameters('entitySecondOp')), - empty(parameters('entitySecondValue'))), '', ', '))), if(or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue'))), - '', concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entitySecondType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entitySecondOp')], - '\\\":', if(equals(parameters('entitySecondOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entitySecondValue'), '\\\"', if(equals(parameters('entitySecondOp'), - 'Equals'), ']', ''), ' } ')), '] }')))]\"}}]},\"parameters\":{\"alertType\":{\"value\":\"[parameters('alertType')]\"},\"suppressionRuleName\":{\"value\":\"[parameters('suppressionRuleName')]\"},\"state\":{\"value\":\"[parameters('state')]\"},\"reason\":{\"value\":\"[parameters('reason')]\"},\"comment\":{\"value\":\"[parameters('comment')]\"},\"expirationDate\":{\"value\":\"[parameters('expirationDate')]\"},\"entityOneType\":{\"value\":\"[parameters('entityOneType')]\"},\"entityOneOp\":{\"value\":\"[parameters('entityOneOp')]\"},\"entityOneValue\":{\"value\":\"[parameters('entityOneValue')]\"},\"entitySecondType\":{\"value\":\"[parameters('entitySecondType')]\"},\"entitySecondOp\":{\"value\":\"[parameters('entitySecondOp')]\"},\"entitySecondValue\":{\"value\":\"[parameters('entitySecondValue')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80e94a21-c6cd-4c95-a2c7-beb5704e61c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1505 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1614 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'User Rights Assignment'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on locally\",\"description\":\"Specifies which - users or groups can interactively log on to the computer. Users who attempt - to log on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the system time\",\"description\":\"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the time zone\",\"description\":\"Specifies - which users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may create a token object\",\"description\":\"Specifies - which users and groups are permitted to create an access token, which may - provide elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied local logon\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - User and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may shut down the system\",\"description\":\"Specifies - which users and groups who are logged on locally to the computers in your - environment are permitted to shut down the operating system with the Shut - Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1287 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"},{\"properties\":{\"displayName\":\"Azure - Data Explorer encryption at rest should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyName\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81e74cea-30fd-40d5-802f-d72103c2aaaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1448 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1452 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - System' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\":\"Audit - Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Other System Events\",\"description\":\"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1262 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1008 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to a new recovery services - vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally include virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"value\":\"[empty(parameters('inclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('inclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83644c87-93dd-49fe-bf9f-6aff8fd0834e\"},{\"properties\":{\"displayName\":\"Resource - logs in Event Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"},{\"properties\":{\"displayName\":\"Network - interfaces should not have public IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\",\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"},{\"properties\":{\"displayName\":\"Managed - disks should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that a managed disk isn't - exposed on the public internet. Creating private endpoints can limit exposure - of managed disks. Learn more at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"DenyAll\",\"AllowPrivate\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8405fdab-1faf-48aa-b702-999c9c172094\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1382 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"},{\"properties\":{\"displayName\":\"Configure - managed disks to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your managed disk resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disks in this region are validated and disk access resource would be associated - with them.\"}},\"diskAccessId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked\",\"strongType\":\"Microsoft.Compute/diskAccesses\",\"description\":\"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"AllowPrivate\",\"DenyAll\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/diskAccessId\",\"value\":\"[parameters('diskAccessId')]\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"value\":\"AllowPrivate\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8426280e-b5be-43d9-979e-653d12a08638\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1098 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\":\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain - Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) that - the Windows machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Components' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send - file samples when further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\":\"Allow - indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow - unencrypted traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always - install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\":\"Always - prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\":\"Configure - Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\":\"Configure - Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\":\"Disallow - Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\":\"Do - not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\":\"Set - client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\":\"Specify - the interval to check for definition updates;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send - file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - install with elevated privileges\",\"description\":\"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically - send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Default consent\",\"description\":\"Specifies setting of the default consent - handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Windows SmartScreen\",\"description\":\"Specifies how to manage the behavior - of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning - users before running unrecognized programs downloaded from the Internet. Some - information is sent to Microsoft about files and programs run on PCs with - this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - Digest authentication\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - WinRM from storing RunAs credentials\",\"description\":\"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Do - not allow passwords to be saved\",\"description\":\"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - client connection encryption level\",\"description\":\"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off Data Execution Prevention for Explorer\",\"description\":\"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Specify - the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1580 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your IoT Hub device provisioning instance so that - it's not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"859dfc91-ea35-43a6-8256-31271c363794\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory integration runtime should have a limit for number of cores\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - manage your resources and costs, limit the number of cores for an integration - runtime.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"maxCores\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed max number of cores\",\"description\":\"The max number of cores allowed - for dataflow.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"greater\":\"[parameters('maxCores')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85bb39b5-2f66-49f8-9306-77da3ac5130f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1326 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should have firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"},\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Server'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"},{\"properties\":{\"displayName\":\"Deploy - SQL DB transparent data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables - transparent data encryption on SQL databases\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), - '/current')]\",\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"},{\"properties\":{\"displayName\":\"System - updates should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints that connect to Azure Data Factory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"listOfGroupIds\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of Group Ids that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - Group Ids\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"in\":\"[parameters('listOfGroupIds')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"dataFactory-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86cd96e1-1745-420d-94d4-d3f2fe415aa4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should use a customer-managed key to encrypt the device unlock - password\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support customer-managed key - encryption key\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType\",\"notEquals\":\"CustomerManaged\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86efb160-8de7-451d-bc08-5d475b0aadae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"},{\"properties\":{\"displayName\":\"Require - a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - existence of a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Privilege Use' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Devices' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: - Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Control Panel'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"},{\"properties\":{\"displayName\":\"Azure - Stream Analytics jobs should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy\",\"equals\":\"SystemAccount\"},{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87ba29ef-1ab3-4d82-b763-87fcd4f531f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1317 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1501 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"},{\"properties\":{\"displayName\":\"Network - interfaces should disable IP forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure's check of the source and destination for - a network interface. This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1215 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"},{\"properties\":{\"displayName\":\"SQL - servers with auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Sql/servers/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1411 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid domains to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898e9824-104c-4965-8e0e-5197588fa5d4\"},{\"properties\":{\"displayName\":\"App - Configuration should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you'll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/sku.name\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89c8a434-18f0-402c-8147-630a8dea54e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System settings'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should deploy into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"field\":\"Microsoft.ContainerInstance/containerGroups/networkProfile.id\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8af8f826-edcb-4178-b35f-851ea6fea615\"},{\"properties\":{\"displayName\":\"Azure - Data Factory should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Data Factory, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1534 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1170 - Penetration Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Firewall Properties'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1683 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - a required tag and its value on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1324 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1288 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1250 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Arc enabled Kubernetes clusters should have Azure Defender's extension - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender's extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Object Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File Share\",\"description\":\"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"},\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"},\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\":{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\",\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to enable private endpoint connections\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - to use for Private Endpoints\",\"description\":\"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].id\",\"exists\":\"false\"}},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/privateEndpointConnections\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"subnetlocation\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"name\":\"[variables('privateEndpointName')]\",\"location\":\"[parameters('subnetlocation')]\",\"properties\":{\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"sqlServer\"],\"privateLinkServiceConnectionState\":{\"status\":\"Approved\",\"description\":\"Auto-approved\",\"actionsRequired\":\"None\"}}}],\"manualPrivateLinkServiceConnections\":[],\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"customDnsConfigs\":[]}}]},\"parameters\":{\"name\":{\"value\":\"[parameters('name')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"subnetlocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e8ca470-d980-4831-99e6-dc70d9f6af87\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1517 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1668 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1147 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not store passwords using - reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1550 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Firewall - Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Firewall Properties'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Domain: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Private: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Public: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Modules\",\"description\":\"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"},\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1355 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91678b7c-d721-4fc5-b179-3cdf74e96b1c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Components'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"},{\"properties\":{\"displayName\":\"Resource - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91a78b24-f231-4a8a-8da9-02c35b2b6510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"},{\"properties\":{\"displayName\":\"Configure - Dependency agent to be enabled on Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"resources\":[{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"apiVersion\":\"2020-03-11-preview\",\"name\":\"[concat(parameters('vmName'), - '/', variables('DaExtensionName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"},{\"properties\":{\"displayName\":\"MFA - should be enabled accounts with write permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1290 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that contain certificates expiring within - the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not contain the specified certificates in Trusted - Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\\\LocalMachine\\\\Root) does not contain one - or more of the certificates listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints\",\"description\":\"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain all the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to include\",\"description\":\"A semicolon-separated list of members - that should be included in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"},\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1379 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1371 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Management' for auditing application, security, and - user group management, and other management events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"},{\"properties\":{\"displayName\":\"Virtual - networks should be protected by Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Audit\",\"Disabled\"]},\"ddosPlan\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DDoS - Protection Plan\",\"description\":\"DDoS Protection Plan resource to be associated - to the virtual networks\",\"strongType\":\"Microsoft.Network/ddosProtectionPlans\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"notEquals\":true},{\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"value\":true},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id\",\"value\":\"[parameters('ddosPlan')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Key Vault should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AuditEventEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AuditEvent - - Enabled\",\"description\":\"Whether to stream AuditEvent logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AllMetricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AuditEventEnabled\":{\"type\":\"string\"},\"AllMetricsEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetricsEnabled')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('AuditEventEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"AuditEventEnabled\":{\"value\":\"[parameters('AllMetricsEnabled')]\"},\"AllMetricsEnabled\":{\"value\":\"[parameters('AuditEventEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"951af2fa-529b-416e-ab6e-066fd85ac459\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1526 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"},{\"properties\":{\"displayName\":\"Automation - accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1163 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"},{\"properties\":{\"displayName\":\"Require - a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - existence of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"},{\"properties\":{\"displayName\":\"App - Configuration should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - System' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always - use classic logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\":\"Enable - Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\":\"Turn on - convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - use classic logon\",\"description\":\"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start - Driver Initialization Policy\",\"description\":\"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1453 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"},{\"properties\":{\"displayName\":\"Add - a tag to subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96d9a89c-0d67-41fc-899d-2b9599f76a24\"},{\"properties\":{\"displayName\":\"HPC - Cache accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageCache/caches\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"970f84d8-71b6-4091-9979-ace7e3fb6dbb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - MSS (Legacy)'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Policy Change'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authentication Policy Change\",\"description\":\"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authorization Policy Change\",\"description\":\"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\":{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\":{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"},\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1136 - Audit Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1378 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid domain instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\",\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Network'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable insecure guest logons\",\"description\":\"Specifies whether the SMB - client will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\":{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1076 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines without a given tag to a new recovery - services vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally exclude virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Name\",\"description\":\"Name of the tag to use for excluding - VMs from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Values\",\"description\":\"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1102 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"},{\"properties\":{\"displayName\":\"Azure - Batch account should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Batch account's - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"},{\"properties\":{\"displayName\":\"Virtual - network injection should be enabled for Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1049 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1563 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1462 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"},{\"properties\":{\"displayName\":\"Microsoft - IaaSAntimalware extension should be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/provisioningServices\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"greaterOrEquals\":1},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotDps\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b75ea5b-c796-4c99-aaaf-21c204daac43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1236 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1525 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1138 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1135 - Non-Repudiation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9cee519f-d9c1-4fd9-9f79-24ec3449ed30\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1489 - Location Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1322 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1233 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1259 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"},{\"properties\":{\"displayName\":\"All - network ports should be restricted on network security groups associated to - your virtual machine\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified some of your network security groups' inbound - rules to be too permissive. Inbound rules should not allow access from 'Any' - or 'Internet' ranges. This can potentially enable attackers to target your - resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"},{\"properties\":{\"displayName\":\"Application - definition for Managed Application should use customer provided storage account\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed - Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\":\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1500 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1504 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1494 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1187 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not set to the specified time - zone\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"},{\"properties\":{\"displayName\":\"Configure - Storage account to use a private link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"The subnetId that private endpoint - connections should link to\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access\"},\"allowedValues\":[\"blob\",\"blob_secondary\",\"table\",\"table_secondary\",\"queue\",\"queue_secondary\",\"file\",\"web\",\"web_secondary\",\"dfs\",\"dfs_secondary\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"in\":[\"StorageV2\",\"BlobStorage\",\"BlockBlobStorage\",\"FileStorage\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":\"[array(parameters('targetSubResource'))]\",\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f766f00-8d11-464e-80e1-4091d7874074\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1354 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the Log Analytics agent is not - connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search service should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or Deny the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"equals\":\"free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a049bf77-880b-470f-ba6d-9f21c530cf83\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1145 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"},{\"properties\":{\"displayName\":\"Allowed - resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support 'tags' and 'location' will be affected - by this policy. To restrict all resources please duplicate this policy and - change the 'mode' to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that can be deployed.\",\"displayName\":\"Allowed resource - types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1245 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"},{\"properties\":{\"displayName\":\"Security - Center standard pricing tier should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"field\":\"Microsoft.EventHub/namespaces/clusterArmId\",\"exists\":\"true\"},{\"not\":{\"field\":\"Microsoft.EventHub/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Logic Apps in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1612 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1059 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2a5b911-5617-447e-a49e-59dbe0e0434b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1532 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not restrict the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1238 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"},{\"properties\":{\"displayName\":\"Configure - Container registries to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Container Registry resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3701552-92ea-433e-9d17-33b7f1208fc9\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine scale sets for - Azure Security Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux Azure Monitor agent to enable Azure Monitor assignments - on Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorLinuxAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorLinuxAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorLinuxAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4034bc6-ae50-406d-bf76-50f4ee5a7811\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"},{\"properties\":{\"displayName\":\"Audit - usage of custom RBAC rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - built-in roles such as 'Owner, Contributer, Reader' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"},{\"properties\":{\"displayName\":\"Web - Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine for Azure Security - Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1617 - Application Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to CosmosDB account. - Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Dns Zone Id\",\"description\":\"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Group Id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"cosmosDB-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a63cc0bd-cda4-4178-b705-37dc439d3e0f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to an Event Hub to be enabled on Azure Key - Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Azure Key Vault Managed HSMs in this location will be linked to this Event - Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"hsmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('hsmName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('hsmName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"hsmName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6d2c800-5230-4a40-bff3-8268b4987d42\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using HTTPS secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires HTTPS user and key secrets stored in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"httpsUserKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - user name Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name.\"}},\"httpsKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - key Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"httpsUser\":{\"type\":\"securestring\"},\"httpsKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"httpsUser\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsUserKeyVaultSecretName')]\"}},\"httpsKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6f560f4-f582-4b67-b123-a37dcd1bf7ea\"},{\"properties\":{\"displayName\":\"Auditing - on SQL server should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1431 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1027 - Access Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"},{\"properties\":{\"displayName\":\"Azure - DDoS Protection Standard should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1570 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"},{\"properties\":{\"displayName\":\"Require - encryption on Data Lake Store accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures encryption is enabled on all Data Lake Store accounts\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Lake\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"SQL - Managed Instance should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"},{\"properties\":{\"displayName\":\"Deploy - Azure Policy Add-on to Azure Kubernetes Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\":\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\":{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', - parameters('clusterName'))]\",\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', - parameters('clusterName'))]\"},\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\":{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'), - 'Microsoft.ContainerService/managedClusters', parameters('clusterName')), - '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\":\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\",\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'), - 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\":\"[if(contains(parameters('aksClusterContent'), - 'identity'), parameters('aksClusterContent').identity, json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\",\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\",\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties, - 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles, - json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile, - json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile, - json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile, - json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\",\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties, - 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\",\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties, - 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy, - json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'networkProfile'), parameters('aksClusterContent').properties.networkProfile, - json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\",\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile, - json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile, - json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties, - 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID, - json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'identityProfile'), parameters('aksClusterContent').properties.identityProfile, - json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\":\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"}}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1400 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"},{\"properties\":{\"displayName\":\"SQL - Managed Instances should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Detailed Tracking'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"},{\"properties\":{\"displayName\":\"Deploy - network watcher when virtual networks are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\":\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\",\"name\":\"[concat('networkWatcher_', - parameters('location'))]\",\"location\":\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1511 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning instances to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotDps\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices-provisioning.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1539 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1006 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1461 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1073 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that 'PHP version' is the latest, if used as a part of the Function - app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP - cannot be used with Function apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Latest PHP version\",\"description\":\"Latest supported PHP version for App - Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Automatic provisioning of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1323 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - SQL servers without Advanced Data Security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance without advanced data security.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"},{\"properties\":{\"displayName\":\"Enable - Azure Security Center on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\\r\\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\\r\\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\\r\\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\\r\\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\":{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"},{\"properties\":{\"displayName\":\"Configure - disaster recovery on virtual machines by enabling replication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Compute\"},\"parameters\":{\"sourceRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Source - Region\",\"description\":\"Region in which the virtual machine is originally - deployed\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Region\",\"description\":\"Region to be used to deploy the virtual machine - in case of a natural disaster\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Resource Group\",\"description\":\"Resource group to be used to create the - virtual machine in the target region\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Vault - Resource Group\",\"description\":\"The resource group containing the recovery - services vault used for disaster recovery configurations\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Services Vault\",\"description\":\"ID of the recovery services vault to be - used for disaster recovery configurations\",\"strongType\":\"Microsoft.RecoveryServices/vaults\",\"serviceName\":\"ASR\"}},\"recoveryNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Virtual Network\",\"description\":\"Existing Recovery Virtual Network ID or - name of the Virtual Network to be created in Target Region\",\"strongType\":\"Microsoft.Network/virtualNetworks\",\"serviceName\":\"ASR\"}},\"targetZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Availability Zone\",\"description\":\"Availability zone in the designated - target region to be used by virtual machines during disaster\",\"strongType\":\"zone\",\"serviceName\":\"ASR\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('sourceRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings\",\"exists\":\"false\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"location\",\"equals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones[*]\",\"notEquals\":\"[parameters('targetZone')]\"}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"value\":\"[length(parameters('targetZone'))]\",\"greater\":0}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"name\",\"like\":\"ASR-Protect-*\"},{\"field\":\"Microsoft.Resources/links/targetId\",\"contains\":\"/replicationProtectedItems/\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"apiVersion\":{\"type\":\"String\"},\"avSetId\":{\"type\":\"String\"},\"dataDiskIds\":{\"type\":\"object\"},\"osDiskId\":{\"type\":\"String\"},\"ppgId\":{\"type\":\"String\"},\"recoveryNetworkId\":{\"type\":\"String\"},\"recoverySubscriptionId\":{\"type\":\"String\"},\"sourceRegion\":{\"type\":\"String\"},\"sourceResourceGroupName\":{\"type\":\"String\"},\"targetRegion\":{\"type\":\"String\"},\"targetResourceGroupName\":{\"type\":\"String\"},\"targetZone\":{\"type\":\"String\"},\"vaultName\":{\"type\":\"String\"},\"vaultResourceGroupName\":{\"type\":\"String\"},\"vmId\":{\"type\":\"String\"},\"vmZones\":{\"type\":\"Object\"}},\"variables\":{\"avSetApiVersion\":\"2019-03-01\",\"deploymentApiVersion\":\"2017-05-10\",\"vmApiVersion\":\"2019-07-01\",\"ppgApiVersion\":\"2019-12-01\",\"portalLinkPrefix\":\"https://portal.azure.com/aaa@foo.com\",\"schemaLink\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"defaultAvSet\":\"defaultAvSet-asr\",\"defaultPPG\":\"defaultPPG-asr\",\"eligibilityResultsDefault\":\"default\",\"protectedItemSuffix\":\"-policy\",\"recoveryAvSetPrefix\":\"RecoveryAvSet-\",\"recoveryPPGPrefix\":\"RecoveryPPG-\",\"avSetType\":\"Microsoft.Compute/availabilitySets\",\"deploymentType\":\"Microsoft.Resources/deployments\",\"networkType\":\"Microsoft.Network/virtualNetworks\",\"ppgType\":\"Microsoft.Compute/proximityPlacementGroups\",\"replicationEligibilityResultsType\":\"Microsoft.RecoveryServices/replicationEligibilityResults\",\"storageType\":\"Microsoft.Storage/storageAccounts\",\"vaultType\":\"Microsoft.RecoveryServices/vaults\",\"avSetTemplateName\":\"[concat(variables('recoveryAvSetPrefix'), - last(split(parameters('vmId'), '/')))]\",\"avSetTemplateName64\":\"[if(greater(length(variables('avSetTemplateName')), - 64), substring(variables('avSetTemplateName'), 0, 64), variables('avSetTemplateName'))]\",\"ppgTemplateName\":\"[concat(variables('recoveryPPGPrefix'), - last(split(parameters('vmId'), '/')))]\",\"ppgTemplateName64\":\"[if(greater(length(variables('ppgTemplateName')), - 64), substring(variables('ppgTemplateName'), 0, 64), variables('ppgTemplateName'))]\",\"replicationProtectedIntentTemplateName\":\"[concat('ASR-', - parameters('sourceResourceGroupName'), '-', last(split(parameters('vmId'), - '/')))]\",\"replicationProtectedIntentTemplateName64\":\"[if(greater(length(variables('replicationProtectedIntentTemplateName')), - 64), substring(variables('replicationProtectedIntentTemplateName'), 0, 64), - variables('replicationProtectedIntentTemplateName'))]\",\"vmDataDiskIds\":\"[array(parameters('dataDiskIds').rawValue)]\",\"vmDiskCount\":\"[add(length(variables('vmDataDiskIds')), - int(1))]\",\"diskIds\":\"[concat(array(parameters('osDiskId')), array(parameters('dataDiskIds').rawValue))]\",\"vaultId\":\"[resourceId(parameters('vaultResourceGroupName'), - variables('vaultType'), parameters('vaultName'))]\",\"eligibilityResultsId\":\"[extensionResourceId(parameters('vmId'), - variables('replicationEligibilityResultsType'), variables('eligibilityResultsDefault'))]\",\"protectedIntentName\":\"[concat(parameters('vaultName'), - '/', guid(resourceGroup().id, last(split(parameters('vmId'), '/'))), variables('protectedItemSuffix'))]\",\"recoveryAvSetName\":\"[if(empty(parameters('avSetId')), - variables('defaultAvSet'), concat(last(split(parameters('avSetId'), '/')), - '-asr'))]\",\"recoveryAvSetId\":\"[if(empty(parameters('avSetId')), '', resourceId(parameters('targetResourceGroupName'), - variables('avSetType'), variables('recoveryAvSetName')))]\",\"recoveryAvType\":\"[if(not(empty(parameters('avSetId'))), - 'AvailabilitySet', if(greater(length(parameters('vmZones').rawValue), 0), - 'AvailabilityZone', 'Single'))]\",\"recoveryAvZone\":\"[if(greater(length(parameters('vmZones').rawValue), - 0), parameters('targetZone'), '')]\",\"recoveryPPGName\":\"[if(empty(parameters('ppgId')), - variables('defaultPPG'), concat(last(split(parameters('ppgId'), '/')), '-asr'))]\",\"recoveryPPGId\":\"[if(empty(parameters('ppgId')), - '', resourceId(parameters('targetResourceGroupName'), variables('ppgType'), - variables('recoveryPPGName')))]\",\"targetResourceGroupId\":\"[concat('/subscriptions/', - parameters('recoverySubscriptionId'), '/resourceGroups/', parameters('targetResourceGroupName'))]\"},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('ppgTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"type\":\"[variables('ppgType')]\",\"name\":\"[variables('recoveryPPGName')]\",\"apiVersion\":\"[variables('ppgApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"properties\":{\"proximityPlacementGroupType\":\"[if(empty(parameters('ppgId')), - 'Standard', reference(parameters('ppgId'), variables('ppgApiVersion')).proximityPlacementGroupType)]\"}}]},\"parameters\":{}}},{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('avSetTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"type\":\"[variables('avSetType')]\",\"sku\":{\"name\":\"[if(empty(parameters('avSetId')), - 'Aligned', reference(parameters('avSetId'), variables('avSetApiVersion'), - 'Full').sku.name)]\"},\"name\":\"[variables('recoveryAvSetName')]\",\"apiVersion\":\"[variables('avSetApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"tags\":{},\"properties\":{\"platformUpdateDomainCount\":\"[if(empty(parameters('avSetId')), - '5', reference(parameters('avSetId'), variables('avSetApiVersion')).platformUpdateDomainCount)]\",\"platformFaultDomainCount\":\"[if(empty(parameters('avSetId')), - '2', reference(parameters('avSetId'), variables('avSetApiVersion')).platformFaultDomainCount)]\",\"proximityPlacementGroup\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"id\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\"}}]},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\"]},{\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('replicationProtectedIntentTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('vaultResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/replicationProtectionIntents\",\"name\":\"[variables('protectedIntentName')]\",\"apiVersion\":\"[parameters('apiVersion')]\",\"properties\":{\"providerSpecificDetails\":{\"instanceType\":\"A2A\",\"fabricObjectId\":\"[parameters('vmId')]\",\"primaryLocation\":\"[parameters('sourceRegion')]\",\"recoveryLocation\":\"[parameters('targetRegion')]\",\"recoverySubscriptionId\":\"[parameters('recoverySubscriptionId')]\",\"recoveryAvailabilityType\":\"[variables('recoveryAvType')]\",\"recoveryAvailabilityZone\":\"[variables('recoveryAvZone')]\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\",\"recoveryAvailabilitySetCustomInput\":\"[if(empty(parameters('avSetId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryAvailabilitySetId\\\"', ':', '\\\"', variables('recoveryAvSetId'), - '\\\"', '}')))]\",\"recoveryProximityPlacementGroupCustomInput\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryProximityPlacementGroupId\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\",\"recoveryVirtualNetworkCustomInput\":\"[if(contains(parameters('recoveryNetworkId'), - '/'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryVirtualNetworkId\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"New\\\",', - '\\\"recoveryVirtualNetworkName\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')))]\",\"vmDisks\":[],\"copy\":[{\"name\":\"vmManagedDisks\",\"count\":\"[variables('vmDiskCount')]\",\"input\":{\"diskId\":\"[if(equals(copyIndex('vmManagedDisks'), - int(0)), reference(parameters('vmId'), variables('vmApiVersion')).storageProfile.osDisk.managedDisk.Id, - variables('vmDataDiskIds')[sub(copyIndex('vmManagedDisks'), int(1))])]\",\"recoveryResourceGroupCustomInput\":{\"resourceType\":\"Existing\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\"}}}]}}}],\"outputs\":{\"vmName\":{\"value\":\"[last(split(parameters('vmId'), - '/'))]\",\"type\":\"string\"},\"availabilitySetUrl\":{\"value\":\"[if(empty(parameters('avSetId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryAvSetId')))]\",\"type\":\"string\"},\"proximityPlacementGroupUrl\":{\"value\":\"[if(empty(parameters('ppgId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryPPGId')))]\",\"type\":\"string\"},\"replicationEligibilityResults\":{\"value\":\"[reference(variables('eligibilityResultsId'), - parameters('apiVersion'))]\",\"type\":\"Object\"}}},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\",\"[variables('avSetTemplateName64')]\"]}],\"outputs\":{}},\"parameters\":{\"apiVersion\":{\"value\":\"2018-07-10\"},\"avSetId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/availabilitySet.id')]\"},\"dataDiskIds\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id')]\",\"emptyArray\":[]}},\"osDiskId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id')]\"},\"ppgId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/proximityPlacementGroup.id')]\"},\"recoveryNetworkId\":{\"value\":\"[parameters('recoveryNetworkId')]\"},\"recoverySubscriptionId\":{\"value\":\"[subscription().subscriptionId]\"},\"sourceRegion\":{\"value\":\"[parameters('sourceRegion')]\"},\"sourceResourceGroupName\":{\"value\":\"[resourcegroup().Name]\"},\"targetRegion\":{\"value\":\"[parameters('targetRegion')]\"},\"targetResourceGroupName\":{\"value\":\"[last(split(parameters('targetResourceGroupId'), - '/'))]\"},\"targetZone\":{\"value\":\"[parameters('targetZone')]\"},\"vaultName\":{\"value\":\"[last(split(parameters('vaultId'), - '/'))]\"},\"vaultResourceGroupName\":{\"value\":\"[last(split(parameters('vaultResourceGroupId'), - '/'))]\"},\"vmId\":{\"value\":\"[field('id')]\"},\"vmZones\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/zones')]\",\"emptyArray\":[]}}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac34a73f-9fa5-4067-9247-a3ecae514468\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"},{\"properties\":{\"displayName\":\"Role-Based - Access Control (RBAC) should be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"},{\"properties\":{\"displayName\":\"Configure - Synapse workspaces to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"Integer\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a Synapse workspace is created that will be - shared by all Synapse workspaces in that region). Important - for proper operation - of Auditing do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"workspaceName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"int\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[parameters('auditRetentionDays')]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('workspaceaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('workspaceAuditingStorageAccount-', - uniqueString(variables('locationCode'), deployment().name))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure Synapse workspaces to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('workspaceName'), - '/Default')]\",\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"workspaceName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation if the 'environment' tag is set to one of the following - values: production, dev, test, staging\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\",\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1569 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1454 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1272 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"},{\"properties\":{\"displayName\":\"SQL - Server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1598 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"},{\"properties\":{\"displayName\":\"Guest - Configuration extension should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as 'Windows Exploit guard should be enabled'. Learn more - at https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\",\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae89ebca-1c92-4898-ac2c-9f63decb045c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL Managed Instance advanced - data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1413 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1710 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"},{\"properties\":{\"displayName\":\"Azure - Spring Cloud should use network injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Spring Cloud instances should use virtual network injection for the following - purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring - Cloud to interact with systems in either on premises data centers or Azure - service in other virtual networks. 3. Empower customers to control inbound - and outbound network communications for Azure Spring Cloud.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Platform\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure - Spring Cloud SKU Names\",\"description\":\"List of Azure Spring Cloud SKUs - against which this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"},{\"properties\":{\"displayName\":\"Monitor - missing Endpoint Protection in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"SQL - servers which don't have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: 'Auditing should be enabled on advanced data security - settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1725 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"},{\"properties\":{\"displayName\":\"Activity - log should be retained for at least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1429 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1711 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"count\":{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet\",\"exists\":false}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0ab5b05-1c98-40f7-bb9e-dc568e41b501\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints connect to Azure SignalR - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"description\":\"Private DNS zone to integrate with private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"signalr\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-service-signalr-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0e86710-7fb7-4a6c-a064-32e9b829509e\"},{\"properties\":{\"displayName\":\"Management - ports of virtual machines should be protected with just-in-time network access - control\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1571 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"},{\"properties\":{\"displayName\":\"SQL - Database should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1091 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1009 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1234 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1107 - Content Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows web servers that are not using secure - communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum TLS version\",\"description\":\"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\":\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\":{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is deployed for the indicated Storage Sync Service resource. - This enables you to address your Storage Sync Service resource from within - the private IP address space of your organization's network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet with private endpoint network policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"afs\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b35dddd9-daf7-423b-8375-5a5b86806d5a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Logon-Logoff'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to a Log Analytics workspace to be enabled - on Azure Key Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - to send log to. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3884c81-31aa-473d-a9bb-9466fe0ec2a0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1380 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"},{\"properties\":{\"displayName\":\"Resource - logs in Search services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1172 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1131 - Protection Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Shutdown' for allowing shutdown without logon and clearing the virtual - memory pagefile. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Clear virtual memory pagefile\",\"description\":\"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"},{\"properties\":{\"displayName\":\"Azure - Stack Edge devices should use double-encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - secure the data at rest on the device, ensure it's double-encrypted, the access - to data is controlled, and once the device is deactivated, the data is securely - erased off the data disks. Double encryption is the use of two layers of encryption: - BitLocker XTS-AES 256-bit encryption on the data volumes and built-in encryption - of the hard drives. Learn more in the security overview documentation for - the specific Stack Edge device.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Stack Edge\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBoxEdge/DataBoxEdgeDevices\"},{\"field\":\"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name\",\"notIn\":[\"TEA_1Node\",\"TEA_1Node_UPS\",\"TEA_1Node_Heater\",\"TEA_1Node_UPS_Heater\",\"TEA_4Node_Heater\",\"TEA_4Node_UPS_Heater\",\"TMA\",\"EdgePR_Base\",\"EdgePR_Base_UPS\",\"EdgeMR_Mini\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4ac1030-89c5-4697-8e00-28b5ba6a8811\"},{\"properties\":{\"displayName\":\"[Deprecated]: - A security contact phone number should be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should only use Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection for Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection across Cosmos DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('cosmosDbAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"},{\"properties\":{\"displayName\":\"Diagnostic - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts with private endpoints \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A - group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"privateEndpointGroupId\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"String\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"[parameters('privateEndpointGroupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b609e813-3156-4079-91fa-a8494c1471c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"notEquals\":\"free\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Search/searchServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"searchService\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b698b005-b660-4837-b833-a7aaab26ddba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1568 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"},{\"properties\":{\"displayName\":\"Network - Watcher should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"listOfLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\":\"Audit - if Network Watcher is not enabled for region(s).\",\"strongType\":\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NetworkWatcher - resource group name\",\"description\":\"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1608 - Supply Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1401 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for SQL Databases to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select the Log Analytics workspace - from dropdown list\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreRuntimeStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreRuntimeStatistics - logs to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreWaitStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"ErrorsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Errors - - Enabled\",\"description\":\"Whether to stream Errors logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DatabaseWaitStatistics - - Enabled\",\"description\":\"Whether to stream DatabaseWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"BlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Blocks - - Enabled\",\"description\":\"Whether to stream Blocks logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLInsightsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLInsights - - Enabled\",\"description\":\"Whether to stream SQLInsights logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLSecurityAuditEvents - - Enabled\",\"description\":\"Whether to stream SQLSecurityAuditEvents logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"TimeoutsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Timeouts - - Enabled\",\"description\":\"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AutomaticTuningEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AutomaticTuning - - Enabled\",\"description\":\"Whether to stream AutomaticTuning logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DeadlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Deadlocks - - Enabled\",\"description\":\"Whether to stream Deadlocks logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Basic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Basic - (metric) - Enabled\",\"description\":\"Whether to stream Basic metrics to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"InstanceAndAppAdvanced\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"InstanceAndAppAdvanced - (metric) - Enabled\",\"description\":\"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"WorkloadManagement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"WorkloadManagement - (metric) - Enabled\",\"description\":\"Whether to stream WorkloadManagement - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"matchInsensitively\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Basic\":{\"type\":\"string\"},\"InstanceAndAppAdvanced\":{\"type\":\"string\"},\"WorkloadManagement\":{\"type\":\"string\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"string\"},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"string\"},\"ErrorsEnabled\":{\"type\":\"string\"},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"string\"},\"BlocksEnabled\":{\"type\":\"string\"},\"SQLInsightsEnabled\":{\"type\":\"string\"},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"string\"},\"TimeoutsEnabled\":{\"type\":\"string\"},\"AutomaticTuningEnabled\":{\"type\":\"string\"},\"DeadlocksEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Basic\",\"enabled\":\"[parameters('Basic')]\"},{\"category\":\"InstanceAndAppAdvanced\",\"enabled\":\"[parameters('InstanceAndAppAdvanced')]\"},{\"category\":\"WorkloadManagement\",\"enabled\":\"[parameters('WorkloadManagement')]\"}],\"logs\":[{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('SQLInsightsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('AutomaticTuningEnabled')]\"},{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('ErrorsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('TimeoutsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('BlocksEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('DeadlocksEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"Basic\":{\"value\":\"[parameters('Basic')]\"},\"InstanceAndAppAdvanced\":{\"value\":\"[parameters('InstanceAndAppAdvanced')]\"},\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"WorkloadManagement\":{\"value\":\"[parameters('WorkloadManagement')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('fullName')]\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},\"QueryStoreWaitStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},\"ErrorsEnabled\":{\"value\":\"[parameters('ErrorsEnabled')]\"},\"DatabaseWaitStatisticsEnabled\":{\"value\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},\"BlocksEnabled\":{\"value\":\"[parameters('BlocksEnabled')]\"},\"SQLInsightsEnabled\":{\"value\":\"[parameters('SQLInsightsEnabled')]\"},\"SQLSecurityAuditEventsEnabled\":{\"value\":\"[parameters('SQLSecurityAuditEventsEnabled')]\"},\"TimeoutsEnabled\":{\"value\":\"[parameters('TimeoutsEnabled')]\"},\"AutomaticTuningEnabled\":{\"value\":\"[parameters('AutomaticTuningEnabled')]\"},\"DeadlocksEnabled\":{\"value\":\"[parameters('DeadlocksEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b79fa14e-238a-4c2d-b376-442ce508fc84\"},{\"properties\":{\"displayName\":\"API - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members\",\"description\":\"A semicolon-separated list of all the expected - members of the Administrators local group. Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\":{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Event Hub namespaces, data - leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Accounts'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Administrative operations with no activity log alerts - configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Administrative Operation name for which activity - log alert should be configured\"},\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\",\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\",\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1257 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1186 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1447 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1625 - Boundary Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Recovery console'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\",\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"topic\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"topic-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baf19753-7502-405f-8745-370519b20483\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1726 - Information Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1166 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1188 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"},{\"properties\":{\"displayName\":\"Non-internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1533 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Client'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1095 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1050 - Concurrent Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"},{\"properties\":{\"displayName\":\"IP - Forwarding on your virtual machine should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling - IP forwarding on a virtual machine's NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"},{\"properties\":{\"displayName\":\"Container - registries should have SKUs that support Private Links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"notEquals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL Managed Instance - advanced data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It's - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for DNS should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for DNS provides an additional layer of protection for your cloud - resources by continuously monitoring all DNS queries from your Azure resources. - Azure Defender alerts you about suspicious activity at the DNS layer. Learn - more about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Dns\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bdc59948-5574-49b3-bb91-76b7c986428d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group contains any - of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1360 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be enabled for Azure Front Door Service or - Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have not restarted within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\",\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number - of days\",\"description\":\"The number of days without restart until the machine - is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"},{\"properties\":{\"displayName\":\"Windows - Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.1.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\",\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status - if Windows Defender is not available on machine\",\"description\":\"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to 'Non-Compliant' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' - shows these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1152 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"},{\"properties\":{\"displayName\":\"Geo-redundant - storage should be enabled for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - geo-redundancy to create highly available applications\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub's - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotHub\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf684997-3909-404e-929c-d4a38ed23b2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Logon-Logoff'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Group Membership\",\"description\":\"Specifies whether audit events - are generated when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"},\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using SSH secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires a SSH private key secret in Key Vault. - For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"sshKnownHostsContents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Base64-encoded - known hosts content\",\"description\":\"The base64-encoded known hosts content.\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"sshPrivateKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SSH - private key Key Vault secret\",\"description\":\"The name of the Key Vault - secret that holds the base64-encoded SSH private key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents\",\"equals\":\"[parameters('sshKnownHostsContents')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"sshKnownHostsContents\":{\"type\":\"string\"},\"sshPrivateKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":{\"value\":\"[parameters('sshKnownHostsContents')]\"},\"sshPrivateKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('sshPrivateKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c050047b-b21b-4822-8a2d-c1e37c3c0c6a\"},{\"properties\":{\"displayName\":\"Configure - private endpoint connections on Azure Automation accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only - approved VM extensions should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy governs the virtual machine extensions that are not approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"approvedExtensions\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of approved extension types that can be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved - extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1676 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1719 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"},{\"properties\":{\"displayName\":\"Deploy - associations for a custom provider\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom - Provider\"},\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Custom - provider ID\",\"description\":\"Resource ID of the Custom provider to which - resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the custom provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetCustomProviderId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\":{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1004 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Logon'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Credential Validation\",\"description\":\"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"},\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1503 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not set to the specified - time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Time zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"},{\"properties\":{\"displayName\":\"Flow - logs should be configured for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"},{\"properties\":{\"displayName\":\"Azure - Defender for container registries should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the specified services are not - installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and 'Running'. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1176 - Baseline Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should enable double encryption for data at rest on the device\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support software-based double - encryption\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c349d81b-9985-44ae-a8da-ff98d108ede8\"},{\"properties\":{\"displayName\":\"Azure - Key Vault Managed HSM should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHsms/enableSoftDelete\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.KeyVault/managedHsms/enablePurgeProtection\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39ba22d-4428-4149-b981-70acb31fc383\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1389 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for Resource Manager should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Arm\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3d20c29-b36d-48fe-808b-99a87530ad99\"},{\"properties\":{\"displayName\":\"System - updates on virtual machine scale sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"},{\"properties\":{\"displayName\":\"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"},{\"properties\":{\"displayName\":\"[Preview]: - Container Registry should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1235 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1173 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Policy operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Policy Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that contain certificates expiring - within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate store path\",\"description\":\"The path to the certificate store - containing the certificates to check the expiration dates of. Default value - is 'Cert:' which is the root certificate store path, so all certificates on - the machine will be checked. Other example paths: 'Cert:\\\\LocalMachine', - 'Cert:\\\\LocalMachine\\\\TrustedPublisher', 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Expiration limit in days\",\"description\":\"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to include\",\"description\":\"A semicolon-separated - list of certificate thumbprints to check under the specified path. If a value - is not specified, all certificates under the certificate store path will be - checked. If a value is specified, no certificates other than those with the - thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to exclude\",\"description\":\"A semicolon-separated - list of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Include expired certificates\",\"description\":\"Must be 'true' or 'false'. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"},\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"},\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"},\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\":{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"},\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1670 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not set to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\",\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell execution - policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\":{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Execution Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1190 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter.\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Value\",\"description\":\"Value of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Name parameter.\"}}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"not\":{\"field\":\"[concat('tags[',parameters('tagName'), - ']')]\",\"equals\":\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\",\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\",\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\",\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\":\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/', - parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1619 - Information In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1353 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL server advanced data - security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - API App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1470 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Interactive Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"},{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"},{\"properties\":{\"displayName\":\"Resource - logs in Data Lake Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'User Rights Assignment'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotHub\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Network Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name '{storagePrefixParameter}{NSGLocation}' will be - automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - Account Prefix for Regional Storage Account\",\"description\":\"This prefix - will be combined with the network security group location to form the created - storage account name.\"}},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Group Name for Storage Account (must exist)\",\"description\":\"The resource - group that the storage account will be created in. This resource group must - already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\":\"[concat('policyStorage_', - uniqueString(parameters('location'), parameters('nsgName')))]\"},\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\",\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\",\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\",\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\":\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\",\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[concat(parameters('storageprefix'), - parameters('location'))]\",\"sku\":{\"name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\":\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\":null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\":\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\":\"[resourceId(parameters('rgName'), - 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'), parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"},\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"},{\"properties\":{\"displayName\":\"Storage - accounts should allow access from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Some - Microsoft services that interact with storage accounts operate from networks - that can't be granted access through network rules. To help this type of service - work as intended, allow the set of trusted Microsoft services to bypass the - network rules. These services will then use strong authentication to access - the storage account.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"},{\"properties\":{\"displayName\":\"App - Configuration should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your app configuration instances - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows Azure Monitor agent to enable Azure Monitor assignments - on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorWindowsAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorWindowsAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca817e41-e85a-4783-bc7f-dc532d36235e\"},{\"properties\":{\"displayName\":\"Managed - disks should be double encrypted with both platform-managed and customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskEncryptionSets\"},{\"field\":\"Microsoft.Compute/diskEncryptionSets/encryptionType\",\"notEquals\":\"EncryptionAtRestWithPlatformAndCustomerKeys\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca91455f-eace-4f96-be59-e6e2c35b4816\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Server' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1486 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1167 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1374 - Incident Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"},{\"properties\":{\"displayName\":\"[Preview]: - Sensitive data in your SQL databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Security - Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"},{\"properties\":{\"displayName\":\"Allowed - virtual machine size SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"},\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of size SKUs that can be specified for virtual machines.\",\"displayName\":\"Allowed - Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1443 - Media Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation only if the 'department' tag is set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1582 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1104 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"},{\"properties\":{\"displayName\":\"Deploy - export to Event Hub for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Event Hub configuration is created. If you enter a name for a resource group - that doesn't exist, it'll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Event Hub configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub details\",\"description\":\"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with 'Send' claim.\",\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\":\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Event Hub via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', - variables('SeperatedEventHubDetails')[1], '/', variables('SeperatedEventHubDetails')[2], - '/', variables('SeperatedEventHubDetails')[3], '/', variables('SeperatedEventHubDetails')[4], - '/', variables('SeperatedEventHubDetails')[5], '/', variables('SeperatedEventHubDetails')[6], - '/', variables('SeperatedEventHubDetails')[7], '/', variables('SeperatedEventHubDetails')[8], - '/', variables('SeperatedEventHubDetails')[9], '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\":\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"eventHubDetails\":{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Privilege Use'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1209 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"},{\"properties\":{\"displayName\":\"Resource - logs in Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1724 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"},{\"properties\":{\"displayName\":\"Container - registries should not allow unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn't have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1084 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against 'man in the middle' attacks by encrypting the data stream - between the server and your application. This configuration enforces that - SSL is always enabled for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1620 - Denial Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Function Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1721 - Spam Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"},{\"properties\":{\"displayName\":\"Virtual - machines' Guest Configuration extension should be deployed with system-assigned - managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines\",\"name\":\"[first(split(field('fullName'), - '/'))]\",\"existenceCondition\":{\"field\":\"identity.type\",\"contains\":\"SystemAssigned\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d26f7642-7545-4e18-9b75-8c9bbdee3a9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"domain\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"domain-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d389df0a-e0d7-4607-833c-75a6fdac2c2d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the DSC configuration is - not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"},{\"properties\":{\"displayName\":\"Long-term - geo-redundant backup should be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\",\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1249 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1562 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"},{\"properties\":{\"displayName\":\"Virtual - machines should be connected to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual machine connected to a virtual network that is not - approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network Id\",\"description\":\"Resource Id of the virtual network. Example: - /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\",\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1383 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"},{\"properties\":{\"displayName\":\"Managed - disks should use a specific set of disk encryption sets for the customer-managed - key encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"allowedEncryptionSets\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - disk encryption set\",\"description\":\"The list of allowed disk encryption - sets for managed disks.\",\"strongType\":\"Microsoft.Compute/diskEncryptionSets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d461a302-a187-421a-89ac-84acdb4edc04\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1112 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs for Application Insights should be linked to a Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that's enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1585 - Security Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"},{\"properties\":{\"displayName\":\"Log - Analytics agent health issues should be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1150 - Security Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"},{\"properties\":{\"displayName\":\"Event - Hub should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1549 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Client' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1473 - Emergency Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1529 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn't exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d82101f3-f3ce-4fc5-8708-4c09f4009546\"},{\"properties\":{\"displayName\":\"Configure - Container registries with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"registry\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d85c6833-7d33-4cf5-a915-aaa2de84405f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1488 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption in transit to encrypt communication - between Azure HDInsight cluster nodes\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9da03a1-f3c3-412a-9709-947156872263\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not store passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1516 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your CosmosDB resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Batch Accounts in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"},{\"properties\":{\"displayName\":\"Logic - Apps should be deployed into Integration Service Environment\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"field\":\"Microsoft.Logic/workflows/integrationServiceEnvironment\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc595cb1-1cde-45f6-8faf-f88874e1c0e1\"},{\"properties\":{\"displayName\":\"Web - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dcbc65aa-59f3-4239-8978-3bb869d82604\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1439 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Policy Change'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1678 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1391 - Information Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1146 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Settings - Account Policies'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Recovery console'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1689 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1528 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Recovery Services vaults should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"count\":{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState\",\"equals\":\"Succeeded\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deeddb44-9f94-4903-9fa0-081d524406e3\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df39c015-56a4-45de-b4a3-efe77bed320d\"},{\"properties\":{\"displayName\":\"MariaDB - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - resource id of the private DNS zone\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"redisCache\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-redis-cache-windows-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e016b22b-e0eb-436d-8fd7-160c4eaed6e2\"},{\"properties\":{\"displayName\":\"Auditing - on Synapse workspace should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e04e5000-cd89-451d-bb21-a14d24ff9c73\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'User - Rights Assignment' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access - this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"Allow - log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":\"Deny - access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":\"Manage - auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":\"Back - up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\":\"Change - the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\":\"Change - the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\":\"Create - a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":\"Deny - log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":\"Deny - log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\":\"Deny - log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":\"Force - shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":\"Restore - files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\":\"Shut - down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":\"Take - ownership of files or other objects;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on locally\",\"description\":\"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the system time\",\"description\":\"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the time zone\",\"description\":\"Specifies which - users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may create a token object\",\"description\":\"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied local logon\",\"description\":\"Specifies which - users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"User - and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may shut down the system\",\"description\":\"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"},{\"properties\":{\"displayName\":\"Cosmos - DB should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - MSS (Legacy)' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Execution Policy\",\"description\":\"The expected PowerShell execution - policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"},\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1686 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1047 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled in virtual machine scale sets for listed virtual machine - images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1161 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1387 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"},{\"properties\":{\"displayName\":\"Azure - VPN gateways should not use 'basic' SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\":\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\",\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"},{\"properties\":{\"displayName\":\"RDP - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows RDP access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Shutdown'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Settings - - Account Policies'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enforce password history\",\"description\":\"Specifies limits on password - reuse - how many times a new password must be created for a user account before - the password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Maximum password age\",\"description\":\"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password age\",\"description\":\"Specifies the minimum number of days - that must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password length\",\"description\":\"Specifies the minimum number of - characters that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Password must meet complexity requirements\",\"description\":\"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\":{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\":{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\":{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\":{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\":{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1451 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - User Account Control'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode\",\"description\":\"Specifies the behavior of the elevation prompt for - administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1381 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1421 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1023 - Account Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"},{\"properties\":{\"displayName\":\"Allowed - locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\":\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1499 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Accounts'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Accounts: Guest account status\",\"description\":\"Specifies whether the local - Guest account is disabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"},\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that do not have the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the specified services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the services that should be installed and 'Running'. e.g. - 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"},{\"properties\":{\"displayName\":\"Subnets - should be associated with a Network Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1567 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1311 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL server Advanced - Data Security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"},{\"properties\":{\"displayName\":\"Allowed - locations for resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that resource groups can be created in.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1273 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - 'man in the middle' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in container security configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Storage in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"},{\"properties\":{\"displayName\":\"Container - registries should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network.By mapping private endpoints to your container registries - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1723 - Information Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"},{\"properties\":{\"displayName\":\"Configure - Container registries to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint's associated VNET.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"registry\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"containerRegistry-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1200 - Security Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1487 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be created with infrastructure-encryption enabled - (double encryption)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"},{\"properties\":{\"displayName\":\"Key - Vault should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that allow remote connections from accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1422 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1542 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"},{\"properties\":{\"displayName\":\"Function - apps should have 'Client Certificates (Incoming client certificates)' enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1321 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"},{\"properties\":{\"displayName\":\"Log - checkpoints should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"},{\"properties\":{\"displayName\":\"Log - connections should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"},{\"properties\":{\"displayName\":\"Disconnections - should be logged for PostgreSQL database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"},{\"properties\":{\"displayName\":\"Log - duration should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"},{\"properties\":{\"displayName\":\"Deprecated - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts with owner permissions should be removed from your subscription. - \ Deprecated accounts are accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\":{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"},{\"properties\":{\"displayName\":\"Double - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that allow remote connections from - accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Control Panel'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1622 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed66d4f5-8220-45dc-ab4a-20d1749c74e6\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Key Vaults in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Stream Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"amlworkspace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"amlworkspace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee40564d-486e-4f68-a5ca-7a621edae0fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1189 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee980b6d-0eca-4501-8d54-f6290fd512c3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Accounts' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: - Guest account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Accounts: - Guest account status\",\"description\":\"Specifies whether the local Guest - account is disabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1089 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1314 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1128 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints to Azure SignalR Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"signalr\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef45854f-b33f-49a3-8041-9057e915d88f\"},{\"properties\":{\"displayName\":\"API - Management services should use a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API - Management SKU Names\",\"description\":\"List of API Management SKUs against - which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Destination Location\",\"description\":\"The location the Event Hub that - will get diagnostic data resides in. Only source Event Hubs in this location - will be linked to this destination Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1472 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1012 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1358 - Incident Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1531 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0fcf93c-c063-4071-9668-c47474bd3564\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - name contains\",\"description\":\"String included in the required alert name. - For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Alert is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Alert is created - or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('alertSeverities'),if(equals(parameters('alertName'), - ''), array('3.'), array(parameters('alertName'))))]\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"in\":\"[union(array('Severity'),if(equals(parameters('alertName'), - ''), array('Version'), array('AlertDisplayName')))]\"},{\"count\":{\"value\":\"[parameters('alertSeverities')]\",\"name\":\"alertSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"Severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('alertSeverity')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('alertSeverities'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert - is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'), - ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(parameters('alertName'), - ''), '3.', parameters('alertName'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'), - variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1028 - Information Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"},{\"properties\":{\"displayName\":\"Virtual - networks should use specified virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network gateway Id\",\"description\":\"Resource Id of the virtual network - gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\",\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), - '/')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - MSS (Legacy)'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Settings - Account Policies' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\":\"Enforce - password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum password - age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\",\"MinimumPasswordLength\":\"Minimum - password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\":\"Password - must meet complexity requirements;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce - password history\",\"description\":\"Specifies limits on password reuse - - how many times a new password must be created for a user account before the - password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Maximum - password age\",\"description\":\"Specifies the maximum number of days that - may elapse before a user account password must be changed. The format of the - value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password age\",\"description\":\"Specifies the minimum number of days that - must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password length\",\"description\":\"Specifies the minimum number of characters - that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password - must meet complexity requirements\",\"description\":\"Specifies whether a - user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1457 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"},{\"properties\":{\"displayName\":\"Disk - access resources should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to diskAccesses, data leakage - risks are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f39f5f49-4abf-44de-8c70-0756997bfb51\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - all of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not contain the specified certificates - in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"},{\"properties\":{\"displayName\":\"Audit - Log Analytics workspace for VM - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - VMs as non-compliant if they aren't logging to the Log Analytics workspace - specified in the policy/initiative assignment.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics Workspace Id that VMs should be configured for\",\"description\":\"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"},{\"properties\":{\"displayName\":\"Authorization - rules on the Event Hub instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1495 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have not restarted within the - specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Number of days\",\"description\":\"The number of days without restart until - the machine is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"},\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"},{\"properties\":{\"displayName\":\"Disk - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b53539-8df9-40e4-86c6-6b607703bd4e\"},{\"properties\":{\"displayName\":\"Configure - SQL servers to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, SQL - servers should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a SQL Server is created that will be shared - by all servers in that region). Important - for proper operation of Auditing - do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('sqlaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-', - uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure SQL servers to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1469 - Power Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1618 - Security Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths\",\"description\":\"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be a set mode for Application Gateway and - Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Mode Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"},{\"properties\":{\"displayName\":\"Internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1214 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Recovery console' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1540 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1449 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use system-assigned managed identity - authentication when it is supported\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Using - system-assigned managed identity when communicating with data stores via linked - services avoids the use of less secured credentials such as passwords or connection - strings.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"AzureSqlDatabase\",\"AzureSqlMI\",\"AzureSqlDW\",\"AzureBlobFS\",\"AdlsGen2CosmosStructuredStream\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureBlobStorage\",\"AzureDatabricks\"]},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"User - ID=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f78ccdb4-7bf4-4106-8647-270491d2978a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/encryption.cmk.key.name\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d52b2d-e161-4dfa-a82b-55e564167385\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"},{\"properties\":{\"displayName\":\"External - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1345 - Cryptographic Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Other System Events\",\"description\":\"Specifies whether audit events - are generated for Windows Firewall Service and Windows Firewall driver start - and stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"},\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"},{\"properties\":{\"displayName\":\"Resource - logs in Service Bus should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8f774be-6aee-492a-9e29-486ef81f3a68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1535 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Stream Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"},{\"properties\":{\"displayName\":\"Saved-queries - in Azure Monitor should be saved in customer storage account for logs encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1435 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Linux virtual machines on which the Linux Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1086 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1222 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"},{\"properties\":{\"displayName\":\"Kubernetes - Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\",\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"},{\"properties\":{\"displayName\":\"Storage - account containing the container with activity logs must be encrypted with - BYOK\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"},{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'), - subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\":\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"searchService\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"searchService-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbc14a67-53e4-4932-abcc-2049c6706009\"},{\"properties\":{\"displayName\":\"Virtual - machines and virtual machine scale sets should have encryption at host enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc4d8e41-e223-45ea-9bf5-eada37891d87\"},{\"properties\":{\"displayName\":\"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified that some of your subnets aren't protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable All Internet traffic should be - routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\",\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\",\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\",\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\",\"like\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/', - first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"}},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based - \ Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"},{\"properties\":{\"displayName\":\"[Preview]: - Linux machines should meet requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.1.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureLinuxBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureLinuxBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Client'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1318 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1543 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1611 - Developer-Provided Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1613 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use a managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe3fd216-4f83-4fc1-8984-2bbec80a3418\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL databases should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers\",\"Microsoft.Sql/managedinstances\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"},{\"properties\":{\"displayName\":\"Deploy - export to Log Analytics workspace for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Log Analytics workspace configuration is created. If you enter a name for - a resource group that doesn't exist, it'll be created in the subscription. - Note that each resource group can only have one export to Log Analytics workspace - configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Log Analytics workspace configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The Log Analytics workspace of where - the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"workspaceResourceId\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Log Analytics workspace via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"workspaceResourceId\":{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1158 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"},{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"},{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"},{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"},{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"},{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"},{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"},{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"},{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"},{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"},{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"},{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"},{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"},{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"},{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"},{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"},{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"},{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"},{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"},{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"},{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"},{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"},{\"properties\":{\"displayName\":\"test_policyusm7pczwi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-04T22:57:00.9569478Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydntotaowa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydntotaowa\"},{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"},{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"},{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"},{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"},{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"},{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"},{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"},{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"},{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"},{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"},{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"},{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"},{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"},{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"},{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"},{\"properties\":{\"displayName\":\"test_policyunbs5wtft\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-08T23:45:16.8769261Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyj2uyuq36z\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyj2uyuq36z\"},{\"properties\":{\"displayName\":\"test_policy2wlyo2jcx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T08:52:29.0384373Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T08:52:29.6504961Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjatom4uiu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjatom4uiu\"},{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"},{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"},{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"},{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"},{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"},{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"},{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"},{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"},{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"},{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"},{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"},{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"},{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"},{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"},{\"properties\":{\"displayName\":\"test_policy4ljtwhrb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T09:04:36.2666163Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T09:04:36.9195862Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policynphpv4hoz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policynphpv4hoz\"},{\"properties\":{\"displayName\":\"test_policywr7fgwb3h_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-03-25T07:14:53.2365929Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-03-25T07:14:54.8167247Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyoawd757s5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyoawd757s5\"},{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"},{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"},{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"},{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"},{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"},{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"},{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"},{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"},{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"},{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"},{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"},{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"},{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"},{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"},{\"properties\":{\"displayName\":\"test_policybflkk7cf2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:48:53.5703427Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:48:54.2065695Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysnxqzmcgi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysnxqzmcgi\"},{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"},{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"},{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"},{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"},{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"},{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"},{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"},{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"},{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"},{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"},{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"},{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"},{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"},{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"},{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"},{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"},{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"},{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"},{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"},{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"},{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\",\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')), - 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')), - 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"},{\"properties\":{\"displayName\":\"clitestvgcwukwfkdrnt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:08:49.3743392Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitest7syw4jlpt6vnzk5vvmal7tz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitest7syw4jlpt6vnzk5vvmal7tz\"},{\"properties\":{\"displayName\":\"clitestmwd5emng54d7h\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:29.7005931Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesta744fed3lbeyk3atxfl22hh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesta744fed3lbeyk3atxfl22hh\"},{\"properties\":{\"displayName\":\"clitestasb6ki5xu3s5n\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:32.4697746Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestaccirnpsjl4xcry6egrdxcc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestaccirnpsjl4xcry6egrdxcc\"},{\"properties\":{\"displayName\":\"clitestyfehqscfzl66v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:18:08.1664207Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestatcrgfr7h3bzxn2n2l643lx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestatcrgfr7h3bzxn2n2l643lx\"},{\"properties\":{\"displayName\":\"clitest546cgekm2cmto\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T08:58:45.8641083Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestiympxjk7m7b7zm5ife6siwj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestiympxjk7m7b7zm5ife6siwj\"},{\"properties\":{\"displayName\":\"clitestx3chgt5ixyfdg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T06:59:50.0631487Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestkhjp2fkvvvmtlfh54o7b7db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestkhjp2fkvvvmtlfh54o7b7db\"},{\"properties\":{\"displayName\":\"clitestcv4zaidsjskxz\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:01.5383822Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestlgubbwxnbxedc6oqemfvyul\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestlgubbwxnbxedc6oqemfvyul\"},{\"properties\":{\"displayName\":\"clitest4t542r65t7vdo\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:21:45.5602849Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestm2i27iey5uu3k34mmckjoc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestm2i27iey5uu3k34mmckjoc6\"},{\"properties\":{\"displayName\":\"clitest4fmzwsy5ekwaj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T09:02:35.0596019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestr3x24dreg2li4idugas3fi3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestr3x24dreg2li4idugas3fi3\"},{\"properties\":{\"displayName\":\"clitestsoroll7id56c6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:09:20.8262259Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestxxdb7o7f2qrwygu4p4pupsu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestxxdb7o7f2qrwygu4p4pupsu\"},{\"properties\":{\"displayName\":\"clitestlcamaprqvpmyp\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:29.9142438Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesty3kzkcsdlkgkwcocvpjwcyr\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesty3kzkcsdlkgkwcocvpjwcyr\"},{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\",\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\",\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"Deny - cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\",\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"},{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"},{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"},{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"},{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"},{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"},{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"},{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"},{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"},{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-25T23:50:17.3899118Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:30:32.2645779Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"westus2\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-bicep-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-bicep-test\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:26:03.8364554Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"},{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"},{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"},{\"properties\":{\"displayName\":\"Sumit- - NSG X on every subnet\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"This - policy enforces a specific NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '2900424' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:35:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_identity.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_identity.yaml deleted file mode 100644 index 577257526ad..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_identity.yaml +++ /dev/null @@ -1,58 +0,0 @@ -interactions: -- request: - body: '{"location": "westus", "tags": {"date": "2019-02-27T23:27:12Z", "product": - "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policy_identity000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy_identity000001","name":"cli_test_policy_identity000001","location":"westus","tags":{"date":"2019-02-27T23:27:12Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:27:13 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policy_identity000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Wed, 27 Feb 2019 23:27:15 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUE9MSUNZOjVGSURFTlRJVFlWTTNDM05SVUoyWExRWExJUHxDRDVENkI4RTk3OUQzMTMyLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml deleted file mode 100644 index f69edd6a329..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policy_management_group.yaml +++ /dev/null @@ -1,1584 +0,0 @@ -interactions: -- request: - body: '{"tags": {"product": "azurecli", "cause": "automation", "date": "2019-03-14T21:41:27Z"}, - "location": "westus"}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policy_management_group000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policy_management_group000001","name":"cli_test_policy_management_group000001","location":"westus","tags":{"product":"azurecli","cause":"automation","date":"2019-03-14T21:41:27Z"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:30 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:32 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:42 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"details": {"parent": {}}}, "name": "cli-test-mgmt-group000002"}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - Cache-Control: [no-cache] - CommandName: [account management-group create] - Connection: [keep-alive] - Content-Length: ['85'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"NotStarted"}'} - headers: - cache-control: [no-cache] - content-length: ['208'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:44 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview'] - pragma: [no-cache] - request-id: [80ab0f43-f1ca-487c-8f35-971ef2211449] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-tenant-writes: ['1199'] - x-powered-by: [ASP.NET] - status: {code: 202, message: Accepted} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"Succeeded","properties":{"tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"cli-test-mgmt-group000002","details":{"version":1,"updatedTime":"2019-03-14T21:41:49.0610624Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","parent":{"id":"/providers/Microsoft.Management/managementGroups/72f988bf-86f1-41af-91ab-2d7cd011db47","name":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"72f988bf-86f1-41af-91ab-2d7cd011db47"}}}}'} - headers: - cache-control: [no-cache] - content-length: ['642'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:54 GMT'] - expires: ['-1'] - pragma: [no-cache] - request-id: [4317a765-af1a-4860-9312-0aa96bdd469f] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-powered-by: [ASP.NET] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"mode": "Indexed", "displayName": "test_policy000004", - "parameters": {"allowedLocations": {"metadata": {"displayName": "Allowed locations", - "strongType": "location", "description": "The list of locations that can be - specified when deploying resources"}, "type": "array"}}, "policyRule": {"if": - {"not": {"field": "location", "in": "[parameters(\''allowedLocations\'')]"}}, - "then": {"effect": "deny"}}, "description": "desc_for_test_policy_123"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition create] - Connection: [keep-alive] - Content-Length: ['459'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --rules --params --display-name --description --mode --management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000004","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-03-14T21:41:56.5167492Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}'} - headers: - cache-control: [no-cache] - content-length: ['828'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:55 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition update] - Connection: [keep-alive] - ParameterSetName: [-n --description --display-name --management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000004","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-03-14T21:41:56.5167492Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}'} - headers: - cache-control: [no-cache] - content-length: ['828'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:56 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"metadata": {"createdOn": "2019-03-14T21:41:56.5167492Z", - "updatedBy": null, "createdBy": "8427ce23-08f2-4510-b6e2-99644db7f94e", "updatedOn": - null}, "displayName": "test_policy000004_new", "parameters": {"allowedLocations": - {"metadata": {"displayName": "Allowed locations", "strongType": "location", - "description": "The list of locations that can be specified when deploying resources"}, - "type": "Array"}}, "policyRule": {"if": {"not": {"field": "location", "in": - "[parameters(\''allowedLocations\'')]"}}, "then": {"effect": "deny"}}, "description": - "desc_for_test_policy_123_new"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition update] - Connection: [keep-alive] - Content-Length: ['598'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --description --display-name --management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000004_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdOn":"2019-03-14T21:41:56.5167492Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","updatedOn":"2019-03-14T21:41:57.568065Z"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}'} - headers: - cache-control: [no-cache] - content-length: ['895'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:57 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition list] - Connection: [keep-alive] - ParameterSetName: [--management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: {string: '{"value":[{"properties":{"displayName":"Audit virtual machines - without disaster recovery configured","policyType":"BuiltIn","mode":"All","description":"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Resources/links","existenceCondition":{"field":"name","like":"ASR-Protect-*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56","type":"Microsoft.Authorization/policyDefinitions","name":"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56"},{"properties":{"displayName":"[Preview]: - Audit Web Sockets state for a Function App","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd","type":"Microsoft.Authorization/policyDefinitions","name":"001802d1-4969-4c82-a700-c29c6c6f9bbd"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics Agent for Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics Agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.","metadata":{"category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.7"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77","type":"Microsoft.Authorization/policyDefinitions","name":"053d3325-282c-4e5c-b944-24faffd30d77"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Azure Data Lake Store","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","type":"Microsoft.Authorization/policyDefinitions","name":"057ef27e-665e-4328-8ea3-04b3122bd9fb"},{"properties":{"displayName":"Audit - SQL DB Level Audit Setting","policyType":"BuiltIn","mode":"All","description":"Audit - DB level audit setting for SQL databases","metadata":{"category":"SQL","deprecated":true},"parameters":{"setting":{"type":"String","metadata":{"displayName":"Audit - Setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/auditingSettings","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"Audit - VMs that do not use managed disks","policyType":"BuiltIn","mode":"All","description":"This - policy audits VMs that do not use managed disks","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osDisk.uri","exists":"True"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/VirtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers","exists":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl","exists":"True"}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a4d"},{"properties":{"displayName":"[Preview]: Audit - CORS resource access restrictions for a Function App","policyType":"BuiltIn","mode":"All","description":"Cross - origin Resource Sharing (CORS) should not allow all domains to access your - Function app. Allow only required domains to interact with your Function app.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RestrictCORSAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","type":"Microsoft.Authorization/policyDefinitions","name":"0820b7b9-23aa-4725-a1ce-ae4558f718e5"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics Agent for Windows VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics Agent for Windows VMs if the VM Image (OS) is in the list defined - and the agent is not installed. The list of OS images will be updated over - time as support is updated.","metadata":{"category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - values: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c","type":"Microsoft.Authorization/policyDefinitions","name":"0868462e-646c-4fe3-9ced-a733534b6a2c"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c","type":"Microsoft.Authorization/policyDefinitions","name":"08b17839-76c6-4015-90e0-33d9d54d219c"},{"properties":{"displayName":"[Preview]: - Audit minimum number of owners for subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DesignateMoreThanOneOwner","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","type":"Microsoft.Authorization/policyDefinitions","name":"09024ccc-0c5f-475e-9457-b7c0d9ed487b"},{"properties":{"displayName":"[Preview]: - Monitor unencrypted VM Disks in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"VMs - without an enabled disk encryption will be monitored by Azure Security Center - as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","type":"Microsoft.Authorization/policyDefinitions","name":"0961003e-5a0a-4549-abde-af6a37f2724d"},{"properties":{"displayName":"Audit - resource location matches resource group location","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that the resource location matches its resource group location","metadata":{"category":"General"},"parameters":{},"policyRule":{"if":{"field":"location","notIn":["[resourcegroup().location]","global"]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a","type":"Microsoft.Authorization/policyDefinitions","name":"0a914e76-4921-4c19-b460-a2d36003525a"},{"properties":{"displayName":"[Preview]: - Audit remote debugging state for a Function App","policyType":"BuiltIn","mode":"All","description":"Remote - debugging requires inbound ports to be opened on an function app. Remote - debugging should be turned off.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableRemoteDebugging","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","type":"Microsoft.Authorization/policyDefinitions","name":"0e60b895-3786-45da-8377-9c6b4b6ac5f9"},{"properties":{"displayName":"[Preview]: - Audit Dependency Agent Deployment - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if the VM Image (OS) is not in the list defined and the - agent is not installed. The list of OS images will be updated over time as - support is updated.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07","type":"Microsoft.Authorization/policyDefinitions","name":"11ac78e3-31bc-4f0c-8434-37ab963cea07"},{"properties":{"displayName":"Deploy - VM extension to audit that an application is installed inside Windows VMs","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the required - content to audit that an application is installed inside Windows virtual machines. - This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"installedApplication":{"type":"String","metadata":{"displayName":"Application - name (supports wildcard)","description":"Application name. Example: ''Microsoft - SQL Server 2014 (64-bit)'' or ''Microsoft SQL Server 2014*'' to match any - application starting with ''Microsoft SQL Server 2014''."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"WhitelistedApplication"},"installedApplication":{"value":"[parameters(''installedApplication'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"installedApplication":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]bwhitelistedapp;Name","value":"[parameters(''installedApplication'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6","type":"Microsoft.Authorization/policyDefinitions","name":"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6"},{"properties":{"displayName":"Deploy - VM extension to audit that the Administrators group inside Windows VMs excludes - the specified members","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the content - required to audit that the Administrators group inside Windows virtual machines - excludes the specified members. This policy should only be used along with - its corresponding audit policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MembersToExclude":{"type":"String","metadata":{"displayName":"Members - to exclude","description":"A semicolon-separated list of members that should - be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"AdministratorsGroupMembersToExclude"},"MembersToExclude":{"value":"[parameters(''MembersToExclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"MembersToExclude":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToExclude","value":"[parameters(''MembersToExclude'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba","type":"Microsoft.Authorization/policyDefinitions","name":"144f1397-32f9-4598-8c88-118decc3ccba"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs have a minimum password age - of 1 day","policyType":"BuiltIn","mode":"Indexed","description":"Include this - rule to deploy the requirements to audit that Windows machines have the minimum - password age setting set to 1 day. This security setting determines the period - of time (in days) that a password must be used before the user can change - it. This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"MinimumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df","type":"Microsoft.Authorization/policyDefinitions","name":"16390df4-2f73-4b42-af13-c801066763df"},{"properties":{"displayName":"Audit - transparent data encryption status","policyType":"BuiltIn","mode":"Indexed","description":"Audit - transparent data encryption status for SQL databases","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"enabled"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"17k78e20-9358-41c9-923c-fb736d382a12"},{"properties":{"displayName":"[Preview]: - Deploy Dependency Agent for Windows VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency Agent for Windows VMs if the VM Image (OS) is in the list defined - and the agent is not installed. The list of OS images will be updated over - time as support is updated.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04","type":"Microsoft.Authorization/policyDefinitions","name":"1c210e94-a481-4beb-95fa-1571b434fb04"},{"properties":{"displayName":"Audit - use of classic virtual machines","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager v2 for your virtual machines to provide security - enhancements such as: stronger access control (RBAC), better auditing, ARM-based - deployment and governance, access to managed identities, access to key vault - for secrets, Azure AD-based authentication and support for tags and resource - groups for easier security management","metadata":{"category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.classicCompute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","type":"Microsoft.Authorization/policyDefinitions","name":"1d84d5fb-01f6-4d12-ba4f-4a26081d403d"},{"properties":{"displayName":"[Preview]: - Audit API Applications that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb","type":"Microsoft.Authorization/policyDefinitions","name":"1de7b11d-1870-41a5-8181-507e7c663cfb"},{"properties":{"displayName":"Enforce - tag and its value","policyType":"BuiltIn","mode":"Indexed","description":"Enforces - a required tag and its value. Does not apply to resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"not":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","equals":"[parameters(''tagValue'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","type":"Microsoft.Authorization/policyDefinitions","name":"1e30110a-5ceb-460c-a204-c1c3969c6d62"},{"properties":{"displayName":"Audit - provisioning of an Azure Active Directory administrator for SQL server","policyType":"BuiltIn","mode":"Indexed","description":"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/administrators"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","type":"Microsoft.Authorization/policyDefinitions","name":"1f314764-cb73-4fc9-b863-8eca98ac36e9"},{"properties":{"displayName":"[Preview]: - Monitor unprotected web application in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Web - applications without a Web Application Firewall protection will be monitored - by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Network/publicIPAddresses","Microsoft.ClassicCompute/domainNames","Microsoft.Web/hostingEnvironments"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6","type":"Microsoft.Authorization/policyDefinitions","name":"201ea587-7c90-41c3-910f-c280ae01cfd6"},{"properties":{"displayName":"[Preview]: - Audit API Apps that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac","type":"Microsoft.Authorization/policyDefinitions","name":"224da9fe-0d38-4e79-adb3-0a6e2af942ac"},{"properties":{"displayName":"Audit - enabling of only secure connections to your Redis Cache","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of only connections via SSL to Redis Cache. Use of secure connections - ensures authentication between the server and the service and protects data - in transit from network layer attacks such as man-in-the-middle, eavesdropping, - and session-hijacking","metadata":{"category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/enableNonSslPort","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","type":"Microsoft.Authorization/policyDefinitions","name":"22bee202-a82f-4305-9a2a-6d7f44d4dedb"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs restrict the minimum password - length to 14 characters","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Windows machines have the - minimum password length setting set to at least 14 characters. This security - setting determines the least number of characters that a password for a user - account may contain. This policy should only be used along with its corresponding - audit policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"MinimumPasswordLength"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca","type":"Microsoft.Authorization/policyDefinitions","name":"23020aa6-1135-4be2-bae2-149982b06eca"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs have a maximum password age of 70 days","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the maximum password age setting - set to at least 70 days. This security setting determines the period of time - (in days) that a password can be used before the system requires the user - to change it. This policy should only be used along with its corresponding - deploy policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"MaximumPasswordAge"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc","type":"Microsoft.Authorization/policyDefinitions","name":"24dde96d-f0b1-425e-884f-4a1421e2dcdc"},{"properties":{"displayName":"[Preview]: - Audit the endpoint protection solution on virtual machine scale sets in Azure - Security Center","policyType":"BuiltIn","mode":"Indexed","description":"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EndpointProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","type":"Microsoft.Authorization/policyDefinitions","name":"26a828e1-e88f-464e-bbb3-c134a282b9de"},{"properties":{"displayName":"Audit - configuration of metric alert rules on Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - configuration of metric alert rules on Batch account to enable the required - metric","metadata":{"category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"metricName":{"type":"String","metadata":{"displayName":"Metric - name","description":"The metric name that an alert rule must be enabled on"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/alertRules","existenceScope":"Subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/alertRules/isEnabled","equals":"true"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.metricName","equals":"[parameters(''metricName'')]"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.resourceUri","equals":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourcegroups/'', resourceGroup().name, - ''/providers/Microsoft.Batch/batchAccounts/'', field(''name''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7","type":"Microsoft.Authorization/policyDefinitions","name":"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7"},{"properties":{"displayName":"Deploy - default Microsoft IaaSAntimalware extension for Windows Server","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuraion - when a VM is not configured with the antimalware extension.","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"ExclusionsPaths":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file paths or locations to exclude from scanning"}},"ExclusionsExtensions":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file extensions to exclude from scanning"}},"ExclusionsProcesses":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of process names to exclude from scanning"}},"RealtimeProtectionEnabled":{"type":"string","defaultValue":"true","metadata":{"description":"Indicates - whether or not real time protection is enabled (default is true)"}},"ScheduledScanSettingsIsEnabled":{"type":"string","defaultValue":"false","metadata":{"description":"Indicates - whether or not custom scheduled scan settings are enabled (default is false)"}},"ScheduledScanSettingsScanType":{"type":"string","defaultValue":"Quick","metadata":{"description":"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)"}},"ScheduledScanSettingsDay":{"type":"string","defaultValue":"7","metadata":{"description":"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)"}},"ScheduledScanSettingsTime":{"type":"string","defaultValue":"120","metadata":{"description":"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM."}}},"resources":[{"name":"[concat(parameters(''vmName''),''/IaaSAntimalware'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.Azure.Security","type":"IaaSAntimalware","typeHandlerVersion":"1.3","autoUpgradeMinorVersion":true,"settings":{"AntimalwareEnabled":true,"RealtimeProtectionEnabled":"[parameters(''RealtimeProtectionEnabled'')]","ScheduledScanSettings":{"isEnabled":"[parameters(''ScheduledScanSettingsIsEnabled'')]","day":"[parameters(''ScheduledScanSettingsDay'')]","time":"[parameters(''ScheduledScanSettingsTime'')]","scanType":"[parameters(''ScheduledScanSettingsScanType'')]"},"Exclusions":{"Extensions":"[parameters(''ExclusionsExtensions'')]","Paths":"[parameters(''ExclusionsPaths'')]","Processes":"[parameters(''ExclusionsProcesses'')]"}}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"RealtimeProtectionEnabled":{"value":"true"},"ScheduledScanSettingsIsEnabled":{"value":"true"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc","type":"Microsoft.Authorization/policyDefinitions","name":"2835b622-407b-4114-9198-6f7064cbe0dc"},{"properties":{"displayName":"Apply - tag and its default value","policyType":"BuiltIn","mode":"Indexed","description":"Applies - a required tag and its default value if it is not specified by the user. Does - not apply to resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498","type":"Microsoft.Authorization/policyDefinitions","name":"2a0e14a6-b0a6-4fab-991a-187a4f81c498"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs store passwords using reversible encryption","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the setting to store passwords - using reversible encryption enabled. This security setting determines that - the operating system stores passwords using reversible encryption. This policy - should only be used along with its corresponding deploy policy in an initiative/policy - set. For more information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"StorePasswordsUsingReversibleEncryption"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6","type":"Microsoft.Authorization/policyDefinitions","name":"2d60d3b7-aa10-454c-88a8-de39d99d17c6"},{"properties":{"displayName":"[Preview]: - Audit that Linux VMs do not allow remote connections from accounts without - passwords","policyType":"BuiltIn","mode":"All","description":"This policy - will audit that Linux machines do not allow remote connections from accounts - without passwords. This security setting verifies remote connections from - accounts with empty passwords is disabled. This policy should only be used - along with its corresponding deploy policy in an initiative/policy set. For - more information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"PasswordPolicy_msid110"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83","type":"Microsoft.Authorization/policyDefinitions","name":"2d67222d-05fd-4526-a171-2ee132ad9e83"},{"properties":{"displayName":"[Preview]: - Audit HTTPS only access for a Web Application","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnforceHttps","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0","type":"Microsoft.Authorization/policyDefinitions","name":"2fde8a98-6892-426a-83ba-050e640c0ce0"},{"properties":{"displayName":"[Preview]: - Audit Log Analytics Agent Deployment - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if the VM Image (OS) is not in the list defined and the - agent is not installed. The list of OS images will be updated over time as - support is updated.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50","type":"Microsoft.Authorization/policyDefinitions","name":"32133ab0-ee4b-4b44-98d6-042180979d50"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Linux VMs do not have accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Linux machines do not have - accounts without passwords. This security setting verifies there are no accounts - without passwords. This policy should only be used along with its corresponding - audit policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","AzureDatabricks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"RHEL"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"osa"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"PasswordPolicy_msid232"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe","type":"Microsoft.Authorization/policyDefinitions","name":"3470477a-b35a-49db-aca5-1073d04524fe"},{"properties":{"displayName":"Audit - unrestricted network access to storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - unrestricted network access in your storage account firewall settings. Instead, - configure network rules so only applications from allowed networks can access - the storage account. To allow connections from specific internet or on-premise - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","equals":"Allow"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","type":"Microsoft.Authorization/policyDefinitions","name":"34c877ad-507e-4c82-993e-3452a6e0ad3c"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Logic Apps","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Logic Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","type":"Microsoft.Authorization/policyDefinitions","name":"34f95f76-5386-4de7-b824-0d8478470c9d"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs have a maximum password age - of 70 days","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Windows machines have the - maximum password age setting set to at least 70 days. This security setting - determines the period of time (in days) that a password can be used before - the system requires the user to change it. This policy should only be used - along with its corresponding audit policy in an initiative/policy set. For - more information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"MaximumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934","type":"Microsoft.Authorization/policyDefinitions","name":"356a906e-05e5-4625-8729-90771e0ee934"},{"properties":{"displayName":"[Preview]: Audit - CORS resource access restrictions for an API App","policyType":"BuiltIn","mode":"All","description":"Cross - origin Resource Sharing (CORS) should not allow all domains to access your - API app. Allow only required domains to interact with your API app.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RestrictCORSAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","type":"Microsoft.Authorization/policyDefinitions","name":"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac"},{"properties":{"displayName":"Audit - enablement of encryption of Automation account variables","policyType":"BuiltIn","mode":"All","description":"It - is important to enable encryption of Automation account variable assets when - storing sensitive data","metadata":{"category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts/variables"},{"field":"Microsoft.Automation/automationAccounts/variables/isEncrypted","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","type":"Microsoft.Authorization/policyDefinitions","name":"3657f5a0-770e-44a3-b44e-9431ba1e9735"},{"properties":{"displayName":"Deploy - Threat Detection on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Threat Detection is enabled on SQL Servers.","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"}},"variables":{},"resources":[{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}}]},"parameters":{"serverName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5","type":"Microsoft.Authorization/policyDefinitions","name":"36d49e87-48c4-4f2e-beed-ba4ed02b71f5"},{"properties":{"displayName":"Audit - use of classic storage accounts","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager v2 for your storage accounts to provide security - enhancements such as: stronger access control (RBAC), better auditing, Azure - Resource Manager based deployment and governance, access to managed identities, - access to key vault for secrets, Azure AD-based authentication and support - for tags and resource groups for easier security management","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.classicStorage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","type":"Microsoft.Authorization/policyDefinitions","name":"37e0d2fe-28a5-43d6-a273-67d37d1f5606"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in IoT Hubs","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Internet of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Devices/IotHubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","type":"Microsoft.Authorization/policyDefinitions","name":"383856f8-de7f-44a2-81fc-e5135b5c2aa4"},{"properties":{"displayName":"[Preview]: - Deploy Dependency Agent for Windows VM Scale Sets (VMSS)","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency Agent for Windows VM Scale Sets if the VM Image (OS) is in the - list defined and the agent is not installed. The list of OS images will be - updated over time as support is updated. Note: if your scale set upgradePolicy - is set to Manual, you need to apply the extension to the all VMs in the set - by calling upgrade on them. In CLI this would be az vmss update-instances.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9","type":"Microsoft.Authorization/policyDefinitions","name":"3be22e3b-d919-47aa-805e-8985dbeb0ad9"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics Agent for Windows VM Scale Sets (VMSS)","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics Agent for Windows VM Scale Sets if the VM Image (OS) is in the - list defined and the agent is not installed. The list of OS images will be - updated over time as support is updated. Note: if your scale set upgradePolicy - is set to Manual, you need to apply the extension to the all VMs in the set - by calling upgrade on them. In CLI this would be az vmss update-instances.","metadata":{"category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038","type":"Microsoft.Authorization/policyDefinitions","name":"3c1b3629-c8f8-4bf6-862c-037cb9094038"},{"properties":{"displayName":"[Preview]: - Audit OS vulnerabilities on your virtual machine scale sets in Azure Security - Center","policyType":"BuiltIn","mode":"Indexed","description":"Audit the OS - vulnerabilities on your virtual machine scale sets to protect them from attacks.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OsVulnerabilities","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","type":"Microsoft.Authorization/policyDefinitions","name":"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4"},{"properties":{"displayName":"Deploy - default Log Analytics Agent for Ubuntu VMs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace","metadata":{"category":"Compute","deprecated":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS","16.04-LTS","16.04.0-LTS","14.04.2-LTS","12.04.5-LTS"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"resources":[{"name":"[concat(parameters(''vmName''),''/omsPolicy'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.EnterpriseCloud.Monitoring","type":"OmsAgentForLinux","typeHandlerVersion":"1.4","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - monitoring for Linux VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38","type":"Microsoft.Authorization/policyDefinitions","name":"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38"},{"properties":{"displayName":"[Preview]: - Audit API Applications that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66","type":"Microsoft.Authorization/policyDefinitions","name":"3fe37002-5d00-4b37-a301-da09e3a0ca66"},{"properties":{"displayName":"Audit - secure transfer to storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - requirment of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking","metadata":{"category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","type":"Microsoft.Authorization/policyDefinitions","name":"404c3081-a854-4457-ae30-26a93ef643f9"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","type":"Microsoft.Authorization/policyDefinitions","name":"428256e6-1fac-4f48-a757-df34c2b3336d"},{"properties":{"displayName":"[Preview]: - Monitor permissive network access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"permissiveNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed","type":"Microsoft.Authorization/policyDefinitions","name":"44452482-524f-4bf4-b852-0bff7cc4a3ed"},{"properties":{"displayName":"Require - SQL Server version 12.0","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures all SQL servers use version 12.0","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"not":{"field":"Microsoft.Sql/servers/version","equals":"12.0"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf","type":"Microsoft.Authorization/policyDefinitions","name":"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06","type":"Microsoft.Authorization/policyDefinitions","name":"46544d7b-1f0d-46f5-81da-5c1351de1b06"},{"properties":{"displayName":"Enforce - automatic OS upgrade with app health checks on VMSS","policyType":"BuiltIn","mode":"All","description":"This - policy enforces usage of automatic OS upgrade with application health checks - through health probes, which enables safer rollout by evaluating application - health after each OS upgrade batch.","metadata":{"category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"not":{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade","equals":"True"}},{"field":"Microsoft.Compute/VirtualMachineScaleSets/networkProfile.healthProbe.id","exists":"False"}]}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"465f0161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"[Preview]: - Monitor possible app Whitelisting in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Possible - Application Whitelist configuration will be monitored by Azure Security Center","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"applicationWhitelisting","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","type":"Microsoft.Authorization/policyDefinitions","name":"47a6b606-51aa-4496-8bb7-64b11cf66adc"},{"properties":{"displayName":"[Preview]: - Audit IP restrictions configuration for an API App","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53","type":"Microsoft.Authorization/policyDefinitions","name":"48893b84-a2c8-4d9a-badf-835d5d1b7d53"},{"properties":{"displayName":"Apply - tag and its default value to resource groups","policyType":"BuiltIn","mode":"All","description":"Applies - a required tag and its default value to resource groups if it is not specified - by the user.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","type":"Microsoft.Authorization/policyDefinitions","name":"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71"},{"properties":{"displayName":"Deploy - VM extension to audit that an application is installed inside Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the content - required to audit that an application is installed inside Linux virtual machines. - This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - name","description":"Application name. Example: ''python'' or ''powershell''."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","AzureDatabricks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"RHEL"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"osa"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', parameters(''ApplicationName''), '']'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721","type":"Microsoft.Authorization/policyDefinitions","name":"4d1c04de-2172-403f-901b-90608c35c721"},{"properties":{"displayName":"[Preview]: - Deploy Dependency Agent for Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency Agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee","type":"Microsoft.Authorization/policyDefinitions","name":"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee"},{"properties":{"displayName":"[Preview]: - Audit maximum number of owners for a subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DesignateLessThanXOwners","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healty"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","type":"Microsoft.Authorization/policyDefinitions","name":"4f11b553-d42e-4e3a-89be-32ca364cad4c"},{"properties":{"displayName":"[Preview]: - Audit CORS resource access restrictions for a Web Application","policyType":"BuiltIn","mode":"All","description":"Cross - origin Resource Sharing (CORS) should not allow all domains to access your - web application. Allow only required domains to interact with your web app.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RestrictCORSAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","type":"Microsoft.Authorization/policyDefinitions","name":"5744710e-cc2f-4ee8-8809-3b11e89f4bc9"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs have a minimum password age of 1 day","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the minimum password age setting - set to 1 day. This security setting determines the period of time (in days) - that a password must be used before the user can change it. This policy should - only be used along with its corresponding deploy policy in an initiative/policy - set. For more information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"MinimumPasswordAge"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7","type":"Microsoft.Authorization/policyDefinitions","name":"5aa11bbc-5c76-4302-80e5-aba46a4282e7"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs restrict the minimum password length to 14 characters","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the minimum password length setting - set to at least 14 characters. This security setting determines the least - number of characters that a password for a user account may contain. This - policy should only be used along with its corresponding deploy policy in an - initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"MinimumPasswordLength"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec","type":"Microsoft.Authorization/policyDefinitions","name":"5aebc8d1-020d-4037-89a0-02043a7524ec"},{"properties":{"displayName":"Audit - that an application is not installed inside Linux VMs","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that the specified application is not installed inside Linux - virtual machines. This policy should only be used along with its corresponding - deploy policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"not_installed_application_linux"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8","type":"Microsoft.Authorization/policyDefinitions","name":"5b842acb-0fe7-41b0-9f40-880ec4ad84d8"},{"properties":{"displayName":"[Preview]: - Audit Log Analytics Agent Deployment in VMSS - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMSS as non-compliant if the VM Image (OS) is not in the list defined and - the agent is not installed. The list of OS images will be updated over time - as support is updated.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138","type":"Microsoft.Authorization/policyDefinitions","name":"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138"},{"properties":{"displayName":"[Preview]: - Audit external accounts with write permissions on a subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithWritePermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","type":"Microsoft.Authorization/policyDefinitions","name":"5c607a2e-c700-4744-8254-d77e7c9eb5e4"},{"properties":{"displayName":"[Preview]: - Audit HTTPS only access for a Function App","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnforceHttps","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55","type":"Microsoft.Authorization/policyDefinitions","name":"5df82f4f-773a-4a2d-97a2-422a806f1a55"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2","type":"Microsoft.Authorization/policyDefinitions","name":"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2"},{"properties":{"displayName":"Audit - that an application is installed inside Windows VMs","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that the specified application is installed inside Windows - virtual machines. This policy should only be used along with its corresponding - deploy policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"WhitelistedApplication"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9","type":"Microsoft.Authorization/policyDefinitions","name":"5e393799-e3ca-4e43-a9a5-0ec4648a57d9"},{"properties":{"displayName":"Allow - resource creation only in India data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: West India, South India, - Central India","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["westindia","southindia","centralindia"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54","type":"Microsoft.Authorization/policyDefinitions","name":"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54"},{"properties":{"displayName":"[Preview]: - Deploy Log Analytics Agent for Linux VM Scale Sets (VMSS)","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics Agent for Linux VM Scale Sets if the VM Image (OS) is in the - list defined and the agent is not installed. Note: if your scale set upgradePolicy - is set to Manual, you need to apply the extension to the all VMs in the set - by calling upgrade on them. In CLI this would be az vmss update-instances.","metadata":{"category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MMAExtension","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.7"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069","type":"Microsoft.Authorization/policyDefinitions","name":"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069"},{"properties":{"displayName":"[Preview]: - Audit external accounts with read permissions on a subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithReadPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","type":"Microsoft.Authorization/policyDefinitions","name":"5f76cf89-fbf2-47fd-a3f4-b891fa780b60"},{"properties":{"displayName":"Audit - that Windows web servers are using secure communication protocols","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows web servers are using secure communication - protocols (TLS 1.1 or TLS 1.2). This policy should only be used along with - its corresponding deploy policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"AuditSecureProtocol"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c","type":"Microsoft.Authorization/policyDefinitions","name":"60ffe3e2-4604-4460-8f22-0f1da058266c"},{"properties":{"displayName":"Deploy - Advanced Data Security on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a ''sqlva'' prefix.","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"location":{"type":"string"}},"variables":{"serverResourceGroupName":"[resourceGroup().name]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - variables(''serverResourceGroupName''), parameters(''location''))]","storageName":"[tolower(concat(''sqlva'', - variables(''uniqueStorage'')))]"},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"[variables(''storageName'')]","apiVersion":"2016-01-01","location":"[parameters(''location'')]","sku":{"name":"Standard_LRS"},"kind":"Storage","properties":{}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/vulnerabilityAssessments","apiVersion":"2018-06-01-preview","properties":{"storageContainerPath":"[concat(reference(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName''))).primaryEndpoints.blob, ''vulnerability-assessment'')]","storageAccountAccessKey":"[listKeys(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName'')), ''2018-02-01'').keys[0].value]","recurringScans":{"isEnabled":true,"emailSubscriptionAdmins":true,"emails":[]}},"dependsOn":["[concat(''Microsoft.Storage/storageAccounts/'', - variables(''storageName''))]","[concat(''Microsoft.Sql/servers/'', parameters(''serverName''), - ''/securityAlertPolicies/Default'')]"]}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6","type":"Microsoft.Authorization/policyDefinitions","name":"6134c3db-786f-471e-87bc-8f479dc890f6"},{"properties":{"displayName":"Audit - the setting of ClusterProtectionLevel property to EncryptAndSign in Service - Fabric","policyType":"BuiltIn","mode":"Indexed","description":"Service Fabric - provides three levels of protection (None, Sign and EncryptAndSign) for node-to-node - communication using a primary cluster certificate. Set the protection level - to ensure that all node-to-node messages are encrypted and digitally signed","metadata":{"category":"Service - Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].name","notEquals":"Security"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name","notEquals":"ClusterProtectionLevel"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value","notEquals":"EncryptAndSign"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","type":"Microsoft.Authorization/policyDefinitions","name":"617c02be-7f02-4efd-8836-3180d47b6c68"},{"properties":{"displayName":"[Preview]: - Audit missing blob encryption for storage accounts","policyType":"BuiltIn","mode":"All","description":"This - policy audits storage accounts without blob encryption. It only applies to - Microsoft.Storage resource types, not other storage providers. Possible network - Just In Time access will be monitored by Azure Security Center as recommendations.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759","type":"Microsoft.Authorization/policyDefinitions","name":"655cb504-bcee-4362-bd4c-402e6aa38759"},{"properties":{"displayName":"[Preview]: - Audit IP restrictions configuration for a Function App","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90","type":"Microsoft.Authorization/policyDefinitions","name":"664346d9-be92-43fb-a219-d595eeb76a90"},{"properties":{"displayName":"[Preview]: - Audit IP restrictions configuration for a Web Application","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe","type":"Microsoft.Authorization/policyDefinitions","name":"6a8450e2-6c61-43b4-be65-62e3a197bffe"},{"properties":{"displayName":"[Preview]: - Audit deprecated accounts on a subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveDeprecatedAccounts","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","type":"Microsoft.Authorization/policyDefinitions","name":"6b1cbf55-e8b6-442f-ba4c-7246b6381474"},{"properties":{"displayName":"Not - allowed resource types","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to specify the resource types that your organization cannot - deploy.","metadata":{"category":"General"},"parameters":{"listOfResourceTypesNotAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that cannot be deployed.","displayName":"Not allowed - resource types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypesNotAllowed'')]"},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749","type":"Microsoft.Authorization/policyDefinitions","name":"6c112d4e-5bc7-47ae-a041-ea2d9dccd749"},{"properties":{"displayName":"Allow - resource creation only in Japan data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fdb9205-3462-4cfc-87d8-16c7860b53f4","type":"Microsoft.Authorization/policyDefinitions","name":"6fdb9205-3462-4cfc-87d8-16c7860b53f4"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs cannot re-use the previous 24 - passwords","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Windows machines have the - setting for number of previous passwords that cannot be used set to 24. This - security setting determines the number of unique new passwords that have to - be associated with a user account before an old password can be reused. This - policy should only be used along with its corresponding audit policy in an - initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"EnforcePasswordHistory"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6","type":"Microsoft.Authorization/policyDefinitions","name":"726671ac-c4de-4908-8c7d-6043ae62e3b6"},{"properties":{"displayName":"Allowed - storage account SKUs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify a set of storage account SKUs that your organization - can deploy.","metadata":{"category":"Storage"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for storage accounts.","displayName":"Allowed - SKUs","strongType":"StorageSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1","type":"Microsoft.Authorization/policyDefinitions","name":"7433c107-6db4-4ad1-b57a-a76dce0154a1"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in App Services","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised","metadata":{"category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites/config"},{"field":"name","equals":"web"},{"anyOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac","type":"Microsoft.Authorization/policyDefinitions","name":"752c6934-9bcc-4749-b004-655e676ae2ac"},{"properties":{"displayName":"[Preview]: - Monitor VM Vulnerabilities in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"vulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c","type":"Microsoft.Authorization/policyDefinitions","name":"760a85ff-6162-42b3-8d70-698e268f648c"},{"properties":{"displayName":"[Preview]: - Deploy Dependency Agent for Linux VM Scale Sets (VMSS)","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency Agent for Linux VM Scale Sets if the VM Image (OS) is in the list - defined and the agent is not installed. Note: if your scale set upgradePolicy - is set to Manual, you need to apply the extension to the all VMs in the set - by calling upgrade on them. In CLI this would be az vmss update-instances.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgent","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0","type":"Microsoft.Authorization/policyDefinitions","name":"765266ab-e40e-4c61-bcb2-5a5275d0b7c0"},{"properties":{"displayName":"Audit - enabling of diagnostics logs in Service Fabric and Virtual Machine Scale Sets","policyType":"BuiltIn","mode":"Indexed","description":"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.","metadata":{"category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"IaaSDiagnostics"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Diagnostics"}]},{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"LinuxDiagnostic"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.OSTCExtensions"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","type":"Microsoft.Authorization/policyDefinitions","name":"7c1b1214-f927-48bf-8882-84f0af6588b1"},{"properties":{"displayName":"Require - blob encryption for storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers.","metadata":{"category":"Storage"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f","type":"Microsoft.Authorization/policyDefinitions","name":"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f"},{"properties":{"displayName":"Audit - that an application is not installed inside Windows VMs.","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that the specified application is not installed inside Windows - virtual machines. This policy should only be used along with its corresponding - deploy policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"NotInstalledApplication"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c","type":"Microsoft.Authorization/policyDefinitions","name":"7e56b49b-5990-4159-a734-511ea19b731c"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs have the password complexity - setting enabled","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Windows machines have the - password complexity setting enabled. More information on this security setting - can be found here: https://docs.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements. - This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"PasswordMustMeetComplexityRequirements"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8","type":"Microsoft.Authorization/policyDefinitions","name":"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8"},{"properties":{"displayName":"Audit - diagnostic setting","policyType":"BuiltIn","mode":"All","description":"Audit - diagnostic setting for selected resource types","metadata":{"category":"Monitoring"},"parameters":{"listOfResourceTypes":{"type":"Array","metadata":{"displayName":"Resource - Types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypes'')]"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9","type":"Microsoft.Authorization/policyDefinitions","name":"7f89b1eb-583c-429a-8828-af049802c1d9"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","type":"Microsoft.Authorization/policyDefinitions","name":"83a214f7-d01a-484b-91a9-ed54470c9a6a"},{"properties":{"displayName":"Deploy - SQL DB transparent data encryption","policyType":"BuiltIn","mode":"Indexed","description":"Enables - transparent data encryption on SQL databases","metadata":{"category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullDbName":{"type":"string"}},"resources":[{"name":"[concat(parameters(''fullDbName''), - ''/current'')]","type":"Microsoft.Sql/servers/databases/transparentDataEncryption","apiVersion":"2014-04-01","properties":{"status":"Enabled"}}]},"parameters":{"fullDbName":{"value":"[field(''fullName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f","type":"Microsoft.Authorization/policyDefinitions","name":"86a912f6-9a06-4e26-b447-11b16ba8659f"},{"properties":{"displayName":"[Preview]: - Monitor missing system updates in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"systemUpdates","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","type":"Microsoft.Authorization/policyDefinitions","name":"86b3d65f-7626-441e-b690-81a8b71cff60"},{"properties":{"displayName":"Deploy - VM extension to audit that an application is not installed inside Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the content - required to audit that an application is not installed inside Linux virtual - machines. This policy should only be used along with its corresponding audit - policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - name","description":"Application name. Example: ''python'' or ''powershell''."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","AzureDatabricks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"RHEL"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"osa"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"not_installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', parameters(''ApplicationName''), '']'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0","type":"Microsoft.Authorization/policyDefinitions","name":"884b209a-963b-4520-8006-d20cb3c213e0"},{"properties":{"displayName":"Enforce - tag and its value on resource groups","policyType":"BuiltIn","mode":"All","description":"Enforces - a required tag and its value on resource groups.","metadata":{"category":"General"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46","type":"Microsoft.Authorization/policyDefinitions","name":"8ce3da23-7156-49e4-b145-24f95f9dcb46"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Windows VMs store passwords using reversible - encryption","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Windows machines have the - setting to store passwords using reversible encryption enabled. This security - setting determines that the operating system stores passwords using reversible - encryption. This policy should only be used along with its corresponding audit - policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"StorePasswordsUsingReversibleEncryption"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78","type":"Microsoft.Authorization/policyDefinitions","name":"8ff0b18b-262e-4512-857a-48ad0aeb9a78"},{"properties":{"displayName":"[Preview]: - Audit accounts with write permissions who are not MFA enabled on a subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForWritePermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","type":"Microsoft.Authorization/policyDefinitions","name":"9297c21d-2ed6-4474-b48f-163f75654ce3"},{"properties":{"displayName":"Deploy - VM extension to audit that the Administrators group inside Windows VMs includes - the specified members","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the content - required to audit that the Administrators group inside Windows virtual machines - includes the specified members. This policy should only be used along with - its corresponding audit policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"MembersToInclude":{"type":"String","metadata":{"displayName":"Members - to include","description":"A semicolon-separated list of members that should - be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"AdministratorsGroupMembersToInclude"},"MembersToInclude":{"value":"[parameters(''MembersToInclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"MembersToInclude":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToInclude","value":"[parameters(''MembersToInclude'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98","type":"Microsoft.Authorization/policyDefinitions","name":"93507a81-10a4-4af0-9ee2-34cf25a96e98"},{"properties":{"displayName":"Allow - resource creation only in European data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: North Europe, West Europe","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["northeurope","westeurope"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b","type":"Microsoft.Authorization/policyDefinitions","name":"94c19f19-8192-48cd-a11b-e37099d3e36b"},{"properties":{"displayName":"Allow - resource creation only in United States data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["centralus","eastus","eastus2","northcentralus","southcentralus","westus"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869","type":"Microsoft.Authorization/policyDefinitions","name":"983211ba-f348-4758-983b-21fa29294869"},{"properties":{"displayName":"[Preview]: - Audit API Applications that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745","type":"Microsoft.Authorization/policyDefinitions","name":"9bfe3727-0a17-471f-a2fe-eddd6b668745"},{"properties":{"displayName":"[Preview]: - Monitor unprotected network endpoints in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - endpoints without a Next Generation Firewall''s protection will be monitored - by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Network/publicIPAddresses","Microsoft.ClassicCompute/domainNames"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedNetworkEndpoint","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","type":"Microsoft.Authorization/policyDefinitions","name":"9daedab3-fb2d-461e-b861-71790eead4f6"},{"properties":{"displayName":"Allowed - resource types","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support ''tags'' and ''location'' will be - affected by this policy. To restrict all resources please duplicate this policy - and change the ''mode'' to ''All''.","metadata":{"category":"General"},"parameters":{"listOfResourceTypesAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that can be deployed.","displayName":"Allowed resource - types","strongType":"resourceTypes"}}},"policyRule":{"if":{"not":{"field":"type","in":"[parameters(''listOfResourceTypesAllowed'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","type":"Microsoft.Authorization/policyDefinitions","name":"a08ec900-254a-4555-9bf5-e42af04b5c5c"},{"properties":{"displayName":"Audit - authorization rules on Service Bus namespaces","policyType":"BuiltIn","mode":"All","description":"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you shoud create access policies at the entity level for queues - and topics to provide access to only the specific entity","metadata":{"category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee","type":"Microsoft.Authorization/policyDefinitions","name":"a1817ec0-a368-432a-8057-8371e17ac6ee"},{"properties":{"displayName":"Audit - usage of custom RBAC rules","policyType":"BuiltIn","mode":"All","description":"Audit - built-in roles such as ''Owner, Contributer, Reader'' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling","metadata":{"category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","type":"Microsoft.Authorization/policyDefinitions","name":"a451c1ef-c6ca-483d-87ed-f49761e3ffb5"},{"properties":{"displayName":"Audit - SQL server level Auditing settings","policyType":"BuiltIn","mode":"Indexed","description":"Audits - the existence of SQL Auditing at the server level","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"setting":{"type":"String","metadata":{"displayName":"Desired - Auditing setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","type":"Microsoft.Authorization/policyDefinitions","name":"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9"},{"properties":{"displayName":"[Preview]: - Audit standard tier of DDoS protection is enabled for a virtual network","policyType":"BuiltIn","mode":"All","description":"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"microsoft.network/virtualNetworks"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableDDoSProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","type":"Microsoft.Authorization/policyDefinitions","name":"a7aca53f-2ed4-4466-a25e-0b45ade68efd"},{"properties":{"displayName":"Enforce - encryption on Data Lake Store accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures encryption is enabled on all Data Lake Store accounts","metadata":{"category":"Data - Lake"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"field":"Microsoft.DataLakeStore/accounts/encryptionState","equals":"Disabled"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"a7ff3161-0087-490a-9ad9-ad6217f4f43a"},{"properties":{"displayName":"[Preview]: - Monitor unencrypted SQL databases in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16","type":"Microsoft.Authorization/policyDefinitions","name":"a8bef009-a5c9-4d0f-90d7-6018734e8a16"},{"properties":{"displayName":"Deploy - network watcher when virtual networks are created","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.","metadata":{"category":"Network"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"networkWatcherRG","existenceCondition":{"field":"location","equals":"[field(''location'')]"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"}},"resources":[{"apiVersion":"2016-09-01","type":"Microsoft.Network/networkWatchers","name":"[concat(''networkWacher_'', - parameters(''location''))]","location":"[parameters(''location'')]"}]},"parameters":{"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9","type":"Microsoft.Authorization/policyDefinitions","name":"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"},{"properties":{"displayName":"[Preview]: - Audit accounts with owner permissions who are not MFA enabled on a subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","type":"Microsoft.Authorization/policyDefinitions","name":"aa633080-8b72-40c4-a2d7-d00c03e80bed"},{"properties":{"displayName":"[Preview]: - Automatic provisioning of security monitoring agent","policyType":"BuiltIn","mode":"All","description":"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.","metadata":{"category":"Security - Center","preview":true,"deprecated":true},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Security/complianceResults","name":"securityAgent","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24","type":"Microsoft.Authorization/policyDefinitions","name":"abcc6037-1fc4-47f6-aac5-89706589be24"},{"properties":{"displayName":"Audit - SQL servers without Advanced Data Security","policyType":"BuiltIn","mode":"Indexed","description":"Audit - SQL servers without Advanced Data Security","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9"},{"properties":{"displayName":"Audit - SQL managed instances without Advanced Data Security","policyType":"BuiltIn","mode":"Indexed","description":"Audit - SQL managed instances without Advanced Data Security","metadata":{"category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9"},{"properties":{"displayName":"Allow - resource creation if ''environment'' tag value in allowed values","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation if the ''environment'' tag is set to one of the following - values: production, dev, test, staging","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags.environment","in":["production","dev","test","staging"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9","type":"Microsoft.Authorization/policyDefinitions","name":"ac7e5fc0-c029-4b12-91d4-a8500ce697f9"},{"properties":{"displayName":"[Preview]: - Monitor missing Endpoint Protection in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"endpointProtection","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","type":"Microsoft.Authorization/policyDefinitions","name":"af6cd1bd-1635-48cb-bde7-5b15693900b9"},{"properties":{"displayName":"[Preview]: - Monitor unaudited SQL servers in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"SQL - servers which don''t have SQL auditing turned on will be monitored by Azure - Security Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"auditing","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d","type":"Microsoft.Authorization/policyDefinitions","name":"af8051bf-258b-44e2-a2bf-165330459f9d"},{"properties":{"displayName":"[Preview]: - Monitor possible network Just In Time (JIT) access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"jitNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","type":"Microsoft.Authorization/policyDefinitions","name":"b0f33259-77d7-4c9e-aac6-3aabcfae693c"},{"properties":{"displayName":"[Preview]: - Audit that Linux VMs have the passwd file permissions set to 0644","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Linux machines have the passwd file permissions set - to 0644. This security setting verifies /etc/passwd file permissions are set - to 0644 to prevent unauthorized changes that could allow access to the server. - This policy should only be used along with its corresponding deploy policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"PasswordPolicy_msid121"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b","type":"Microsoft.Authorization/policyDefinitions","name":"b18175dd-c599-4c64-83ba-bb018a06d35b"},{"properties":{"displayName":"Audit - authorization rules on Event Hub namespaces","policyType":"BuiltIn","mode":"All","description":"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you shoud create access policies at the entity level for queues - and topics to provide access to only the specific entity","metadata":{"category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7","type":"Microsoft.Authorization/policyDefinitions","name":"b278e460-7cfc-4451-8294-cccc40a940d7"},{"properties":{"displayName":"Deploy - VM extension to audit that Windows web servers are using secure communication - protocols","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the required - content to audit that Windows web servers are using secure communication protocols - (TLS 1.1 or TLS 1.2). This policy should only be used along with its corresponding - audit policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"AuditSecureProtocol"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8","type":"Microsoft.Authorization/policyDefinitions","name":"b2fc8f91-866d-4434-9089-5ebfe38d6fd8"},{"properties":{"displayName":"Audit - enabling of diagnostic logs for Search service","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","type":"Microsoft.Authorization/policyDefinitions","name":"b4330a05-a843-4bc8-bf9a-cacce50c67f4"},{"properties":{"displayName":"[Preview]: - Audit Web Sockets state for an API App","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951","type":"Microsoft.Authorization/policyDefinitions","name":"b48334a4-911b-4084-b1ab-3e6a4e50b951"},{"properties":{"displayName":"Audit - usage of Azure Active Directory for client authentication in Service Fabric","policyType":"BuiltIn","mode":"Indexed","description":"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric","metadata":{"category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","exists":"false"},{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","type":"Microsoft.Authorization/policyDefinitions","name":"b54ed75b-3e1a-44ac-a333-05ba39b99ff0"},{"properties":{"displayName":"Deploy - VM extension to audit that the Administrators group inside Windows VMs contains - only the specified members","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the VM extension for Microsoft Guest Configuration, the - VM extension for Microsoft Azure Managed Service Identity, and the content - required to audit that the Administrators group inside Windows virtual machines - contains only the specified members. This policy should only be used along - with its corresponding audit policy in an initiative/policy set. For more - information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"Members":{"type":"String","metadata":{"displayName":"Members","description":"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"AdministratorsGroupMembers"},"Members":{"value":"[parameters(''Members'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"Members":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;Members","value":"[parameters(''Members'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3","type":"Microsoft.Authorization/policyDefinitions","name":"b821191b-3a12-44bc-9c38-212138a29ff3"},{"properties":{"displayName":"[Preview]: - Audit API Applications that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644","type":"Microsoft.Authorization/policyDefinitions","name":"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644"},{"properties":{"displayName":"Audit - that the Administrators group inside Windows VMs excludes the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy audits that the Administrators group inside Windows virtual machines - excludes the specified members. This policy should only be used along with - its corresponding deploy policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"AdministratorsGroupMembersToExclude"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de","type":"Microsoft.Authorization/policyDefinitions","name":"bde62c94-ccca-4821-a815-92c1d31a76de"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6","type":"Microsoft.Authorization/policyDefinitions","name":"be0a7681-bed4-48dc-9ff3-f0171ee170b6"},{"properties":{"displayName":"Allow - resource creation only in Asia data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["eastasia","southeastasia","westindia","southindia","centralindia","japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94","type":"Microsoft.Authorization/policyDefinitions","name":"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94"},{"properties":{"displayName":"[Preview]: - Audit any missing system updates on virtual machine scale sets in Azure Security - Center","policyType":"BuiltIn","mode":"Indexed","description":"Audit whether - there are any missing system security updates and critical updates that should - be installed to ensure that your Windows and Linux virtual machine scale sets - are secure.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"SystemUpdates","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","type":"Microsoft.Authorization/policyDefinitions","name":"c3f317a7-a95c-4547-b7e7-11017ebdf2fe"},{"properties":{"displayName":"[Preview]: - Audit that Linux VMs do not have accounts without passwords","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Linux machines do not have accounts without passwords. - This security setting verifies there are no accounts without passwords. This - policy should only be used along with its corresponding deploy policy in an - initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"PasswordPolicy_msid232"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05","type":"Microsoft.Authorization/policyDefinitions","name":"c40c9087-1981-4e73-9f53-39743eda9d05"},{"properties":{"displayName":"[Preview]: - Audit HTTPS only access for an API App","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnforceHttps","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d","type":"Microsoft.Authorization/policyDefinitions","name":"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Data Lake Analytics","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","type":"Microsoft.Authorization/policyDefinitions","name":"c95c74d9-38fe-4f0d-af86-0c7d626a315c"},{"properties":{"displayName":"Apply - Diagnostic Settings for Network Security Groups","policyType":"BuiltIn","mode":"Indexed","description":"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name ''{storagePrefixParameter}{NSGLocation}'' will - be automatically created.","metadata":{"category":"Monitoring"},"parameters":{"storagePrefix":{"type":"String","metadata":{"displayName":"Storage - Account Prefix for Regional Storage Account","description":"This prefix will - be combined with the network security group location to form the created storage - account name."}},"rgName":{"type":"String","metadata":{"displayName":"Resource - Group Name for Storage Account (must exist)","description":"The resource group - that the storage account will be created in. This resource group must already - exist.","strongType":"ExistingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"setbypolicy","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"},"nsgName":{"type":"string"},"rgName":{"type":"string"}},"variables":{"storageDeployName":"[concat(''policyStorage_'', - uniqueString(parameters(''location''), parameters(''nsgName'')))]"},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings","name":"[concat(parameters(''nsgName''),''/Microsoft.Insights/setbypolicy'')]","apiVersion":"2017-05-01-preview","location":"[parameters(''location'')]","dependsOn":["[variables(''storageDeployName'')]"],"properties":{"storageAccountId":"[reference(variables(''storageDeployName'')).outputs.storageAccountId.value]","logs":[{"category":"NetworkSecurityGroupEvent","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"NetworkSecurityGroupRuleCounter","enabled":true,"retentionPolicy":{"enabled":false,"days":0}}]}},{"apiVersion":"2017-05-10","name":"[variables(''storageDeployName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''rgName'')]","properties":{"mode":"incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"}},"resources":[{"apiVersion":"2017-06-01","type":"Microsoft.Storage/storageAccounts","name":"[concat(parameters(''storageprefix''), - parameters(''location''))]","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"[parameters(''location'')]","tags":{"created-by":"policy"},"scale":null,"properties":{"networkAcls":{"bypass":"AzureServices","defaultAction":"Allow","ipRules":[],"virtualNetworkRules":[]},"supportsHttpsTrafficOnly":true}}],"outputs":{"storageAccountId":{"type":"string","value":"[resourceId(parameters(''rgName''), - ''Microsoft.Storage/storageAccounts'',concat(parameters(''storagePrefix''), - parameters(''location'')))]"}}}}}]},"parameters":{"location":{"value":"[field(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"},"rgName":{"value":"[parameters(''rgName'')]"},"nsgName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89","type":"Microsoft.Authorization/policyDefinitions","name":"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89"},{"properties":{"displayName":"[Preview]: - Audit remote debugging state for a Web Application","policyType":"BuiltIn","mode":"All","description":"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableRemoteDebugging","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","type":"Microsoft.Authorization/policyDefinitions","name":"cb510bfd-1cba-4d9f-a230-cb0976f4bb71"},{"properties":{"displayName":"Audit - that the Administrators group inside Windows VMs contains only the specified - members","policyType":"BuiltIn","mode":"All","description":"This policy audits - that the Administrators group inside Windows virtual machines contains only - the specified members. This policy should only be used along with its corresponding - deploy policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"AdministratorsGroupMembers"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19","type":"Microsoft.Authorization/policyDefinitions","name":"cc7cda28-f867-4311-8497-a526129a8d19"},{"properties":{"displayName":"Allowed - virtual machine SKUs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify a set of virtual machine SKUs that your organization - can deploy.","metadata":{"category":"Compute"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for virtual machines.","displayName":"Allowed - SKUs","strongType":"VMSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"field":"Microsoft.Compute/virtualMachines/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3","type":"Microsoft.Authorization/policyDefinitions","name":"cccc23c7-8427-4f53-ad12-b6a63eb452b3"},{"properties":{"displayName":"Allow - resource creation if ''department'' tag set","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation only if the ''department'' tag is set","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags","containsKey":"department"}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064","type":"Microsoft.Authorization/policyDefinitions","name":"cd8dc879-a2ae-43c3-8211-1877c5755064"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs cannot re-use the previous 24 passwords","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the setting for number of previous - passwords that cannot be used set to 24. This security setting determines - the number of unique new passwords that have to be associated with a user - account before an old password can be reused. This policy should only be used - along with its corresponding deploy policy in an initiative/policy set. For - more information on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"EnforcePasswordHistory"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293","type":"Microsoft.Authorization/policyDefinitions","name":"cdbf72d9-ac9c-4026-8a3a-491a5ac59293"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Key Vault","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Key Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","type":"Microsoft.Authorization/policyDefinitions","name":"cf820ca0-f99e-4f3e-84fb-66e913812d21"},{"properties":{"displayName":"[Preview]: - Audit Function Apps that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c","type":"Microsoft.Authorization/policyDefinitions","name":"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a","type":"Microsoft.Authorization/policyDefinitions","name":"dd2ea520-6b06-45c3-806e-ea297c23e06a"},{"properties":{"displayName":"Allow - resource creation only in Japan data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Japan East, Japan West","metadata":{"category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e01598e8-6538-41ed-95e8-8b29746cd697","type":"Microsoft.Authorization/policyDefinitions","name":"e01598e8-6538-41ed-95e8-8b29746cd697"},{"properties":{"displayName":"[Preview]: - Monitor OS vulnerabilities in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"osVulnerabilities","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","type":"Microsoft.Authorization/policyDefinitions","name":"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15"},{"properties":{"displayName":"[Preview]: - Audit Dependency Agent Deployment in VMSS - VM Image (OS) unlisted","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMSS as non-compliant if the VM Image (OS) is not in the list defined and - the agent is not installed. The list of OS images will be updated over time - as support is updated.","metadata":{"category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10","type":"Microsoft.Authorization/policyDefinitions","name":"e2dd799a-a932-4e9d-ac17-d473bc3c6c10"},{"properties":{"displayName":"[Preview]: - Audit accounts with read permissions who are not MFA enabled on a subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"EnableMFAForReadPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","type":"Microsoft.Authorization/policyDefinitions","name":"e3576e28-8b17-4677-84c3-db2990658d64"},{"properties":{"displayName":"Allowed - locations","policyType":"BuiltIn","mode":"Indexed","description":"This policy - enables you to restrict the locations your organization can specify when deploying - resources. Use to enforce your geo-compliance requirements. Excludes resource - groups, Microsoft.AzureActiveDirectory/b2cDirectories, and resources that - use the ''global'' region.","metadata":{"category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that can be specified when deploying resources.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"location","notEquals":"global"},{"field":"type","notEquals":"Microsoft.AzureActiveDirectory/b2cDirectories"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","type":"Microsoft.Authorization/policyDefinitions","name":"e56962a6-4747-49cd-b67b-bf8b01975c4c"},{"properties":{"displayName":"[Preview]: - Audit Web Applications that are not using latest supported Node.js Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestNodeJS","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008","type":"Microsoft.Authorization/policyDefinitions","name":"e67687e8-08d5-4e7f-8226-5b4753bba008"},{"properties":{"displayName":"Allowed - locations for resource groups","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.","metadata":{"category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that resource groups can be created in.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988","type":"Microsoft.Authorization/policyDefinitions","name":"e765b5de-1225-4ba3-bd56-1ac6695af988"},{"properties":{"displayName":"[Preview]: - Audit Web Sockets state for a Web Application","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e","type":"Microsoft.Authorization/policyDefinitions","name":"e797f851-8be7-4c40-bb56-2e3395215b0e"},{"properties":{"displayName":"[Preview]: - Audit remote debugging state for an API App","policyType":"BuiltIn","mode":"All","description":"Remote - debugging requires inbound ports to be opened on an API app. Remote debugging - should be turned off.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.Web/sites"},{"anyOf":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableRemoteDebugging","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","type":"Microsoft.Authorization/policyDefinitions","name":"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e"},{"properties":{"displayName":"[Preview]: - Audit deprecated accounts with owner permissions on a subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts with owner permissions should be removed from your subscription. Deprecated - accounts are accounts that have been blocked from signing in.","metadata":{"category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveDeprecatedAccountsWithOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","type":"Microsoft.Authorization/policyDefinitions","name":"ebb62a0c-3560-49e1-89ed-27e074e9f8ad"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Linux VMs do not allow remote connections - from accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Linux machines do not allow - remote connections from accounts without passwords. This security setting - verifies remote connections from accounts with empty passwords are disabled. - This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","AzureDatabricks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"RHEL"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"osa"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"PasswordPolicy_msid110"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592","type":"Microsoft.Authorization/policyDefinitions","name":"ec49586f-4939-402d-a29e-6ff502b20592"},{"properties":{"displayName":"Deploy - VM extension to audit that an application is not installed inside Windows - VMs","policyType":"BuiltIn","mode":"Indexed","description":"Include this rule - to deploy the VM extension for Microsoft Guest Configuration, the VM extension - for Microsoft Azure Managed Service Identity, and the content required to - audit that an application is not installed inside Windows virtual machines. - This policy should only be used along with its corresponding audit policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"Application - name (supports wildcard)","description":"Application name. Example: ''Microsoft - SQL Server 2014 (64-bit)'' or ''Microsoft SQL Server 2014*'' to match any - application starting with ''Microsoft SQL Server 2014''."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["MicrosoftDynamicsAX","MicrosoftWindowsDesktop","MicrosoftVisualStudio","incredibuild","MicrosoftWindowsServerHPCPack","esri"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageSKU","notEquals":"SQL2008R2SP3-WS2008R2SP1"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplication","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"NotInstalledApplication"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]NotInstalledApplicationResource1;Name","value":"[parameters(''ApplicationName'')]"}]}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2","type":"Microsoft.Authorization/policyDefinitions","name":"f0633351-c7b2-41ff-9981-508fc08553c2"},{"properties":{"displayName":"[Preview]: - Deploy VM extension to audit that Linux VMs have the passwd file permissions - set to 0644","policyType":"BuiltIn","mode":"Indexed","description":"Include - this rule to deploy the requirements to audit that Linux machines have the - passwd file permissions set to 0644. This security setting verifies /etc/passwd - file permissions are set to 0644 to prevent unauthorized changes that could - allow access to the server. This policy should only be used along with its - corresponding audit policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","AzureDatabricks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"RHEL"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","equals":"osa"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"configurationName":{"value":"PasswordPolicy_msid121"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"apiVersion":"2017-03-30","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9","type":"Microsoft.Authorization/policyDefinitions","name":"f19aa1c1-6b91-4c27-ae6a-970279f03db9"},{"properties":{"displayName":"Audit - that the Administrators group inside Windows VMs includes the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy audits that the Administrators group inside Windows virtual machines - includes the specified members. This policy should only be used along with - its corresponding deploy policy in an initiative/policy set. For more information - on guest configuration policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"AdministratorsGroupMembersToInclude"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a","type":"Microsoft.Authorization/policyDefinitions","name":"f3b44e5d-1456-475f-9c67-c66c4618e85a"},{"properties":{"displayName":"[Preview]: - Audit Log Analytics Workspace for VM - Report Mismatch","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if they not logging to the LA workspace specified in - the policy/initiative assignment.","metadata":{"category":"Monitoring"},"parameters":{"logAnalyticsWorkspaceId":{"type":"String","metadata":{"displayName":"Log - Analytics Workspace Id that VMs should be configured for","description":"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId","notEquals":"[parameters(''logAnalyticsWorkspaceId'')]"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917","type":"Microsoft.Authorization/policyDefinitions","name":"f47b5582-33ec-4c5c-87c0-b010a6b2e917"},{"properties":{"displayName":"Audit - existence of authorization rules on Event Hub entities","policyType":"BuiltIn","mode":"All","description":"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access","metadata":{"category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces/eventhubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/eventHubs/authorizationRules"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d","type":"Microsoft.Authorization/policyDefinitions","name":"f4826e5f-6a27-407c-ae3e-9582eb39891d"},{"properties":{"displayName":"[Preview]: - Audit that Windows VMs have the password complexity setting enabled","policyType":"BuiltIn","mode":"All","description":"This - policy will audit that Windows machines have the password complexity setting - enabled. More information on this security setting can be found here: https://docs.microsoft.com/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements. - This policy should only be used along with its corresponding deploy policy - in an initiative/policy set. For more information on guest configuration policies, - please visit http://aka.ms/gcpol","metadata":{"category":"Guest Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"PasswordMustMeetComplexityRequirements"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb","type":"Microsoft.Authorization/policyDefinitions","name":"f48b2913-1dc5-4834-8c72-ccc1dfd819bb"},{"properties":{"displayName":"Deploy - Auditing on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Auditing is enabled on SQL Servers for enhanced security - and compliance. It will automatically create a storage account in the same - region as the SQL server to store audit records.","metadata":{"category":"SQL"},"parameters":{"retentionDays":{"type":"String","metadata":{"description":"The - value in days of the retention period (0 indicates unlimited retention)","displayName":"Retention - days (optional, 180 days if unspecified)"}},"storageAccountsResourceGroup":{"type":"String","metadata":{"displayName":"Resource - group name for storage accounts","description":"Auditing writes database events - to an audit log in your Azure Storage account (a storage account will be created - in each region where a SQL Server is created that will be shared by all servers - in that region). Important - for proper operation of Auditing do not delete - or rename the resource group or the storage accounts.","strongType":"existingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"auditRetentionDays":{"type":"string"},"storageAccountsResourceGroup":{"type":"string"},"location":{"type":"string"}},"variables":{"retentionDays":"[int(parameters(''auditRetentionDays''))]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - parameters(''location''), parameters(''storageAccountsResourceGroup''))]","locationCode":"[substring(parameters(''location''), - 0, 3)]","storageName":"[tolower(concat(''sqlaudit'', variables(''locationCode''), - variables(''uniqueStorage'')))]","createStorageAccountDeploymentName":"[concat(''sqlServerAuditingStorageAccount-'', - uniqueString(variables(''locationCode''), parameters(''serverName'')))]"},"resources":[{"apiVersion":"2017-05-10","name":"[variables(''createStorageAccountDeploymentName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''storageAccountsResourceGroup'')]","properties":{"mode":"Incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storageName":{"value":"[variables(''storageName'')]"}},"templateLink":{"uri":"https://raw.githubusercontent.com/Azure/azure-policy/master/samples/SQL/deploy-sql-server-auditing/createStorage.template.json","contentVersion":"1.0.0.0"}}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/auditingSettings","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","storageEndpoint":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountEndPoint.value]","storageAccountAccessKey":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountKey.value]","retentionDays":"[variables(''retentionDays'')]","auditActionsAndGroups":null,"storageAccountSubscriptionId":"[subscription().subscriptionId]","isStorageSecondaryKeyInUse":false}}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"auditRetentionDays":{"value":"[parameters(''retentionDays'')]"},"storageAccountsResourceGroup":{"value":"[parameters(''storageAccountsResourceGroup'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036","type":"Microsoft.Authorization/policyDefinitions","name":"f4c68484-132f-41f9-9b6d-3e4b1cb55036"},{"properties":{"displayName":"[Preview]: - Audit external accounts with owner permissions on a subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"RemoveExternalAccountsWithOwnerPermissions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","type":"Microsoft.Authorization/policyDefinitions","name":"f8456c1c-aa66-4dfb-861a-25d127b775c9"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Service Bus","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Service Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","type":"Microsoft.Authorization/policyDefinitions","name":"f8d36e2f-389b-4ee4-898d-21aeb69a0f45"},{"properties":{"displayName":"Audit - enabling of diagnostic logs in Azure Stream Analytics","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of diagnostic logs. This enables you to recreate activity trails - to use for investigation purposes; when a security incident occurs or when - your network is compromised","metadata":{"category":"Stream Analytics"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required diagnostic logs retention in - days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingJobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","type":"Microsoft.Authorization/policyDefinitions","name":"f9be5368-9bf5-4b84-9e0a-7850da98bb46"},{"properties":{"displayName":"Audit - that an application is installed inside Linux VMs","policyType":"BuiltIn","mode":"All","description":"This - policy audits that the specified application is installed inside Linux virtual - machines. This policy should only be used along with its corresponding deploy - policy in an initiative/policy set. For more information on guest configuration - policies, please visit http://aka.ms/gcpol","metadata":{"category":"Guest - Configuration"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"name","equals":"installed_application_linux"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","notEquals":"Compliant"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004","type":"Microsoft.Authorization/policyDefinitions","name":"fee5cb2b-9d9b-410e-afe3-2902d90d0004"},{"properties":{"displayName":"[Preview]: - Monitor SQL vulnerability assessment results in Azure Security Center","policyType":"BuiltIn","mode":"Indexed","description":"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.","metadata":{"category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Sql/servers/databases","Microsoft.Sql/managedinstances/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"sqlVulnerabilityAssessment","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["Monitored","NotApplicable","OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","type":"Microsoft.Authorization/policyDefinitions","name":"feedbf84-6b99-488c-acc2-71c829aa5ffc"},{"properties":{"displayName":"test_policykmpkceiry_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"updatedOn":"2019-03-08T21:40:10.4861408Z","createdOn":"2019-03-08T21:40:08.9943886Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that can be specified when deploying resources","displayName":"Allowed - locations","strongType":"location"}}},"policyRule":{"then":{"effect":"deny"},"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policybjtzo4pck","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policybjtzo4pck"},{"properties":{"displayName":"test_policy4djc7v3tf_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","updatedOn":"2019-03-14T20:32:47.738387Z","createdOn":"2019-03-14T20:32:46.6558174Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"strongType":"location","displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources"}}},"policyRule":{"then":{"effect":"deny"},"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policybntomgmkd","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policybntomgmkd"},{"properties":{"displayName":"test_policysck2tq35c","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:43:49.7029747Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycick4w6ke","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policycick4w6ke"},{"properties":{"displayName":"test_policys7vwfs6fn","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:41:10.4660735Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfcbyiab75","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policyfcbyiab75"},{"properties":{"displayName":"test_policy5kjnzg7vf_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdOn":"2019-03-08T21:36:26.2143386Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","updatedOn":"2019-03-08T21:36:27.4479293Z","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"then":{"effect":"deny"},"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhknyws3ux","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policyhknyws3ux"},{"properties":{"displayName":"test_policyo7d7muxcw","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:44:21.4095445Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjykqkkhxw","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policyjykqkkhxw"},{"properties":{"displayName":"test_policy7gznjtfog_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"updatedOn":"2019-03-08T22:29:30.2485754Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-03-08T22:29:29.0375847Z","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"strongType":"location","displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying resources"}}},"policyRule":{"then":{"effect":"deny"},"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrqp6xvcb6","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policyrqp6xvcb6"},{"properties":{"displayName":"test_policy000004_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdOn":"2019-03-14T21:41:56.5167492Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","updatedOn":"2019-03-14T21:41:57.568065Z"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}]}'} - headers: - cache-control: [no-cache] - content-length: ['315073'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:57 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition show] - Connection: [keep-alive] - ParameterSetName: [-n --management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000004_new","policyType":"Custom","mode":"Indexed","description":"desc_for_test_policy_123_new","metadata":{"createdOn":"2019-03-14T21:41:56.5167492Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","updatedOn":"2019-03-14T21:41:57.568065Z"},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"field":"location","in":"[parameters(''allowedLocations'')]"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}'} - headers: - cache-control: [no-cache] - content-length: ['895'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy assignment create] - Connection: [keep-alive] - ParameterSetName: [--policy -n --display-name --params --scope] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/%2Fproviders%2FMicrosoft.Management%2FmanagementGroups%2Fcli-test-mgmt-group000002%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fazure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy - definition ''providers'' could not be found."}}'} - headers: - cache-control: [no-cache] - content-length: ['111'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:58 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - status: {code: 404, message: Not Found} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy assignment create] - Connection: [keep-alive] - ParameterSetName: [--policy -n --display-name --params --scope] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/%2Fproviders%2FMicrosoft.Management%2FmanagementGroups%2Fcli-test-mgmt-group000002%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fazure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"error":{"code":"AuthorizationFailed","message":"The client ''aaa@foo.com'' - with object id ''8427ce23-08f2-4510-b6e2-99644db7f94e'' does not have authorization - to perform action ''Microsoft.Authorization/policyDefinitions/Microsoft.Management/cli-test-mgmt-group000002/Microsoft.Authorization/azure-cli-test-policy000003/read'' - over scope ''/providers/Microsoft.Authorization/policyDefinitions/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002/providers/Microsoft.Authorization/policyDefinitions''."}}'} - headers: - cache-control: [no-cache] - connection: [close] - content-length: ['542'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:41:59 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-failure-cause: [gateway] - status: {code: 403, message: Forbidden} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:42:01 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:42:11 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - Cache-Control: [no-cache] - CommandName: [account management-group delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"NotStarted"}'} - headers: - cache-control: [no-cache] - content-length: ['208'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:42:14 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview'] - pragma: [no-cache] - request-id: [9010ad99-9829-4d65-885a-cd565644e9a0] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-tenant-deletes: ['14999'] - x-powered-by: [ASP.NET] - status: {code: 202, message: Accepted} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"Succeeded"}'} - headers: - cache-control: [no-cache] - content-length: ['207'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 14 Mar 2019 21:42:24 GMT'] - expires: ['-1'] - pragma: [no-cache] - request-id: [3df44aa1-3f19-4b0f-9c58-b6b026956b36] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-powered-by: [ASP.NET] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.60] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policy_management_group000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 14 Mar 2019 21:42:26 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUE9MSUNZOjVGTUFOQUdFTUVOVDo1RkdST1VQM05PU0U2SXw5MDU4OUQ1NkYyNDE1MTBDLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_default.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_default.yaml deleted file mode 100644 index ab722fc3144..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_default.yaml +++ /dev/null @@ -1,92 +0,0 @@ -interactions: -- request: - body: '{"location": "westus", "tags": {"date": "2019-02-27T23:41:07Z", "product": - "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policyset000001","name":"cli_test_policyset000001","location":"westus","tags":{"date":"2019-02-27T23:41:07Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:41:09 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: 'b''{"properties": {"policyRule": {"if": {"not": {"in": "[parameters(\''allowedLocations\'')]", - "field": "location"}}, "then": {"effect": "deny"}}, "displayName": "test_policy000003", - "parameters": {"allowedLocations": {"metadata": {"displayName": "Allowed locations", - "strongType": "location", "description": "The list of locations that can be - specified when deploying resources"}, "type": "array"}}, "description": "desc_for_test_policy_123"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition create] - Connection: [keep-alive] - Content-Length: ['440'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --rules --params --display-name --description] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:41:10.4660735Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}'} - headers: - cache-control: [no-cache] - content-length: ['811'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:41:10 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Wed, 27 Feb 2019 23:41:10 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUE9MSUNZU0VUS1M3R1ZMU1M0QUlHNExYVjc0R0lQNEVIU3w2MDIwRjc0MjZEMUEzOUQ3LVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_management_group.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_management_group.yaml deleted file mode 100644 index dd6e3827bbd..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_management_group.yaml +++ /dev/null @@ -1,491 +0,0 @@ -interactions: -- request: - body: '{"location": "westus", "tags": {"date": "2019-02-27T23:42:21Z", "product": - "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset_management_group000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policyset_management_group000001","name":"cli_test_policyset_management_group000001","location":"westus","tags":{"date":"2019-02-27T23:42:21Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:42:22 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:42:23 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:42:34 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:42:44 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:42:54 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:04 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:15 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registering"}'} - headers: - cache-control: [no-cache] - content-length: ['1469'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:25 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:35 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"name": "cli-test-mgmt-group000002", "properties": {"details": {"parent": - {}}}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - Cache-Control: [no-cache] - CommandName: [account management-group create] - Connection: [keep-alive] - Content-Length: ['85'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"NotStarted"}'} - headers: - cache-control: [no-cache] - content-length: ['208'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:36 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview'] - pragma: [no-cache] - request-id: [248272e5-a6ac-4e3e-8364-8f86ac443f4a] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-tenant-writes: ['1199'] - x-powered-by: [ASP.NET] - status: {code: 202, message: Accepted} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group create] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"Succeeded","properties":{"tenantId":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"cli-test-mgmt-group000002","details":{"version":1,"updatedTime":"2019-02-27T23:43:42.3090666Z","updatedBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","parent":{"id":"/providers/Microsoft.Management/managementGroups/72f988bf-86f1-41af-91ab-2d7cd011db47","name":"72f988bf-86f1-41af-91ab-2d7cd011db47","displayName":"72f988bf-86f1-41af-91ab-2d7cd011db47"}}}}'} - headers: - cache-control: [no-cache] - content-length: ['642'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:47 GMT'] - expires: ['-1'] - pragma: [no-cache] - request-id: [c920035e-ad0c-4499-97ad-a4ec220161e9] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-powered-by: [ASP.NET] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"policyRule": {"if": {"not": {"in": "[parameters(\''allowedLocations\'')]", - "field": "location"}}, "then": {"effect": "deny"}}, "displayName": "test_policy000004", - "parameters": {"allowedLocations": {"metadata": {"displayName": "Allowed locations", - "strongType": "location", "description": "The list of locations that can be - specified when deploying resources"}, "type": "array"}}, "description": "desc_for_test_policy_123"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition create] - Connection: [keep-alive] - Content-Length: ['440'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --rules --params --display-name --description --management-group] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000004","policyType":"Custom","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:43:49.7029747Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000003","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000003"}'} - headers: - cache-control: [no-cache] - content-length: ['811'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:49 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:43:51 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}'} - headers: - cache-control: [no-cache] - content-length: ['1468'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:44:02 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - vary: [Accept-Encoding] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - Cache-Control: [no-cache] - CommandName: [account management-group delete] - Connection: [keep-alive] - Content-Length: ['0'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"NotStarted"}'} - headers: - cache-control: [no-cache] - content-length: ['208'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:44:04 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview'] - pragma: [no-cache] - request-id: [0d01994c-96d6-4c8b-8bda-7415e2331ced] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-tenant-deletes: ['14999'] - x-powered-by: [ASP.NET] - status: {code: 202, message: Accepted} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account management-group delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - azure-mgmt-managementgroups/0.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/cli-test-mgmt-group000002?api-version=2018-03-01-preview - response: - body: {string: '{"id":"/providers/Microsoft.Management/managementGroups/cli-test-mgmt-group000002","type":"/providers/Microsoft.Management/managementGroups","name":"cli-test-mgmt-group000002","status":"Succeeded"}'} - headers: - cache-control: [no-cache] - content-length: ['207'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:44:15 GMT'] - expires: ['-1'] - pragma: [no-cache] - request-id: [19a58382-8f27-410b-84f9-71bf648ac44d] - server: [Microsoft-IIS/8.5] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-aspnet-version: [4.0.30319] - x-ba-restapi: [1.0.3.1286] - x-content-type-options: [nosniff] - x-powered-by: [ASP.NET] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset_management_group000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Wed, 27 Feb 2019 23:44:16 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUE9MSUNZU0VUOjVGTUFOQUdFTUVOVDo1RkdST1VQN0xaWXw0MjlBNDE1NDc1NzA4NDYzLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_subscription_id.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_subscription_id.yaml deleted file mode 100644 index f05bcb2666c..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_policyset_subscription_id.yaml +++ /dev/null @@ -1,92 +0,0 @@ -interactions: -- request: - body: '{"location": "westus", "tags": {"date": "2019-02-27T23:44:19Z", "product": - "azurecli", "cause": "automation"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group create] - Connection: [keep-alive] - Content-Length: ['110'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--location --name --tag] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset_subscription_id000001?api-version=2018-05-01 - response: - body: {string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_policyset_subscription_id000001","name":"cli_test_policyset_subscription_id000001","location":"westus","tags":{"date":"2019-02-27T23:44:19Z","product":"azurecli","cause":"automation"},"properties":{"provisioningState":"Succeeded"}}'} - headers: - cache-control: [no-cache] - content-length: ['384'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:44:20 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: 'b''{"properties": {"policyRule": {"if": {"not": {"in": "[parameters(\''allowedLocations\'')]", - "field": "location"}}, "then": {"effect": "deny"}}, "displayName": "test_policy000003", - "parameters": {"allowedLocations": {"metadata": {"displayName": "Allowed locations", - "strongType": "location", "description": "The list of locations that can be - specified when deploying resources"}, "type": "array"}}, "description": "desc_for_test_policy_123"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [policy definition create] - Connection: [keep-alive] - Content-Length: ['440'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --rules --params --display-name --description --subscription] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - policyclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002?api-version=2016-12-01 - response: - body: {string: '{"properties":{"displayName":"test_policy000003","policyType":"Custom","description":"desc_for_test_policy_123","metadata":{"createdBy":"8427ce23-08f2-4510-b6e2-99644db7f94e","createdOn":"2019-02-27T23:44:21.4095445Z","updatedBy":null,"updatedOn":null},"parameters":{"allowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","strongType":"location","description":"The list of locations that - can be specified when deploying resources"}}},"policyRule":{"if":{"not":{"in":"[parameters(''allowedLocations'')]","field":"location"}},"then":{"effect":"deny"}}},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002","type":"Microsoft.Authorization/policyDefinitions","name":"azure-cli-test-policy000002"}'} - headers: - cache-control: [no-cache] - content-length: ['811'] - content-type: [application/json; charset=utf-8] - date: ['Wed, 27 Feb 2019 23:44:21 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [group delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [--name --yes --no-wait] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - resourcemanagementclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_policyset_subscription_id000001?api-version=2018-05-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Wed, 27 Feb 2019 23:44:22 GMT'] - expires: ['-1'] - location: ['https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/operationresults/eyJqb2JJZCI6IlJFU09VUkNFR1JPVVBERUxFVElPTkpPQi1DTEk6NUZURVNUOjVGUE9MSUNZU0VUOjVGU1VCU0NSSVBUSU9OOjVGSURFMzRCU3w2OUM0OTM1QUQxMjFFMzVFLVdFU1RVUyIsImpvYkxvY2F0aW9uIjoid2VzdHVzIn0?api-version=2018-05-01'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14999'] - status: {code: 202, message: Accepted} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_scenario.yaml deleted file mode 100644 index 09d56874f36..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_resource_scenario.yaml +++ /dev/null @@ -1,5169 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm26re6_2261088488855263421","name":"AzureBackup_clitest-vm26re6_2261088488855263421","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:26:29.1204485Z","changedTime":"2021-04-19T04:36:29.829373Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3324p_2261106080172620846","name":"AzureBackup_clitest-vm3324p_2261106080172620846","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:40.2857914Z","changedTime":"2021-04-19T03:18:41.6848015Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm35jy3_2261141265524437188","name":"AzureBackup_clitest-vm35jy3_2261141265524437188","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:05.678983Z","changedTime":"2021-04-19T02:59:06.0393385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm6fvdn_2261053303720667753","name":"AzureBackup_clitest-vm6fvdn_2261053303720667753","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:53.5777624Z","changedTime":"2021-04-19T03:18:54.9324571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vma264i_2261141265111804690","name":"AzureBackup_clitest-vma264i_2261141265111804690","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:40.9775125Z","changedTime":"2021-04-16T09:16:41.1595311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmapciw_2260859791356008235","name":"AzureBackup_clitest-vmapciw_2260859791356008235","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:41.556148Z","changedTime":"2021-04-16T09:16:41.7225567Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmb7duk_2261088489774212355","name":"AzureBackup_clitest-vmb7duk_2261088489774212355","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:43.285658Z","changedTime":"2021-04-16T09:16:44.156077Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmd2aii_2261229225878424060","name":"AzureBackup_clitest-vmd2aii_2261229225878424060","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:09.2143666Z","changedTime":"2021-04-19T04:47:09.5137293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmdcma5_2261158858213169159","name":"AzureBackup_clitest-vmdcma5_2261158858213169159","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.7131897Z","changedTime":"2021-04-19T03:00:14.4389376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmgmhwn_2261141266250633839","name":"AzureBackup_clitest-vmgmhwn_2261141266250633839","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:07:13.480346Z","changedTime":"2021-04-16T09:17:14.8053716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmj6du6_2261158857934913237","name":"AzureBackup_clitest-vmj6du6_2261158857934913237","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:42.1518997Z","changedTime":"2021-04-16T09:16:43.9773093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmkukxw_2260894975511828621","name":"AzureBackup_clitest-vmkukxw_2260894975511828621","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:55.7714218Z","changedTime":"2021-04-19T02:59:57.9798884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmbwpy_2260877382003851269","name":"AzureBackup_clitest-vmmbwpy_2260877382003851269","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:14:16.8461273Z","changedTime":"2021-04-19T03:24:18.1698686Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmpobgl_2260824606254262585","name":"AzureBackup_clitest-vmpobgl_2260824606254262585","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.7763942Z","changedTime":"2021-04-19T04:48:16.3770703Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmqzv6i_2260859791250480109","name":"AzureBackup_clitest-vmqzv6i_2260859791250480109","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.8936399Z","changedTime":"2021-04-19T04:47:58.6984875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrtwpn_2261229226023458214","name":"AzureBackup_clitest-vmrtwpn_2261229226023458214","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.7582012Z","changedTime":"2021-04-19T04:47:57.9082721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmsv4ov_2260824606495890296","name":"AzureBackup_clitest-vmsv4ov_2260824606495890296","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.5424491Z","changedTime":"2021-04-19T04:48:15.6671255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmu5dsp_2260842198981971005","name":"AzureBackup_clitest-vmu5dsp_2260842198981971005","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:07:40.0020045Z","changedTime":"2021-04-19T03:17:40.6741316Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmw76iz_2261229225544885407","name":"AzureBackup_clitest-vmw76iz_2261229225544885407","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.3940245Z","changedTime":"2021-04-19T03:00:15.0503048Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmz7nxh_2261088488670144788","name":"AzureBackup_clitest-vmz7nxh_2261088488670144788","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.6522625Z","changedTime":"2021-04-19T03:00:13.8366229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.AppConfiguration/configurationStores/bez-appconfig","name":"bez-appconfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"eastus","createdTime":"2021-04-19T08:38:39.2695045Z","changedTime":"2021-04-19T08:48:57.7529998Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_address_poolt6oxl4koeg3wfjt5mgtbyku627cj35fvd3s4fuuimk7ypr34rzb/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:32:21.5886933Z","changedTime":"2021-04-19T08:42:26.5169434Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:32:23.4384457Z","changedTime":"2021-04-19T07:42:39.8215529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:32:23.5916344Z","changedTime":"2021-04-19T07:42:39.9312305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:18:30.3372951Z","changedTime":"2021-04-19T07:28:38.1015355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:18:36.0313431Z","changedTime":"2021-04-19T07:28:42.5533848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_http_settingskfu5de2vrkapsbx6b5obxwenybozqtgj3je2koogzdutyyhxay/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:34:36.1931932Z","changedTime":"2021-04-19T07:44:42.5763794Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_private_ipzoa2yhqfmhw5qlfxfskzlrb3bt5aywcamkaawmnbbtsbudw7mt6oh/providers/Microsoft.Network/virtualNetworks/ag3Vnet","name":"ag3Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:07.3819292Z","changedTime":"2021-04-19T07:23:13.5402712Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic","tier":"Regional"},"location":"westus","createdTime":"2021-04-19T07:13:46.0989194Z","changedTime":"2021-04-19T07:13:47.4964419Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:46.121184Z","changedTime":"2021-04-19T08:23:52.7013801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T07:14:19.1339652Z","changedTime":"2021-04-19T08:24:26.4272612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:14:25.8282152Z","changedTime":"2021-04-19T08:24:30.4740724Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.DocumentDB/databaseAccounts/clid54s6kmw5lrn","name":"clid54s6kmw5lrn","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"principalId":"788276c6-b598-4e17-8d99-5e2590f60ac2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T08:28:24.6997378Z","changedTime":"2021-04-19T08:42:21.3351228Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.KeyVault/vaults/cliilyurd6vstia","name":"cliilyurd6vstia","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:27:40.7164456Z","changedTime":"2021-04-19T08:37:45.9012352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/loadBalancers/regional_lbdnhcgcr6tzpby","name":"regional_lbdnhcgcr6tzpby","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:25:00.4799061Z","changedTime":"2021-04-19T06:35:01.7092502Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdnhcgcr6tzpby","name":"PublicIPregional_lbdnhcgcr6tzpby","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:24:55.3409752Z","changedTime":"2021-04-19T06:35:00.1460487Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/publicIPAddresses/vgw1-pip","name":"vgw1-pip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westcentralus","createdTime":"2021-04-19T08:06:54.7669945Z","changedTime":"2021-04-19T08:17:14.3106693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworkGateways/vgw1","name":"vgw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westcentralus","createdTime":"2021-04-19T08:07:05.8580788Z","changedTime":"2021-04-19T09:17:11.6310311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westcentralus","createdTime":"2021-04-19T08:06:39.9531253Z","changedTime":"2021-04-19T08:16:57.9750299Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redis72lrbohiall3omaxteflhwvcztjybszy2dxkcknzx66rqo2ymfujgjecjix5l/providers/Microsoft.Cache/Redis/cliredislr23mtndoqdrx6o5","name":"cliredislr23mtndoqdrx6o5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.0410862Z","changedTime":"2021-04-19T07:21:00.4378925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisbd6lg5gsy32xl3zaqq5ers2x3t6d2nkwuspuqt56wlieix7joeu7zadhwq6je/providers/Microsoft.Cache/Redis/cliredisimh4d33g6cdokgtl","name":"cliredisimh4d33g6cdokgtl","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.2312064Z","changedTime":"2021-04-19T07:21:02.0241293Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisfju4rneakqb7nmzfnnnqzmu2yc5kp2myutewvccnkyudlw5mh5heqqb5ifiut/providers/Microsoft.Cache/Redis/cliredisygvhhehhu6blh5u5","name":"cliredisygvhhehhu6blh5u5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:58.778601Z","changedTime":"2021-04-19T07:21:01.5374846Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redist5gc77ersi3mo7qnzre5bpogm7fxqtjwsefaolg2vmoko7suac73dtu7ds4b2/providers/Microsoft.Cache/Redis/cliredisoofqqahr6eh6txte","name":"cliredisoofqqahr6eh6txte","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.172837Z","changedTime":"2021-04-19T07:21:01.9606525Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisuuzbnqjk7xgwae77vgjxythmzoufdmc3o72lk3sycp5jblm5bise7cgg53jab/providers/Microsoft.Cache/Redis/cliredisnoa2jcbl326h65ig","name":"cliredisnoa2jcbl326h65ig","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.4690116Z","changedTime":"2021-04-19T07:21:02.5300058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisyhaknwblib2ekf2effk7iloyxhpbhtjhufc7lb4cs75jkze5r7jywfv4kmoyt/providers/Microsoft.Cache/Redis/cliredis22gxcsv4swgkqjml","name":"cliredis22gxcsv4swgkqjml","type":"Microsoft.Cache/Redis","location":"westus2","zones":["1","2"],"createdTime":"2021-04-19T07:10:58.9197511Z","changedTime":"2021-04-19T07:21:01.4734145Z","provisioningState":"Succeeded","tags":{"test":"tryingzones"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/loadBalancers/testdiagvmssLB","name":"testdiagvmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:15.9821987Z","changedTime":"2021-04-19T09:15:22.4055188Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/publicIPAddresses/testdiagvmssLBPublicIP","name":"testdiagvmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:10.1922185Z","changedTime":"2021-04-19T09:15:20.754921Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/virtualNetworks/testdiagvmssVNET","name":"testdiagvmssVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:15:10.1939456Z","changedTime":"2021-04-19T09:15:21.0264376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:38.1670333Z","changedTime":"2021-04-19T08:42:44.3040878Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:41.7450033Z","changedTime":"2021-04-19T08:40:46.8918827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:45.5339444Z","changedTime":"2021-04-19T08:40:51.3137721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:05.7301369Z","changedTime":"2021-04-19T09:07:08.3166613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway2","name":"gateway2","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:08.8972744Z","changedTime":"2021-04-19T09:18:35.4686487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway3","name":"gateway3","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:11.557161Z","changedTime":"2021-04-19T09:14:39.1945973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:48.9504796Z","changedTime":"2021-04-19T08:40:57.6825258Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet2","name":"myvnet2","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:54.3777449Z","changedTime":"2021-04-19T08:41:01.426181Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet3","name":"myvnet3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:31:00.0358218Z","changedTime":"2021-04-19T08:41:07.0528399Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-19T09:22:42.6780732Z","changedTime":"2021-04-19T09:22:50.4658591Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-19T09:23:57.6298312Z","changedTime":"2021-04-19T09:24:05.0145521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-19T09:23:44.864528Z","changedTime":"2021-04-19T09:24:00.6217374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/managedInstances/clitestmid2cou574uxp","name":"clitestmid2cou574uxp","type":"Microsoft.Sql/managedInstances","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":4},"location":"westeurope","identity":{"principalId":"00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","type":"SystemAssigned"},"createdTime":"2021-04-19T09:24:40.2473544Z","changedTime":"2021-04-19T09:24:51.7662163Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/virtualClusters/VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","name":"VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","type":"Microsoft.Sql/virtualClusters","location":"westeurope","createdTime":"2021-04-19T09:25:56.2100225Z","changedTime":"2021-04-19T09:25:56.2991497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/managedHSMs/clitest-0419","name":"clitest-0419","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"westus","createdTime":"2021-04-19T02:40:41.1532576Z","changedTime":"2021-04-19T02:50:46.9143411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/vaults/clitest-1102","name":"clitest-1102","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:37:34.9372505Z","changedTime":"2021-04-19T02:47:40.6289627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.KeyVault/vaults/clitestulm3hjz742zufyi6c","name":"clitestulm3hjz742zufyi6c","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T06:47:39.2543046Z","changedTime":"2021-04-19T06:57:47.1730965Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz","name":"idnbvrgdcfwfdat3p6pjwjtz","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T06:47:23.7515908Z","changedTime":"2021-04-19T06:57:33.0554325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi","name":"sa1lkyjaomuvduan6lsr5dzi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi/credentials/v2/userassigned?arpid=2cd2e884-2439-4609-a48e-4fa212011f2d&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:48:38.2194019Z","changedTime":"2021-04-19T06:59:29.6097279Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa2zazvqtgsdaarxcvfd6s33","name":"sa2zazvqtgsdaarxcvfd6s33","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"8f710395-b611-4a0d-9f34-d0a216558c81","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T06:49:31.8987391Z","changedTime":"2021-04-19T07:15:17.9888438Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j","name":"sa3rmbj3mt42ockj2tqtuu2j","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"7475c74b-3f37-4980-8896-76a5822ffa1e","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j/credentials/v2/userassigned?arpid=40045fc4-886c-49dd-be91-1bd234338751&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:50:01.9641738Z","changedTime":"2021-04-19T07:00:44.6692425Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T11:05:52.5177916Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/databases/master","name":"clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o","location":"westeurope","createdTime":"2021-04-19T09:31:40.5147795Z","changedTime":"2021-04-19T09:31:40.5778629Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:24:58.8404941Z","changedTime":"2021-04-19T09:26:07.4404903Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/createUnzonedUpdateToZonedDb","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/createUnzonedUpdateToZonedDb","type":"Microsoft.Sql/servers/databases","sku":{"name":"Premium","tier":"Premium","capacity":125},"kind":"v12.0,user","location":"eastus","createdTime":"2021-04-19T09:26:06.6362087Z","changedTime":"2021-04-19T09:29:28.4759481Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/master","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","location":"eastus","createdTime":"2021-04-19T09:26:20.1021931Z","changedTime":"2021-04-19T09:26:20.2284393Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG36LWPM3IJ3TLUHLODHRJ6QMSWAOORPIO4ORUVLVXNXVBAI4SLGEM5TLL7VPBGZAG7/providers/Microsoft.Compute/disks/clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","name":"clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","location":"southeastasia","createdTime":"2021-04-16T09:03:58.1925827Z","changedTime":"2021-04-16T09:13:58.7598058Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","name":"clitest-vmgmhwn","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8829168Z","changedTime":"2021-04-16T09:15:03.3436683Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkInterfaces/clitest-vmgmhwnVMNic","name":"clitest-vmgmhwnVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.8810776Z","changedTime":"2021-04-16T09:13:53.3394306Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkSecurityGroups/clitest-vmgmhwnNSG","name":"clitest-vmgmhwnNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3105323Z","changedTime":"2021-04-16T09:13:48.8252521Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/publicIPAddresses/clitest-vmgmhwnPublicIP","name":"clitest-vmgmhwnPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:47.3074778Z","changedTime":"2021-04-16T09:13:51.5404073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/virtualNetworks/clitest-vmgmhwnVNET","name":"clitest-vmgmhwnVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3164009Z","changedTime":"2021-04-16T09:13:54.712945Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultukoqsmzbf7l","name":"clitest-vaultukoqsmzbf7l","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6071079Z","changedTime":"2021-04-16T09:13:43.0164014Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Storage/storageAccounts/clitestidjdbydl23y6isfnz","name":"clitestidjdbydl23y6isfnz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T09:05:19.7820154Z","changedTime":"2021-04-16T09:15:43.7077284Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3mpot4mmz4pqvpkn27u4t7wyujucwn34bnr5apovxszciewewvk7kkpwwlezlqcjw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgpw7q5kmvtb","name":"clitest-vaultgpw7q5kmvtb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2904101Z","changedTime":"2021-04-19T08:49:43.99702Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3n5py2zcs4gpei2yrnrlx56l2relpjegza7qvv4plsjzez26k2haokm5kqhybcguz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtjcf7jddzi","name":"clitest-vaultrtjcf7jddzi","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:58.4276855Z","changedTime":"2021-04-19T04:44:58.6277651Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.8571891Z","changedTime":"2021-04-19T03:48:54.51151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.Storage/storageAccounts/clitestjppv6zemocoezqllw","name":"clitestjppv6zemocoezqllw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2163643Z","changedTime":"2021-04-19T03:48:52.5725Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.4867428Z","changedTime":"2021-04-19T03:48:53.8372193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.Storage/storageAccounts/clitestu5pvusta54uxmc6sn","name":"clitestu5pvusta54uxmc6sn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2352877Z","changedTime":"2021-04-19T03:48:52.4463911Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:32.4807081Z","changedTime":"2021-04-19T04:09:48.9332771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-2","name":"profile123/cdn-cli-test-2","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:45.7562826Z","changedTime":"2021-04-19T04:10:20.523554Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T11:20:28.2215516Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg623ovxonqoofdgeyej3xqrshx3zw4uukvn6eqkyb3vioc7ylybv6sqtpknt4h5nph/providers/Microsoft.RecoveryServices/vaults/clitest-vault3mcynv26uw7","name":"clitest-vault3mcynv26uw7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2845404Z","changedTime":"2021-04-19T04:44:59.9366875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpqgazhztope","name":"clitest-vaultpqgazhztope","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5330162Z","changedTime":"2021-04-16T13:18:37.6445368Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualHubs/clitestvhub","name":"clitestvhub","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T08:11:46.0560572Z","changedTime":"2021-04-19T08:26:03.4941124Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualWans/clitestvwan","name":"clitestvwan","type":"Microsoft.Network/virtualWans","location":"westus","createdTime":"2021-04-19T08:11:29.2669836Z","changedTime":"2021-04-19T08:21:45.4054235Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/vpnGateways/cligateway","name":"cligateway","type":"Microsoft.Network/vpnGateways","location":"westus","createdTime":"2021-04-19T08:18:15.5299236Z","changedTime":"2021-04-19T09:28:20.5669642Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgatrqh2o7wvc7xtmkufwuxthna2bhqxv5vowcgnf2dy2r7ipozhl57bltjtij2326p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmv33w2by72m","name":"clitest-vaultmv33w2by72m","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.4354446Z","changedTime":"2021-04-19T08:53:04.0516941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.EventHub/namespaces/cliehnamespacedb01","name":"cliehnamespacedb01","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westeurope","createdTime":"2021-04-19T09:24:29.5666937Z","changedTime":"2021-04-19T09:24:33.4521297Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.OperationalInsights/workspaces/laws6zmkf7sgfnchv2b5","name":"laws6zmkf7sgfnchv2b5","type":"Microsoft.OperationalInsights/workspaces","location":"westeurope","createdTime":"2021-04-19T09:21:23.2816462Z","changedTime":"2021-04-19T09:21:40.4215152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:15:33.3690367Z","changedTime":"2021-04-19T09:27:23.2480029Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/databases/master","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","location":"westeurope","createdTime":"2021-04-19T09:17:36.2204648Z","changedTime":"2021-04-19T09:17:36.407869Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Storage/storageAccounts/clitestowfrzpzalrflu2xmk","name":"clitestowfrzpzalrflu2xmk","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:32.7881365Z","changedTime":"2021-04-19T09:27:58.8679956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:10.03155Z","changedTime":"2021-04-19T04:09:25.6209979Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-4","name":"profile123/cdn-cli-test-4","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:23.5981685Z","changedTime":"2021-04-19T04:10:56.4338086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","name":"clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:22:20.3970386Z","changedTime":"2021-04-19T09:23:20.5068571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst/databases/master","name":"clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","location":"eastus","createdTime":"2021-04-19T09:23:43.7488493Z","changedTime":"2021-04-19T09:23:43.8992405Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle/databases/master","name":"clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle","location":"eastus","createdTime":"2021-04-19T09:24:52.1896298Z","changedTime":"2021-04-19T09:24:52.3457614Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbwo5qgjdw44ak7y6db5pg25hlh7llnedxbxtnpqkvallsua7hhometrf4bngqdjgr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultk5h7hxwodbq","name":"clitest-vaultk5h7hxwodbq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.2233349Z","changedTime":"2021-04-19T07:20:51.0715983Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgc655xu4pvrsud7k3pfwxnc7hiql5daey5nhocousvw76xcqszuuthz4ptsaaev7lq/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"northeurope","createdTime":"2021-04-19T03:38:34.2053024Z","changedTime":"2021-04-19T03:48:36.6864387Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclirep1clirecording-licationmgmts","name":"azuredbclirep1clirecording-licationmgmts","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:34:46.3542933Z","changedTime":"2021-04-19T08:44:46.2809564Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-licationmgmt","name":"azuredbclitest-clirecording-licationmgmt","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:21:15.1080006Z","changedTime":"2021-04-19T07:36:17.9676272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-19T08:08:02.2136473Z","changedTime":"2021-04-19T08:23:05.3447444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-5clirecording-mgmtscenari","name":"azuredbclitest-5clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_E2s_v3","tier":"MemoryOptimized","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:13:14.8252846Z","changedTime":"2021-04-19T08:27:16.7474139Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-6clirecording-mgmtscenari","name":"azuredbclitest-6clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:03:49.1264687Z","changedTime":"2021-04-19T08:17:52.254606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-proxyresourcemgmt/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-proxyresourc","name":"azuredbclitest-clirecording-proxyresourc","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:15:39.226806Z","changedTime":"2021-04-19T08:30:42.7405433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-xyresourcemgmtsce/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-xyresourcemg","name":"azuredbclitest-clirecording-xyresourcemg","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:20:22.2044527Z","changedTime":"2021-04-19T07:36:26.43405Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyokf24ijnjysza6zauhdysrwqqoef2cttxnnkr2jq7h36aanigxsw3mqzbgwgtut/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjojjamza56k","name":"clitest-vaultjojjamza56k","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.8142578Z","changedTime":"2021-04-19T04:44:59.4331602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgedvszyrgqx/providers/Microsoft.BotService/botServices/cli3wkgg5xm6ihi","name":"cli3wkgg5xm6ihi","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"sdk","location":"global","createdTime":"2021-04-19T04:20:07.6378467Z","changedTime":"2021-04-19T04:20:08.6289222Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgel7il7fyqlmrrmikjggzotgg33plbuedq3gs7t7avshz7owt56ipmf73yynfya5hc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvjmnh65jfgd","name":"clitest-vaultvjmnh65jfgd","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.3340145Z","changedTime":"2021-04-19T07:01:32.2314584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGFDHL3N5C2QLSIRFEDRHDFZ7SA7HOP6BDCVWUID3JB4EIT5KT46Q6QNQMVWEZFQFHE/providers/Microsoft.Compute/disks/clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","name":"clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","location":"southeastasia","createdTime":"2021-04-19T09:33:09.0356149Z","changedTime":"2021-04-19T09:33:09.256753Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","name":"clitest-vmvfvhd","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T09:33:07.9200047Z","changedTime":"2021-04-19T09:33:08.4535193Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkInterfaces/clitest-vmvfvhdVMNic","name":"clitest-vmvfvhdVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T09:33:07.3222251Z","changedTime":"2021-04-19T09:33:07.5015589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvfvhdNSG","name":"clitest-vmvfvhdNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2253777Z","changedTime":"2021-04-19T09:33:05.8669031Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/publicIPAddresses/clitest-vmvfvhdPublicIP","name":"clitest-vmvfvhdPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T09:33:05.2449767Z","changedTime":"2021-04-19T09:33:06.0809811Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/virtualNetworks/clitest-vmvfvhdVNET","name":"clitest-vmvfvhdVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2519916Z","changedTime":"2021-04-19T09:33:07.0363329Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvxyrektlils","name":"clitest-vaultvxyrektlils","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T09:33:00.0071222Z","changedTime":"2021-04-19T09:33:02.0880586Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfrljmepwlbq3b35hk5otzdgtwh4hqnykbitjgdwnwaj5hh4kdpcvxfc3fevvzovae/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyrzzkrmwmts","name":"clitest-vaultyrzzkrmwmts","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:23:11.9342702Z","changedTime":"2021-04-19T04:33:19.7106115Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T11:06:14.4982585Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus2","createdTime":"2021-04-19T09:25:25.8185965Z","changedTime":"2021-04-19T09:26:14.9480028Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/databases/master","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","location":"eastus2","createdTime":"2021-04-19T09:26:43.8648688Z","changedTime":"2021-04-19T09:26:43.9293152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGHWJQTOOPOZBFXFQ4HDCEY3UNPGOY5OYHQMJISBQOTBA25KNZUCO4C34GZ4ZVMFL4E/providers/Microsoft.Compute/disks/clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","name":"clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","location":"southeastasia","createdTime":"2021-04-16T09:03:56.5691534Z","changedTime":"2021-04-16T09:13:58.921169Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","name":"clitest-vmapciw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.5027178Z","changedTime":"2021-04-16T09:14:21.6793003Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkInterfaces/clitest-vmapciwVMNic","name":"clitest-vmapciwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:55.1089181Z","changedTime":"2021-04-16T09:13:56.3385997Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkSecurityGroups/clitest-vmapciwNSG","name":"clitest-vmapciwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:49.8438874Z","changedTime":"2021-04-16T09:15:54.3167924Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/publicIPAddresses/clitest-vmapciwPublicIP","name":"clitest-vmapciwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:49.8752582Z","changedTime":"2021-04-16T09:15:55.253218Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/virtualNetworks/clitest-vmapciwVNET","name":"clitest-vmapciwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.9424234Z","changedTime":"2021-04-16T09:13:54.8250426Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyhh4qtwrkvr","name":"clitest-vaultyhh4qtwrkvr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6645838Z","changedTime":"2021-04-16T09:13:43.8763025Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.RecoveryServices/vaults/clitest-vaulteubxds4e7dj","name":"clitest-vaulteubxds4e7dj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6705832Z","changedTime":"2021-04-16T13:18:10.7190838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T08:08:26.4794627Z","changedTime":"2021-04-19T08:50:49.5208577Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-7ho446gaojjt","name":"sfrp-cli-kv-7ho446gaojjt","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:06:48.4089367Z","changedTime":"2021-04-19T08:16:50.6104903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","name":"LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:06.9038901Z","changedTime":"2021-04-19T08:18:08.9868829Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:02.8646322Z","changedTime":"2021-04-19T08:18:09.5252072Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:08:02.9381415Z","changedTime":"2021-04-19T08:18:08.2939637Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-7arauzr5fjimrmm","name":"sfrp-cli-7arauzr5fjimrmm","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T08:08:24.0416139Z","changedTime":"2021-04-19T08:18:25.1154695Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/rye7le6arfuf23","name":"rye7le6arfuf23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8544492Z","changedTime":"2021-04-19T08:18:25.585202Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/sflogsrye7le6arfuf22","name":"sflogsrye7le6arfuf22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8499227Z","changedTime":"2021-04-19T08:18:23.6224346Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T04:23:45.3378587Z","changedTime":"2021-04-19T04:34:02.6718194Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-5","name":"profile123/cdn-cli-test-5","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:23:58.6353981Z","changedTime":"2021-04-19T04:34:46.3730465Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjjzlwchml4rqpgltu4xetvrkbckw24tqgnh6lyh4nmri2jlx43q34o27ojb4itvf2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizns75enlc7","name":"clitest-vaultizns75enlc7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.6054519Z","changedTime":"2021-04-19T08:50:03.1189501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T11:20:27.3851127Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGJSMTN6SPFH6TUZ4JYMOUQR33XUEB3LKBBV7BVFOOROY5IO7CD6OE3ZAYN56STPJYN/providers/Microsoft.Compute/disks/clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","name":"clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","location":"southeastasia","createdTime":"2021-04-19T02:47:06.3464877Z","changedTime":"2021-04-19T02:57:06.5849826Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","name":"clitest-vm35jy3","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:04.5675946Z","changedTime":"2021-04-19T02:57:33.6343604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkInterfaces/clitest-vm35jy3VMNic","name":"clitest-vm35jy3VMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:04.2253727Z","changedTime":"2021-04-19T02:57:04.7303352Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkSecurityGroups/clitest-vm35jy3NSG","name":"clitest-vm35jy3NSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9381108Z","changedTime":"2021-04-19T02:57:04.9901724Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/publicIPAddresses/clitest-vm35jy3PublicIP","name":"clitest-vm35jy3PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.9355374Z","changedTime":"2021-04-19T02:57:04.660964Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/virtualNetworks/clitest-vm35jy3VNET","name":"clitest-vm35jy3VNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9402505Z","changedTime":"2021-04-19T02:57:03.600596Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultedt62k7zvhu","name":"clitest-vaultedt62k7zvhu","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6148012Z","changedTime":"2021-04-19T02:56:56.0632835Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Storage/storageAccounts/clitesteq7n3hhs7fyymzakn","name":"clitesteq7n3hhs7fyymzakn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-19T02:48:02.3208104Z","changedTime":"2021-04-19T02:58:25.5376162Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgk32ngz6rpt/providers/Microsoft.BotService/botServices/cli3twndx3klwuc","name":"cli3twndx3klwuc","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2021-04-19T04:19:08.9903602Z","changedTime":"2021-04-19T04:19:09.0445736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-zndeyenhxuzm","name":"sfrp-cli-kv-zndeyenhxuzm","type":"Microsoft.KeyVault/vaults","location":"eastasia","createdTime":"2021-04-19T09:02:45.2710341Z","changedTime":"2021-04-19T09:12:54.5018133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.ServiceFabric/managedclusters/sfrp-cli-hqvjk4ymjsct2m2","name":"sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.ServiceFabric/managedclusters","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:42:19.0449005Z","changedTime":"2021-04-19T08:56:12.1367512Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:24:40.5167652Z","changedTime":"2021-04-19T09:25:53.427644Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/databases/master","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","location":"westeurope","createdTime":"2021-04-19T09:26:10.3316555Z","changedTime":"2021-04-19T09:26:10.3982145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGM36DC7BUAFAB42CIT7NLLSKTFXBC5WWFMMG3NJVH6SWZ4VDE6QXNPOBG5QNUDBA7V/providers/Microsoft.Compute/disks/clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","name":"clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","location":"southeastasia","createdTime":"2021-04-19T02:47:12.0297618Z","changedTime":"2021-04-19T02:57:13.8889984Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","name":"clitest-vmz7nxh","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:10.0372248Z","changedTime":"2021-04-19T02:58:26.6025482Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkInterfaces/clitest-vmz7nxhVMNic","name":"clitest-vmz7nxhVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:06.7445998Z","changedTime":"2021-04-19T02:57:08.3541333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkSecurityGroups/clitest-vmz7nxhNSG","name":"clitest-vmz7nxhNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:01.0281072Z","changedTime":"2021-04-19T02:57:05.3099185Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/publicIPAddresses/clitest-vmz7nxhPublicIP","name":"clitest-vmz7nxhPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:01.0137311Z","changedTime":"2021-04-19T02:57:02.5666554Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/virtualNetworks/clitest-vmz7nxhVNET","name":"clitest-vmz7nxhVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:01.1167585Z","changedTime":"2021-04-19T02:57:04.5860938Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnieezg6dop3","name":"clitest-vaultnieezg6dop3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1615158Z","changedTime":"2021-04-19T02:56:56.4131062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.KeyVault/vaults/clitestgbgy4a3th5o2focmv","name":"clitestgbgy4a3th5o2focmv","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:04:18.3998988Z","changedTime":"2021-04-19T03:14:24.9638051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh","name":"ido7edflxxrxtgkhcdzpmqsh","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:04:07.0287001Z","changedTime":"2021-04-19T03:14:17.0254027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7","name":"sa1oygtk3f2rgngyl7ednxd7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7/credentials/v2/userassigned?arpid=39fbab7e-51f0-482a-aaba-b4715d32b95a&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:05:13.9390184Z","changedTime":"2021-04-19T03:16:00.0850879Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa24bq36e62ve4t6qsd5pa4m","name":"sa24bq36e62ve4t6qsd5pa4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"32411212-1bfc-4377-a464-81139b97956a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:06:04.9375638Z","changedTime":"2021-04-19T03:19:17.777573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit","name":"sa3cmoyiicyb2rp2chp6qgit","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"e5ecc2d8-70c9-4e4f-a6ac-d887bb79c310","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit/credentials/v2/userassigned?arpid=f08cb05b-c19e-4d5e-845a-d7103205d9ed&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:06:30.8695107Z","changedTime":"2021-04-19T03:17:06.6255553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmawiihzv2ztze7gjjesuy2a2de22wkvhmqbqypkyx657qcaqlupqfcauektqibx2t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultorv5ijqllyq","name":"clitest-vaultorv5ijqllyq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6211066Z","changedTime":"2021-04-19T07:02:11.4530709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmijrf6lxqrppiiavxua4ij55yswz2zkjtovuxmmkjjr4p6v3up524pvnbsnkz4tze/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuxa7diukawk","name":"clitest-vaultuxa7diukawk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:10:54.8666061Z","changedTime":"2021-04-19T08:55:34.2659906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-16T09:10:51.1250727Z","changedTime":"2021-04-16T10:33:09.8070652Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-yrih5c4vcy5r","name":"sfrp-cli-kv-yrih5c4vcy5r","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-16T09:08:44.4632337Z","changedTime":"2021-04-16T09:18:51.3408949Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-i2kidudndpc746u-nt1vm","name":"LB-sfrp-cli-i2kidudndpc746u-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:28.119894Z","changedTime":"2021-04-16T09:20:31.4401274Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:17.8056896Z","changedTime":"2021-04-16T09:20:33.3981351Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:10:17.9871721Z","changedTime":"2021-04-16T09:20:34.0384846Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-i2kidudndpc746u","name":"sfrp-cli-i2kidudndpc746u","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-16T09:10:45.7770222Z","changedTime":"2021-04-16T09:20:50.0583514Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/sflogsyuncspwpmbsmk2","name":"sflogsyuncspwpmbsmk2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.7933801Z","changedTime":"2021-04-16T09:20:45.9472008Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/yuncspwpmbsmk3","name":"yuncspwpmbsmk3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.8167741Z","changedTime":"2021-04-16T09:20:46.2126509Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfq5jbtcrfu7ap7hb3wgss7p6sndk3ggf7zidp222u4zmzftbyfu3l3qjs7hquxaj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd2orcsqjviv","name":"clitest-vaultd2orcsqjviv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.9100002Z","changedTime":"2021-04-19T04:44:58.1569906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Verizon"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:46.8684475Z","changedTime":"2021-04-19T04:11:04.6163453Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-3","name":"profile123/cdn-cli-test-3","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:01:00.0469653Z","changedTime":"2021-04-19T04:11:29.6987683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqxr5jrejcigqiu6ydylw2q67f7mbndkgy5lzj7whswg5ir7gqkt42f5xrqdhlokw/providers/Microsoft.RecoveryServices/vaults/clitest-vault6rb74dse5uc","name":"clitest-vault6rb74dse5uc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.9980568Z","changedTime":"2021-04-19T07:21:54.4055143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:26:51.918381Z","changedTime":"2021-04-19T09:28:02.1327584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/db1","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/db1","type":"Microsoft.Sql/servers/databases","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":2},"kind":"v12.0,user,vcore","location":"eastus","createdTime":"2021-04-19T09:32:18.1908253Z","changedTime":"2021-04-19T09:32:19.7524674Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/master","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","location":"eastus","createdTime":"2021-04-19T09:28:15.2026127Z","changedTime":"2021-04-19T09:28:15.3011239Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgoy4whi553iwa7kmtmjqz26xctkpza4kkhgaepo6a2a6gcd6tl66pip3dqyp2ijlp5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultszrwsgnwemz","name":"clitest-vaultszrwsgnwemz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.91819Z","changedTime":"2021-04-19T04:44:59.0494619Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpkodvjufgz3njs6nmlsbm4ji37eo3rvjk72ljemvkfyxlmvv6xhnxt3o6hdhalp7n/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ze7sv5nfpg","name":"clitest-vault6ze7sv5nfpg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:52.2202728Z","changedTime":"2021-04-19T08:22:07.3494606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.KeyVault/vaults/clitestqykmnvpfrwg7fhc72","name":"clitestqykmnvpfrwg7fhc72","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:13:25.5283916Z","changedTime":"2021-04-19T03:23:34.5047324Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk","name":"idlf7yzvyjcim6vktmqf2mmk","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:13:12.1648816Z","changedTime":"2021-04-19T03:23:20.0881312Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri","name":"sa1eyzdihtcwdmy3zmgrkcri","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri/credentials/v2/userassigned?arpid=2620b059-cae9-4a14-8775-b5a2617e2ef5&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:14:23.0842735Z","changedTime":"2021-04-19T03:25:13.8510121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa2pmu4mhob343wjblprsgew","name":"sa2pmu4mhob343wjblprsgew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"50115edd-2717-4a63-9d1d-5e01bb651fff","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:15:16.3686372Z","changedTime":"2021-04-19T03:29:48.3260417Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx","name":"sa373fu4ogh4gfwbtfxe2xtx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"b0d1b1c2-edec-44ff-aa6d-b889a4527690","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx/credentials/v2/userassigned?arpid=8147c02e-ea54-475e-ba84-8f97c8dafe90&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:15:42.8388136Z","changedTime":"2021-04-19T03:26:25.5232679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpwxbk7bnxzhegqk77clydue4pvxlsy5sll6rmqdj54foitnirpvxailoxcvuyh676/providers/Microsoft.Sql/servers/clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3/databases/master","name":"clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpwxbk7bnxzhegqk77clydue4pvxlsy5sll6rmqdj54foitnirpvxailoxcvuyh676/providers/Microsoft.Sql/servers/clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3","location":"eastus","createdTime":"2021-04-19T09:25:57.4487993Z","changedTime":"2021-04-19T09:25:57.5701499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T02:53:49.7088714Z","changedTime":"2021-04-19T04:16:57.0475633Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-wwvqsei4kinc","name":"sfrp-cli-kv-wwvqsei4kinc","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:51:38.3128082Z","changedTime":"2021-04-19T03:01:46.1391553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-shrtab4dbwc6332-nt1vm","name":"LB-sfrp-cli-shrtab4dbwc6332-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:26.7662217Z","changedTime":"2021-04-19T03:03:32.5438524Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:13.3390964Z","changedTime":"2021-04-19T03:03:26.2455166Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:53:13.5865855Z","changedTime":"2021-04-19T03:03:27.0112693Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-shrtab4dbwc6332","name":"sfrp-cli-shrtab4dbwc6332","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T02:53:44.8954233Z","changedTime":"2021-04-19T03:03:51.340017Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/fqgisep4xxtru3","name":"fqgisep4xxtru3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:13.8624481Z","changedTime":"2021-04-19T03:03:41.4770985Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/sflogsfqgisep4xxtru2","name":"sflogsfqgisep4xxtru2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:16.3387857Z","changedTime":"2021-04-19T03:03:42.5798168Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.KeyVault/vaults/clitestzgylz5j4vixpbtlmg","name":"clitestzgylz5j4vixpbtlmg","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T01:54:23.1601375Z","changedTime":"2021-04-19T02:04:34.4452362Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idfltrijgz5jszpkryowtap3","name":"idfltrijgz5jszpkryowtap3","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T01:54:10.6572589Z","changedTime":"2021-04-19T02:04:19.013835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa1zxgyytiatwal3o2mugst4","name":"sa1zxgyytiatwal3o2mugst4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2021-04-19T01:55:22.5505579Z","changedTime":"2021-04-19T02:06:59.3455191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa25exzssxlnzfljlreu2m42","name":"sa25exzssxlnzfljlreu2m42","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T02:08:32.9460929Z","changedTime":"2021-04-19T02:19:07.883237Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","type":"Microsoft.Sql/servers","kind":"v12.0","location":"southeastasia","createdTime":"2021-04-19T09:17:12.9221681Z","changedTime":"2021-04-19T09:27:20.5738924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/cliautomationhs03","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/cliautomationhs03","type":"Microsoft.Sql/servers/databases","sku":{"name":"HS_Gen5","tier":"Hyperscale","family":"Gen5","capacity":8},"kind":"v12.0,user,vcore,hyperscale","location":"southeastasia","createdTime":"2021-04-19T09:21:34.4735873Z","changedTime":"2021-04-19T09:23:55.343175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/master","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","location":"southeastasia","createdTime":"2021-04-19T09:18:40.9969244Z","changedTime":"2021-04-19T09:18:41.0482447Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.RecoveryServices/vaults/clitest-vaultwigajwrefb6","name":"clitest-vaultwigajwrefb6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.0604904Z","changedTime":"2021-04-16T09:13:45.5142525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks","name":"profilebuz7my4tdavvwwgks","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:58:50.5277307Z","changedTime":"2021-04-19T04:09:06.5466804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks/endpoints/cdn-cli-test","name":"profilebuz7my4tdavvwwgks/cdn-cli-test","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:03.5176751Z","changedTime":"2021-04-19T04:09:21.6903446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.KeyVault/vaults/clitestzmkdc2g7bdwvndxd5","name":"clitestzmkdc2g7bdwvndxd5","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T02:19:22.3693562Z","changedTime":"2021-04-19T02:29:29.7793464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k","name":"idm26ifc6yghif3dkebx2m5k","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T02:19:11.123184Z","changedTime":"2021-04-19T02:29:21.1285953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle","name":"sa1bwis4hxlzb4i7htnd4rle","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k":{"principalId":"6d54df4c-e57b-47b9-91ad-f0ef77e64478","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"34ad0627-5891-4909-84aa-d8b0a56b32bb","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle/credentials/v2/userassigned?arpid=281e64c3-8e80-4aee-92ce-8ee9450ce46d&uaid=34ad0627-5891-4909-84aa-d8b0a56b32bb","certRenewAfter":"2021-06-04T02:14:00Z"}}},"createdTime":"2021-04-19T02:20:17.7238703Z","changedTime":"2021-04-19T02:32:11.3193942Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjavixfqwz6cxvpkn6u54ajk3fa6jjz4ruxuohjeynusnabiadcmmropup73v5lqw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultubxs2tf7fa7","name":"clitest-vaultubxs2tf7fa7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1329828Z","changedTime":"2021-04-19T02:56:57.9006269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjo3k2nafi2l6bzlrchsnxwaf27h3bxahipmj2n4uslifbcrogipfny66bcuyel6z/providers/Microsoft.Storage/storageAccounts/clitestlrjctts36gudiaq4a","name":"clitestlrjctts36gudiaq4a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:55.8896552Z","changedTime":"2021-04-19T09:28:22.2414901Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsuedfxc436s","name":"clitest-vaultsuedfxc436s","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.05224Z","changedTime":"2021-04-16T09:13:43.8501023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVPS3SF22MUKYRZD7X6W4AJS5DK7VYINVDNFFR2VZTO7VSEWLDKAF4YTQ3YFLABWRC/providers/Microsoft.Compute/disks/clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","name":"clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","location":"southeastasia","createdTime":"2021-04-16T09:03:58.0366389Z","changedTime":"2021-04-16T09:14:01.0311978Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","name":"clitest-vmb7duk","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8945379Z","changedTime":"2021-04-16T09:14:45.4494013Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkInterfaces/clitest-vmb7dukVMNic","name":"clitest-vmb7dukVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.9857642Z","changedTime":"2021-04-16T09:13:54.3182297Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmb7dukNSG","name":"clitest-vmb7dukNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0002004Z","changedTime":"2021-04-16T09:13:52.2109451Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/publicIPAddresses/clitest-vmb7dukPublicIP","name":"clitest-vmb7dukPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.0542928Z","changedTime":"2021-04-16T09:13:51.7128448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/virtualNetworks/clitest-vmb7dukVNET","name":"clitest-vmb7dukVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0912896Z","changedTime":"2021-04-16T09:13:54.3222293Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.RecoveryServices/vaults/clitest-vault6hmnpzruvsg","name":"clitest-vault6hmnpzruvsg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5286583Z","changedTime":"2021-04-16T09:13:44.7220246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVT3XX3E4UWHBUQ3PMTKF72FL674USGXLHEZWREH6VDF4JBSVNF4PWOHLB7HYYJ6QY/providers/Microsoft.Compute/disks/clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","name":"clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","location":"southeastasia","createdTime":"2021-04-19T02:47:07.5473352Z","changedTime":"2021-04-19T02:57:10.5017448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","name":"clitest-vmkukxw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.1104707Z","changedTime":"2021-04-19T02:57:34.4453118Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkInterfaces/clitest-vmkukxwVMNic","name":"clitest-vmkukxwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.3593831Z","changedTime":"2021-04-19T02:57:03.9145176Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkSecurityGroups/clitest-vmkukxwNSG","name":"clitest-vmkukxwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2141878Z","changedTime":"2021-04-19T02:57:04.5773591Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/publicIPAddresses/clitest-vmkukxwPublicIP","name":"clitest-vmkukxwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.1999328Z","changedTime":"2021-04-19T02:57:03.1615589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/virtualNetworks/clitest-vmkukxwVNET","name":"clitest-vmkukxwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2118732Z","changedTime":"2021-04-19T02:57:03.1688631Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultj24sii3xnu7","name":"clitest-vaultj24sii3xnu7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.2886417Z","changedTime":"2021-04-19T02:56:56.6193875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/databases/master","name":"clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t","location":"eastus","createdTime":"2021-04-19T09:29:57.0385044Z","changedTime":"2021-04-19T09:29:57.2182109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgycv2jxbfj6qifbexp7bdrd6dm2aevbj2p35klmxomh5h5z4243z67psnbkgllqeab/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdvn7euhxrai","name":"clitest-vaultdvn7euhxrai","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.9990328Z","changedTime":"2021-04-19T08:52:53.7982976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:25:43.1368905Z","changedTime":"2021-04-19T09:26:54.3358968Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/databases/master","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","location":"westeurope","createdTime":"2021-04-19T09:27:11.9381343Z","changedTime":"2021-04-19T09:27:12.1580988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGZTYT5OGTTZ2MMNFAXYQCCDIPXXLIEJFHINF2FFGLJNLHYWAXXMZZIS5HYGY3Y5YP4/providers/Microsoft.Compute/disks/clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","name":"clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","location":"southeastasia","createdTime":"2021-04-19T02:47:08.7686258Z","changedTime":"2021-04-19T02:57:08.9533791Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","name":"clitest-vmw76iz","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.4885903Z","changedTime":"2021-04-19T02:58:24.5889947Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkInterfaces/clitest-vmw76izVMNic","name":"clitest-vmw76izVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.4458714Z","changedTime":"2021-04-19T02:57:03.6078042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkSecurityGroups/clitest-vmw76izNSG","name":"clitest-vmw76izNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2374084Z","changedTime":"2021-04-19T02:57:03.5011187Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/publicIPAddresses/clitest-vmw76izPublicIP","name":"clitest-vmw76izPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.2606346Z","changedTime":"2021-04-19T02:57:04.4353904Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/virtualNetworks/clitest-vmw76izVNET","name":"clitest-vmw76izVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2466786Z","changedTime":"2021-04-19T02:57:04.719598Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsn5dn6zaabo","name":"clitest-vaultsn5dn6zaabo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1845444Z","changedTime":"2021-04-19T02:56:57.8095873Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-EUS/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-19T07:48:50.6373195Z","changedTime":"2021-04-19T07:58:50.909066Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-WUS2/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","type":"Microsoft.OperationalInsights/workspaces","location":"westus2","createdTime":"2021-04-19T02:28:41.9904009Z","changedTime":"2021-04-19T02:38:43.7625917Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2021-04-19T02:28:49.8876091Z","changedTime":"2021-04-19T02:38:51.6570957Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2021-04-19T07:39:35.7546785Z","changedTime":"2021-04-19T07:49:37.1903666Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:05:47.283833Z","changedTime":"2021-04-19T06:16:11.8916737Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d2","name":"d2","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:12:05.9492262Z","changedTime":"2021-04-19T06:22:31.3901315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k1","name":"k1","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:06:23.8921344Z","changedTime":"2021-04-19T02:16:28.7769194Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k2","name":"k2","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:09:29.3233599Z","changedTime":"2021-04-19T02:19:35.0586728Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-3n75y/providers/Microsoft.HDInsight/clusters/hdicli-n7247mo52","name":"hdicli-n7247mo52","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:24:48.9810882Z","changedTime":"2021-04-19T08:25:02.3935153Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-n54fg/providers/Microsoft.HDInsight/clusters/hdicli-ck64kxr3c","name":"hdicli-ck64kxr3c","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:18:39.6020317Z","changedTime":"2021-04-19T09:28:47.0164046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-o67mv/providers/Microsoft.HDInsight/clusters/hdicli-ffzqxm4jf","name":"hdicli-ffzqxm4jf","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:25:32.9794328Z","changedTime":"2021-04-19T08:25:44.5603462Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-19T08:02:41.7377813Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"025c617e-cf87-4350-aee9-726d3db7c4d4","clientId":"7c3db5ff-cbb6-4d62-bb98-431736298370"}}},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"3a32cb7b-aed0-47ea-a32d-8615dacb894c","clientId":"72a98aad-a4dc-4cc0-97d2-c62ff0c6b1e6"}}},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"29a32b37-c958-424e-aabb-9ad27c486d63","clientId":"2d5b384e-4a64-46d3-ac72-6e6b7eefba56"}}},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"24de7e4c-58ba-4337-84cf-531624ba527b","clientId":"0bed8c94-c140-40e2-bbbf-3e89c26a7933"}}},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"701d4d1b-69d2-4611-a486-22d22b130d94","clientId":"c7d8d16d-32e7-4bd8-9b97-880b4f9d56b0"}}},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"9c00f972-5c39-432f-a11a-2f85d233e81b","clientId":"f60d1402-85dd-4eca-97a3-fbde0a1a5dfb"}}},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"19fc254d-dc12-4561-b3ce-af0fe556da17","clientId":"a235bd5a-d325-4459-bdac-455b8ef1f36e"}}},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"fed69d01-0358-4340-bc81-f15f246cecd7","clientId":"84341ca7-dd44-401a-99b3-0b8ed7311b1e"}}},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jf-test/providers/Microsoft.ServiceBus/namespaces/jf-namespace","name":"jf-namespace","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T09:10:02.2224116Z","changedTime":"2021-04-19T09:21:50.7729229Z","provisioningState":"Succeeded","tags":{"{''tag1":"value1''}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/jiasli-cli-dev/providers/microsoft.managedidentity/userassignedidentities/jlid1":{"principalId":"2fdcd421-c744-440d-b253-3daf68c697eb","clientId":"da95e381-d7ab-4fdc-8047-2457909c723b"}}},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/applicationGateways/ag","name":"ag","type":"Microsoft.Network/applicationGateways","location":"westus","createdTime":"2021-04-19T02:38:57.7104426Z","changedTime":"2021-04-19T06:11:14.4211213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/gateway_ip","name":"gateway_ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T02:37:56.9899099Z","changedTime":"2021-04-19T02:48:13.0193172Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/agVnet","name":"agVnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:38:42.7779781Z","changedTime":"2021-04-19T02:48:54.8112679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool":{"principalId":"bc0653aa-4310-4815-b6b6-e32ce13113d7","clientId":"d8fc3aad-b983-4520-98b9-74576d95ded9"}}},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool":{"principalId":"a7fa3b2a-a999-46a5-8a9c-c0d0a39ddc26","clientId":"bd7ece5e-69c5-4f71-9ca4-d62271460081"}}},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool":{"principalId":"8c082ab4-e02b-454e-b93b-22f93186b17c","clientId":"7a265029-9abf-4356-8b38-78dbe696cf57"}}},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool":{"principalId":"0a6b7869-1b6d-4e66-9499-4bc5f4d216d7","clientId":"c4721872-6504-4029-801c-7f62782f07fc"}}},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool":{"principalId":"d2dea38e-1f21-4f9c-9b0f-135df5dc4f68","clientId":"3a226aa6-08d9-4375-a06b-8f32f5ac7ef5"}}},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool":{"principalId":"e61d4772-fea2-4ffb-a9b1-50577d53abbd","clientId":"4700f809-abf4-410c-aab9-0b9ea6f8effb"}}},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool":{"principalId":"f3b5c4b8-eb5a-4194-9d3c-b52d2ba840ec","clientId":"3d092bfd-d0e2-461b-b066-927f47dbcdb2"}}},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_e6bb8572c81949938565e11a02e143df","name":"vm_disk1_e6bb8572c81949938565e11a02e143df","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-19T03:20:27.5290086Z","changedTime":"2021-04-19T03:30:27.9380762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2":{"principalId":"ca3b63bb-2720-4a80-8b27-5c2a910ab337","clientId":"6a54d9f7-eb32-48e1-890b-ced8039a28aa"}}},"createdTime":"2021-04-19T03:20:25.7463989Z","changedTime":"2021-04-19T04:02:00.0943857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-19T03:49:31.8128826Z","changedTime":"2021-04-19T03:59:40.8952572Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-19T03:20:21.7332166Z","changedTime":"2021-04-19T06:40:07.6125254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-19T03:20:07.6484362Z","changedTime":"2021-04-19T03:30:20.6910889Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-19T03:20:07.6699177Z","changedTime":"2021-04-19T03:30:22.259849Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-19T03:20:07.8743759Z","changedTime":"2021-04-19T03:30:21.3860899Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastasia","name":"NetworkWatcher_eastasia","type":"Microsoft.Network/networkWatchers","location":"eastasia","createdTime":"2021-04-19T08:09:27.8904392Z","changedTime":"2021-04-19T08:19:35.3631932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-19T07:31:00.224823Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/connectionMonitors/CMv2-01","name":"NetworkWatcher_eastus/CMv2-01","type":"Microsoft.Network/networkWatchers/connectionMonitors","location":"eastus","createdTime":"2021-04-19T07:48:48.6964748Z","changedTime":"2021-04-19T08:37:59.9573763Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/flowLogs/flow_log_test","name":"NetworkWatcher_eastus/flow_log_test","type":"Microsoft.Network/networkWatchers/flowLogs","location":"eastus","createdTime":"2021-04-19T07:48:02.1062916Z","changedTime":"2021-04-19T07:48:04.1861892Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-19T07:31:00.2819037Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-19T07:24:07.3758082Z","changedTime":"2021-04-19T07:34:09.7140807Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTY0IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVTFCVGtGSFJVUkpSRVZPVkVsVVdUb3lSbFZUUlZKQlUxTkpSMDVGUkVsRVJVNVVTVlJKUlZNNk1rWlJTVUZPVjBWT1NVUkZUbFJKVkZrdFJVRlRWRlZUIn0%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '488600' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:17 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTY0IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVTFCVGtGSFJVUkpSRVZPVkVsVVdUb3lSbFZUUlZKQlUxTkpSMDVGUkVsRVJVNVVTVlJKUlZNNk1rWlJTVUZPVjBWT1NVUkZUbFJKVkZrdFJVRlRWRlZUIn0%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","name":"vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.1966299Z","changedTime":"2021-04-19T07:40:06.5170303Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","name":"vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2132952Z","changedTime":"2021-04-19T07:40:07.2044281Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","name":"vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2091938Z","changedTime":"2021-04-19T07:40:06.9436767Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","name":"vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.3635314Z","changedTime":"2021-04-19T07:40:06.6261328Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk1_7036e05d00e040d8baaedede949e986a","name":"vm3980781_disk1_7036e05d00e040d8baaedede949e986a","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7385167Z","changedTime":"2021-04-19T07:22:02.372801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","name":"vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7888523Z","changedTime":"2021-04-19T07:22:02.1120383Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","name":"vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7476848Z","changedTime":"2021-04-19T07:22:02.2920907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","name":"vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7731014Z","changedTime":"2021-04-19T07:22:00.9454043Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","name":"vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.8969407Z","changedTime":"2021-04-19T07:22:00.9946055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/clusters/eventhubs-clus1-52p7","name":"eventhubs-clus1-52p7","type":"Microsoft.EventHub/clusters","sku":{"name":"Dedicated","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:44.2233646Z","changedTime":"2021-04-19T05:09:52.8595837Z","provisioningState":"Succeeded","tags":{"tag2":"value2"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/namespaces/eventhubs-nsclihh5fm","name":"eventhubs-nsclihh5fm","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:47.4949708Z","changedTime":"2021-04-19T05:08:49.5531237Z","provisioningState":"Succeeded","tags":{"{tag1":"value1}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-b7p4me5w3fm4v5ojterc5bon5uo5wbsmfhjxwdy5xwh42eurktn4sq3jdpe3raw6hjcsiww2bzn/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T10:17:20.5414426Z","changedTime":"2021-04-16T10:27:22.5824066Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:51.5333228Z","changedTime":"2021-04-16T10:28:52.8985143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:54.4690406Z","changedTime":"2021-04-16T10:28:55.7733108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-nr5t5tkrd3dfy5s3cdogjaul6vgau6zk3z2me6jepz3d2cmx6nj5vegeortzqh7xuzbvca6ok3l/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:08:09.5132813Z","changedTime":"2021-04-16T10:18:11.3260431Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-uprrmtmadxtglxidnidulnmwy6n6sfcqy2ieu5lzx7d3veixu2tmw4cwy4e4xzzk4hc3fcc6pcq/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:06:09.7360243Z","changedTime":"2021-04-16T10:16:11.5409437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ywtpgrr2wj4otjy2rml2yj3aqrrulvu55fcw3lqxna325xn4oga75gd4cjacd54u6gsmxafubco/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T09:55:44.8681585Z","changedTime":"2021-04-16T10:05:47.4324327Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-z2n6tjylaptobeb6qbnwfmgrjkzcq2eartmrevz2wtpszn5atgevjfzql4k5mzczomavumgwvxr/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:44:26.8175499Z","changedTime":"2021-04-16T09:54:28.5628695Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zpcge3ymst4galvq3izu3vyspbffzif3agefhirk52v6tudwfrxyufywqtiffjrseqnwh3xh4ju/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:46:28.3216664Z","changedTime":"2021-04-16T09:56:30.3702545Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:14.8539307Z","changedTime":"2021-04-16T10:07:16.7949574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:16.6411265Z","changedTime":"2021-04-16T10:07:18.8446376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Compute/virtualMachineScaleSets/pnt","name":"pnt","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2","tier":"Standard","capacity":5},"location":"eastasia","createdTime":"2021-04-19T08:48:31.5154262Z","changedTime":"2021-04-19T09:13:52.0102414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-hqvjk4ymjsct2m2","name":"LB-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:31.9349613Z","changedTime":"2021-04-19T08:55:32.08355Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/networkSecurityGroups/SF-NSG","name":"SF-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2021-04-19T08:45:25.8495007Z","changedTime":"2021-04-19T08:55:29.1238361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/publicIPAddresses/PublicIP-sfrp-cli-hqvjk4ymjsct2m2","name":"PublicIP-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:25.8393717Z","changedTime":"2021-04-19T08:56:00.5127966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/virtualNetworks/VNet-sfrp-cli-hqvjk4ymjsct2m2","name":"VNet-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2021-04-19T08:45:27.7827409Z","changedTime":"2021-04-19T08:55:34.1294128Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Storage/storageAccounts/sfmcwr73kjjku7u2a","name":"sfmcwr73kjjku7u2a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2021-04-19T08:45:25.8065311Z","changedTime":"2021-04-19T08:56:00.5177756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappvullq2rwvcrbi/providers/Microsoft.Network/virtualNetworks/swiftname63g6wvqkgvmodve","name":"swiftname63g6wvqkgvmodve","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T07:56:32.9282188Z","changedTime":"2021-04-19T08:06:41.0624174Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappykvmvassqkbkz/providers/Microsoft.Network/virtualNetworks/swiftname2ps6zotu23xidfe","name":"swiftname2ps6zotu23xidfe","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T03:20:28.6793668Z","changedTime":"2021-04-19T03:30:44.1605022Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-17T08:42:05.4240675Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/VN1_GROUP/providers/Microsoft.Compute/disks/vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","name":"vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","location":"eastus","createdTime":"2021-04-16T11:23:01.5707345Z","changedTime":"2021-04-16T11:33:01.944692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn2","name":"vn2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn2","location":"eastus","createdTime":"2021-04-16T11:35:20.1084868Z","changedTime":"2021-04-16T11:45:49.9008822Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn3","name":"vn3","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:38:30.0693076Z","changedTime":"2021-04-16T11:48:40.8049503Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn4","name":"vn4","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:39:09.2060209Z","changedTime":"2021-04-16T11:49:20.8552559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/snapshots/mcr","name":"mcr","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_ZRS","tier":"Standard"},"location":"eastus","createdTime":"2021-04-16T11:33:20.7879295Z","changedTime":"2021-04-16T11:43:33.8263068Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","name":"vn1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-16T11:23:00.0676719Z","changedTime":"2021-04-16T11:35:49.2799302Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn1584","name":"vn1584","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:22:57.6120101Z","changedTime":"2021-04-16T11:32:59.3802669Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn2993","name":"vn2993","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:36:27.642062Z","changedTime":"2021-04-16T11:46:32.1662446Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn3965","name":"vn3965","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:39:41.1647879Z","changedTime":"2021-04-16T11:49:44.302433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn4847","name":"vn4847","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:40:15.5960995Z","changedTime":"2021-04-16T11:50:19.0557899Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn1-nsg","name":"vn1-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:22:50.8844497Z","changedTime":"2021-04-16T11:32:57.9018339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn2-nsg","name":"vn2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:36:21.582964Z","changedTime":"2021-04-16T11:46:28.6185111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn3-nsg","name":"vn3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:39:35.2059082Z","changedTime":"2021-04-16T11:49:42.7216313Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn4-nsg","name":"vn4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:40:08.9335296Z","changedTime":"2021-04-16T11:50:15.4250071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn1-ip","name":"vn1-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:22:50.8880508Z","changedTime":"2021-04-16T11:32:59.0230002Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn2-ip","name":"vn2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:36:21.5799163Z","changedTime":"2021-04-16T11:46:27.3333311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn3-ip","name":"vn3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:39:35.2088513Z","changedTime":"2021-04-16T11:49:43.2079037Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn4-ip","name":"vn4-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:40:08.9293917Z","changedTime":"2021-04-16T11:52:16.7112272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/virtualNetworks/vn1_group-vnet","name":"vn1_group-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-16T11:22:50.9665105Z","changedTime":"2021-04-16T11:32:59.2963267Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/azureFirewalls/firewall-yyc","name":"firewall-yyc","type":"Microsoft.Network/azureFirewalls","location":"eastus2","createdTime":"2021-04-19T09:15:39.9172072Z","changedTime":"2021-04-19T09:25:55.5399056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/p2sVpnGateways/pvg-yyc","name":"pvg-yyc","type":"Microsoft.Network/p2sVpnGateways","location":"eastus2","createdTime":"2021-04-19T06:28:17.8009474Z","changedTime":"2021-04-19T07:38:26.2014501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2","createdTime":"2021-04-19T06:11:54.6587464Z","changedTime":"2021-04-19T06:25:53.5321654Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub-yyc","name":"vhub-yyc","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T06:05:34.3842152Z","changedTime":"2021-04-19T06:19:25.357434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualWans/vwan-yyc","name":"vwan-yyc","type":"Microsoft.Network/virtualWans","location":"eastus2","createdTime":"2021-04-19T06:05:09.9595861Z","changedTime":"2021-04-19T06:15:29.1267966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/vpnServerConfigurations/vsc-yyc","name":"vsc-yyc","type":"Microsoft.Network/vpnServerConfigurations","location":"eastus2","createdTime":"2021-04-19T06:27:01.4121158Z","changedTime":"2021-04-19T06:37:21.6505996Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-17T07:02:26.0736317Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T09:54:31.0574215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/ugyuftdf","name":"ugyuftdf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T06:44:35.3916861Z","changedTime":"2021-04-19T06:55:08.8615313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '112591' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:17 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001","name":"cli_test_resource_scenario000001","location":"southcentralus","tags":{"product":"azurecli","cause":"automation","date":"2021-04-19T09:33:14Z"},"properties":{"provisioningState":"Succeeded"}}' - headers: - cache-control: - - no-cache - content-length: - - '392' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:18 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"location": "southcentralus", "tags": {"cli-test": "test"}, "properties": - {"addressSpace": {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {}, "subnets": - [{"name": "subnet-000003", "properties": {"addressPrefix": "10.0.0.0/24"}}]}}' - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - Content-Length: - - '254' - Content-Type: - - application/json - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"09687301-859a-45bb-ac6c-6190444e0a23\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Updating\",\r\n \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"09687301-859a-45bb-ac6c-6190444e0a23\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Updating\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/e87256b2-5901-461e-b8a0-0f0753dfed5f?api-version=2017-10-01 - cache-control: - - no-cache - content-length: - - '1415' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 16ffac38-eb2b-46ec-8728-4786cba4df9a - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/e87256b2-5901-461e-b8a0-0f0753dfed5f?api-version=2017-10-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - fd21fdf8-c50e-4c05-9d49-ead7902bd6b0 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - network vnet create - Connection: - - keep-alive - ParameterSetName: - - -g -n --subnet-name --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-network/18.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2017-10-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n }\r\n ],\r\n \"virtualNetworkPeerings\": - [],\r\n \"enableDdosProtection\": false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1417' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:30 GMT - etag: - - W/"1fba5106-b170-44a3-b64a-e4d2e6bc171e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 2244b933-f3c4-4eb6-aa49-6ef63f2e257b - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm26re6_2261088488855263421","name":"AzureBackup_clitest-vm26re6_2261088488855263421","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:26:29.1204485Z","changedTime":"2021-04-19T04:36:29.829373Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3324p_2261106080172620846","name":"AzureBackup_clitest-vm3324p_2261106080172620846","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:40.2857914Z","changedTime":"2021-04-19T03:18:41.6848015Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm35jy3_2261141265524437188","name":"AzureBackup_clitest-vm35jy3_2261141265524437188","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:05.678983Z","changedTime":"2021-04-19T02:59:06.0393385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm6fvdn_2261053303720667753","name":"AzureBackup_clitest-vm6fvdn_2261053303720667753","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:53.5777624Z","changedTime":"2021-04-19T03:18:54.9324571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vma264i_2261141265111804690","name":"AzureBackup_clitest-vma264i_2261141265111804690","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:40.9775125Z","changedTime":"2021-04-16T09:16:41.1595311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmapciw_2260859791356008235","name":"AzureBackup_clitest-vmapciw_2260859791356008235","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:41.556148Z","changedTime":"2021-04-16T09:16:41.7225567Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmb7duk_2261088489774212355","name":"AzureBackup_clitest-vmb7duk_2261088489774212355","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:43.285658Z","changedTime":"2021-04-16T09:16:44.156077Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmd2aii_2261229225878424060","name":"AzureBackup_clitest-vmd2aii_2261229225878424060","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:09.2143666Z","changedTime":"2021-04-19T04:47:09.5137293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmdcma5_2261158858213169159","name":"AzureBackup_clitest-vmdcma5_2261158858213169159","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.7131897Z","changedTime":"2021-04-19T03:00:14.4389376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmgmhwn_2261141266250633839","name":"AzureBackup_clitest-vmgmhwn_2261141266250633839","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:07:13.480346Z","changedTime":"2021-04-16T09:17:14.8053716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmj6du6_2261158857934913237","name":"AzureBackup_clitest-vmj6du6_2261158857934913237","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:42.1518997Z","changedTime":"2021-04-16T09:16:43.9773093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmkukxw_2260894975511828621","name":"AzureBackup_clitest-vmkukxw_2260894975511828621","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:55.7714218Z","changedTime":"2021-04-19T02:59:57.9798884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmbwpy_2260877382003851269","name":"AzureBackup_clitest-vmmbwpy_2260877382003851269","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:14:16.8461273Z","changedTime":"2021-04-19T03:24:18.1698686Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmpobgl_2260824606254262585","name":"AzureBackup_clitest-vmpobgl_2260824606254262585","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.7763942Z","changedTime":"2021-04-19T04:48:16.3770703Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmqzv6i_2260859791250480109","name":"AzureBackup_clitest-vmqzv6i_2260859791250480109","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.8936399Z","changedTime":"2021-04-19T04:47:58.6984875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrtwpn_2261229226023458214","name":"AzureBackup_clitest-vmrtwpn_2261229226023458214","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.7582012Z","changedTime":"2021-04-19T04:47:57.9082721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmsv4ov_2260824606495890296","name":"AzureBackup_clitest-vmsv4ov_2260824606495890296","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.5424491Z","changedTime":"2021-04-19T04:48:15.6671255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmu5dsp_2260842198981971005","name":"AzureBackup_clitest-vmu5dsp_2260842198981971005","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:07:40.0020045Z","changedTime":"2021-04-19T03:17:40.6741316Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmw76iz_2261229225544885407","name":"AzureBackup_clitest-vmw76iz_2261229225544885407","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.3940245Z","changedTime":"2021-04-19T03:00:15.0503048Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmz7nxh_2261088488670144788","name":"AzureBackup_clitest-vmz7nxh_2261088488670144788","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.6522625Z","changedTime":"2021-04-19T03:00:13.8366229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.AppConfiguration/configurationStores/bez-appconfig","name":"bez-appconfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"eastus","createdTime":"2021-04-19T08:38:39.2695045Z","changedTime":"2021-04-19T08:48:57.7529998Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_address_poolt6oxl4koeg3wfjt5mgtbyku627cj35fvd3s4fuuimk7ypr34rzb/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:32:21.5886933Z","changedTime":"2021-04-19T08:42:26.5169434Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:32:23.4384457Z","changedTime":"2021-04-19T07:42:39.8215529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:32:23.5916344Z","changedTime":"2021-04-19T07:42:39.9312305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:18:30.3372951Z","changedTime":"2021-04-19T07:28:38.1015355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:18:36.0313431Z","changedTime":"2021-04-19T07:28:42.5533848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_http_settingskfu5de2vrkapsbx6b5obxwenybozqtgj3je2koogzdutyyhxay/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:34:36.1931932Z","changedTime":"2021-04-19T07:44:42.5763794Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_private_ipzoa2yhqfmhw5qlfxfskzlrb3bt5aywcamkaawmnbbtsbudw7mt6oh/providers/Microsoft.Network/virtualNetworks/ag3Vnet","name":"ag3Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:07.3819292Z","changedTime":"2021-04-19T07:23:13.5402712Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic","tier":"Regional"},"location":"westus","createdTime":"2021-04-19T07:13:46.0989194Z","changedTime":"2021-04-19T07:13:47.4964419Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:46.121184Z","changedTime":"2021-04-19T08:23:52.7013801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T07:14:19.1339652Z","changedTime":"2021-04-19T08:24:26.4272612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:14:25.8282152Z","changedTime":"2021-04-19T08:24:30.4740724Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockeyeph6urdiahepybvmy4ii4czth2sauccfq7vcuz/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcexcsufihmqf36rwkp","name":"cli.lock.rsrcexcsufihmqf36rwkp","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:17.9378773Z","changedTime":"2021-04-19T09:33:30.7741653Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.DocumentDB/databaseAccounts/clid54s6kmw5lrn","name":"clid54s6kmw5lrn","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"principalId":"788276c6-b598-4e17-8d99-5e2590f60ac2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T08:28:24.6997378Z","changedTime":"2021-04-19T08:42:21.3351228Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.KeyVault/vaults/cliilyurd6vstia","name":"cliilyurd6vstia","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:27:40.7164456Z","changedTime":"2021-04-19T08:37:45.9012352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/loadBalancers/regional_lbdnhcgcr6tzpby","name":"regional_lbdnhcgcr6tzpby","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:25:00.4799061Z","changedTime":"2021-04-19T06:35:01.7092502Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdnhcgcr6tzpby","name":"PublicIPregional_lbdnhcgcr6tzpby","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:24:55.3409752Z","changedTime":"2021-04-19T06:35:00.1460487Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3","name":"cli-lock-vnetiqhig5nuz5cknoba3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:18.2570526Z","changedTime":"2021-04-19T09:33:29.8152178Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz","name":"cli-lock-vnetrouxnni46r26omhqz","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:18.586857Z","changedTime":"2021-04-19T09:33:30.4989141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/publicIPAddresses/vgw1-pip","name":"vgw1-pip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westcentralus","createdTime":"2021-04-19T08:06:54.7669945Z","changedTime":"2021-04-19T08:17:14.3106693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworkGateways/vgw1","name":"vgw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westcentralus","createdTime":"2021-04-19T08:07:05.8580788Z","changedTime":"2021-04-19T09:17:11.6310311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westcentralus","createdTime":"2021-04-19T08:06:39.9531253Z","changedTime":"2021-04-19T08:16:57.9750299Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redis72lrbohiall3omaxteflhwvcztjybszy2dxkcknzx66rqo2ymfujgjecjix5l/providers/Microsoft.Cache/Redis/cliredislr23mtndoqdrx6o5","name":"cliredislr23mtndoqdrx6o5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.0410862Z","changedTime":"2021-04-19T07:21:00.4378925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisbd6lg5gsy32xl3zaqq5ers2x3t6d2nkwuspuqt56wlieix7joeu7zadhwq6je/providers/Microsoft.Cache/Redis/cliredisimh4d33g6cdokgtl","name":"cliredisimh4d33g6cdokgtl","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.2312064Z","changedTime":"2021-04-19T07:21:02.0241293Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisfju4rneakqb7nmzfnnnqzmu2yc5kp2myutewvccnkyudlw5mh5heqqb5ifiut/providers/Microsoft.Cache/Redis/cliredisygvhhehhu6blh5u5","name":"cliredisygvhhehhu6blh5u5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:58.778601Z","changedTime":"2021-04-19T07:21:01.5374846Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redist5gc77ersi3mo7qnzre5bpogm7fxqtjwsefaolg2vmoko7suac73dtu7ds4b2/providers/Microsoft.Cache/Redis/cliredisoofqqahr6eh6txte","name":"cliredisoofqqahr6eh6txte","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.172837Z","changedTime":"2021-04-19T07:21:01.9606525Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisuuzbnqjk7xgwae77vgjxythmzoufdmc3o72lk3sycp5jblm5bise7cgg53jab/providers/Microsoft.Cache/Redis/cliredisnoa2jcbl326h65ig","name":"cliredisnoa2jcbl326h65ig","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.4690116Z","changedTime":"2021-04-19T07:21:02.5300058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisyhaknwblib2ekf2effk7iloyxhpbhtjhufc7lb4cs75jkze5r7jywfv4kmoyt/providers/Microsoft.Cache/Redis/cliredis22gxcsv4swgkqjml","name":"cliredis22gxcsv4swgkqjml","type":"Microsoft.Cache/Redis","location":"westus2","zones":["1","2"],"createdTime":"2021-04-19T07:10:58.9197511Z","changedTime":"2021-04-19T07:21:01.4734145Z","provisioningState":"Succeeded","tags":{"test":"tryingzones"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-19T09:33:21.378581Z","changedTime":"2021-04-19T09:33:26.7962552Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/loadBalancers/testdiagvmssLB","name":"testdiagvmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:15.9821987Z","changedTime":"2021-04-19T09:15:22.4055188Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/publicIPAddresses/testdiagvmssLBPublicIP","name":"testdiagvmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:10.1922185Z","changedTime":"2021-04-19T09:15:20.754921Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/virtualNetworks/testdiagvmssVNET","name":"testdiagvmssVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:15:10.1939456Z","changedTime":"2021-04-19T09:15:21.0264376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:38.1670333Z","changedTime":"2021-04-19T08:42:44.3040878Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:41.7450033Z","changedTime":"2021-04-19T08:40:46.8918827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:45.5339444Z","changedTime":"2021-04-19T08:40:51.3137721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:05.7301369Z","changedTime":"2021-04-19T09:07:08.3166613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway2","name":"gateway2","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:08.8972744Z","changedTime":"2021-04-19T09:18:35.4686487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway3","name":"gateway3","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:11.557161Z","changedTime":"2021-04-19T09:14:39.1945973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:48.9504796Z","changedTime":"2021-04-19T08:40:57.6825258Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet2","name":"myvnet2","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:54.3777449Z","changedTime":"2021-04-19T08:41:01.426181Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet3","name":"myvnet3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:31:00.0358218Z","changedTime":"2021-04-19T08:41:07.0528399Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-19T09:22:42.6780732Z","changedTime":"2021-04-19T09:22:50.4658591Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-19T09:23:57.6298312Z","changedTime":"2021-04-19T09:24:05.0145521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-19T09:23:44.864528Z","changedTime":"2021-04-19T09:24:00.6217374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/managedInstances/clitestmid2cou574uxp","name":"clitestmid2cou574uxp","type":"Microsoft.Sql/managedInstances","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":4},"location":"westeurope","identity":{"principalId":"00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","type":"SystemAssigned"},"createdTime":"2021-04-19T09:24:40.2473544Z","changedTime":"2021-04-19T09:24:51.7662163Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/virtualClusters/VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","name":"VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","type":"Microsoft.Sql/virtualClusters","location":"westeurope","createdTime":"2021-04-19T09:25:56.2100225Z","changedTime":"2021-04-19T09:25:56.2991497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/managedHSMs/clitest-0419","name":"clitest-0419","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"westus","createdTime":"2021-04-19T02:40:41.1532576Z","changedTime":"2021-04-19T02:50:46.9143411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/vaults/clitest-1102","name":"clitest-1102","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:37:34.9372505Z","changedTime":"2021-04-19T02:47:40.6289627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.KeyVault/vaults/clitestulm3hjz742zufyi6c","name":"clitestulm3hjz742zufyi6c","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T06:47:39.2543046Z","changedTime":"2021-04-19T06:57:47.1730965Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz","name":"idnbvrgdcfwfdat3p6pjwjtz","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T06:47:23.7515908Z","changedTime":"2021-04-19T06:57:33.0554325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi","name":"sa1lkyjaomuvduan6lsr5dzi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi/credentials/v2/userassigned?arpid=2cd2e884-2439-4609-a48e-4fa212011f2d&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:48:38.2194019Z","changedTime":"2021-04-19T06:59:29.6097279Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa2zazvqtgsdaarxcvfd6s33","name":"sa2zazvqtgsdaarxcvfd6s33","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"8f710395-b611-4a0d-9f34-d0a216558c81","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T06:49:31.8987391Z","changedTime":"2021-04-19T07:15:17.9888438Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j","name":"sa3rmbj3mt42ockj2tqtuu2j","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"7475c74b-3f37-4980-8896-76a5822ffa1e","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j/credentials/v2/userassigned?arpid=40045fc4-886c-49dd-be91-1bd234338751&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:50:01.9641738Z","changedTime":"2021-04-19T07:00:44.6692425Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T11:05:52.5177916Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/databases/master","name":"clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o","location":"westeurope","createdTime":"2021-04-19T09:31:40.5147795Z","changedTime":"2021-04-19T09:31:40.5778629Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:24:58.8404941Z","changedTime":"2021-04-19T09:26:07.4404903Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/createUnzonedUpdateToZonedDb","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/createUnzonedUpdateToZonedDb","type":"Microsoft.Sql/servers/databases","sku":{"name":"Premium","tier":"Premium","capacity":125},"kind":"v12.0,user","location":"eastus","createdTime":"2021-04-19T09:26:06.6362087Z","changedTime":"2021-04-19T09:29:28.4759481Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/master","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","location":"eastus","createdTime":"2021-04-19T09:26:20.1021931Z","changedTime":"2021-04-19T09:26:20.2284393Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG36LWPM3IJ3TLUHLODHRJ6QMSWAOORPIO4ORUVLVXNXVBAI4SLGEM5TLL7VPBGZAG7/providers/Microsoft.Compute/disks/clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","name":"clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","location":"southeastasia","createdTime":"2021-04-16T09:03:58.1925827Z","changedTime":"2021-04-16T09:13:58.7598058Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","name":"clitest-vmgmhwn","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8829168Z","changedTime":"2021-04-16T09:15:03.3436683Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkInterfaces/clitest-vmgmhwnVMNic","name":"clitest-vmgmhwnVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.8810776Z","changedTime":"2021-04-16T09:13:53.3394306Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkSecurityGroups/clitest-vmgmhwnNSG","name":"clitest-vmgmhwnNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3105323Z","changedTime":"2021-04-16T09:13:48.8252521Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/publicIPAddresses/clitest-vmgmhwnPublicIP","name":"clitest-vmgmhwnPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:47.3074778Z","changedTime":"2021-04-16T09:13:51.5404073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/virtualNetworks/clitest-vmgmhwnVNET","name":"clitest-vmgmhwnVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3164009Z","changedTime":"2021-04-16T09:13:54.712945Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultukoqsmzbf7l","name":"clitest-vaultukoqsmzbf7l","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6071079Z","changedTime":"2021-04-16T09:13:43.0164014Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Storage/storageAccounts/clitestidjdbydl23y6isfnz","name":"clitestidjdbydl23y6isfnz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T09:05:19.7820154Z","changedTime":"2021-04-16T09:15:43.7077284Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3mpot4mmz4pqvpkn27u4t7wyujucwn34bnr5apovxszciewewvk7kkpwwlezlqcjw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgpw7q5kmvtb","name":"clitest-vaultgpw7q5kmvtb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2904101Z","changedTime":"2021-04-19T08:49:43.99702Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3n5py2zcs4gpei2yrnrlx56l2relpjegza7qvv4plsjzez26k2haokm5kqhybcguz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtjcf7jddzi","name":"clitest-vaultrtjcf7jddzi","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:58.4276855Z","changedTime":"2021-04-19T04:44:58.6277651Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.8571891Z","changedTime":"2021-04-19T03:48:54.51151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.Storage/storageAccounts/clitestjppv6zemocoezqllw","name":"clitestjppv6zemocoezqllw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2163643Z","changedTime":"2021-04-19T03:48:52.5725Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.4867428Z","changedTime":"2021-04-19T03:48:53.8372193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.Storage/storageAccounts/clitestu5pvusta54uxmc6sn","name":"clitestu5pvusta54uxmc6sn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2352877Z","changedTime":"2021-04-19T03:48:52.4463911Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:32.4807081Z","changedTime":"2021-04-19T04:09:48.9332771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-2","name":"profile123/cdn-cli-test-2","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:45.7562826Z","changedTime":"2021-04-19T04:10:20.523554Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T11:20:28.2215516Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg623ovxonqoofdgeyej3xqrshx3zw4uukvn6eqkyb3vioc7ylybv6sqtpknt4h5nph/providers/Microsoft.RecoveryServices/vaults/clitest-vault3mcynv26uw7","name":"clitest-vault3mcynv26uw7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2845404Z","changedTime":"2021-04-19T04:44:59.9366875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpqgazhztope","name":"clitest-vaultpqgazhztope","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5330162Z","changedTime":"2021-04-16T13:18:37.6445368Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualHubs/clitestvhub","name":"clitestvhub","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T08:11:46.0560572Z","changedTime":"2021-04-19T08:26:03.4941124Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualWans/clitestvwan","name":"clitestvwan","type":"Microsoft.Network/virtualWans","location":"westus","createdTime":"2021-04-19T08:11:29.2669836Z","changedTime":"2021-04-19T08:21:45.4054235Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/vpnGateways/cligateway","name":"cligateway","type":"Microsoft.Network/vpnGateways","location":"westus","createdTime":"2021-04-19T08:18:15.5299236Z","changedTime":"2021-04-19T09:28:20.5669642Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgatrqh2o7wvc7xtmkufwuxthna2bhqxv5vowcgnf2dy2r7ipozhl57bltjtij2326p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmv33w2by72m","name":"clitest-vaultmv33w2by72m","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.4354446Z","changedTime":"2021-04-19T08:53:04.0516941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.EventHub/namespaces/cliehnamespacedb01","name":"cliehnamespacedb01","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westeurope","createdTime":"2021-04-19T09:24:29.5666937Z","changedTime":"2021-04-19T09:24:33.4521297Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.OperationalInsights/workspaces/laws6zmkf7sgfnchv2b5","name":"laws6zmkf7sgfnchv2b5","type":"Microsoft.OperationalInsights/workspaces","location":"westeurope","createdTime":"2021-04-19T09:21:23.2816462Z","changedTime":"2021-04-19T09:21:40.4215152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:15:33.3690367Z","changedTime":"2021-04-19T09:27:23.2480029Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/databases/master","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","location":"westeurope","createdTime":"2021-04-19T09:17:36.2204648Z","changedTime":"2021-04-19T09:17:36.407869Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Storage/storageAccounts/clitestowfrzpzalrflu2xmk","name":"clitestowfrzpzalrflu2xmk","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:32.7881365Z","changedTime":"2021-04-19T09:27:58.8679956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:10.03155Z","changedTime":"2021-04-19T04:09:25.6209979Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-4","name":"profile123/cdn-cli-test-4","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:23.5981685Z","changedTime":"2021-04-19T04:10:56.4338086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","name":"clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:22:20.3970386Z","changedTime":"2021-04-19T09:23:20.5068571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst/databases/master","name":"clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestserver2oszksz64v2ik4pruwjwwwo32ezwu4vbsvgzvo2jaj3hfgfst","location":"eastus","createdTime":"2021-04-19T09:23:43.7488493Z","changedTime":"2021-04-19T09:23:43.8992405Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle/databases/master","name":"clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbjyly4nooe3wjey2be7fxoqhe4zpojqovuvllbfyzhumy6xtgasvz7cmiv7reqwqu/providers/Microsoft.Sql/servers/clitestservernygtnsjegpezirnvxlyme5utqcote6hrprht64rz7haxvptle","location":"eastus","createdTime":"2021-04-19T09:24:52.1896298Z","changedTime":"2021-04-19T09:24:52.3457614Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbwo5qgjdw44ak7y6db5pg25hlh7llnedxbxtnpqkvallsua7hhometrf4bngqdjgr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultk5h7hxwodbq","name":"clitest-vaultk5h7hxwodbq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.2233349Z","changedTime":"2021-04-19T07:20:51.0715983Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgc655xu4pvrsud7k3pfwxnc7hiql5daey5nhocousvw76xcqszuuthz4ptsaaev7lq/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"northeurope","createdTime":"2021-04-19T03:38:34.2053024Z","changedTime":"2021-04-19T03:48:36.6864387Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclirep1clirecording-licationmgmts","name":"azuredbclirep1clirecording-licationmgmts","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:34:46.3542933Z","changedTime":"2021-04-19T08:44:46.2809564Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-licationmgmt","name":"azuredbclitest-clirecording-licationmgmt","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:21:15.1080006Z","changedTime":"2021-04-19T07:36:17.9676272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-19T08:08:02.2136473Z","changedTime":"2021-04-19T08:23:05.3447444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-5clirecording-mgmtscenari","name":"azuredbclitest-5clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_E2s_v3","tier":"MemoryOptimized","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:13:14.8252846Z","changedTime":"2021-04-19T08:27:16.7474139Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-6clirecording-mgmtscenari","name":"azuredbclitest-6clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:03:49.1264687Z","changedTime":"2021-04-19T08:17:52.254606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-proxyresourcemgmt/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-proxyresourc","name":"azuredbclitest-clirecording-proxyresourc","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:15:39.226806Z","changedTime":"2021-04-19T08:30:42.7405433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-xyresourcemgmtsce/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-xyresourcemg","name":"azuredbclitest-clirecording-xyresourcemg","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:20:22.2044527Z","changedTime":"2021-04-19T07:36:26.43405Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyokf24ijnjysza6zauhdysrwqqoef2cttxnnkr2jq7h36aanigxsw3mqzbgwgtut/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjojjamza56k","name":"clitest-vaultjojjamza56k","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.8142578Z","changedTime":"2021-04-19T04:44:59.4331602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgedvszyrgqx/providers/Microsoft.BotService/botServices/cli3wkgg5xm6ihi","name":"cli3wkgg5xm6ihi","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"sdk","location":"global","createdTime":"2021-04-19T04:20:07.6378467Z","changedTime":"2021-04-19T04:20:08.6289222Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgel7il7fyqlmrrmikjggzotgg33plbuedq3gs7t7avshz7owt56ipmf73yynfya5hc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvjmnh65jfgd","name":"clitest-vaultvjmnh65jfgd","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.3340145Z","changedTime":"2021-04-19T07:01:32.2314584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGFDHL3N5C2QLSIRFEDRHDFZ7SA7HOP6BDCVWUID3JB4EIT5KT46Q6QNQMVWEZFQFHE/providers/Microsoft.Compute/disks/clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","name":"clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","location":"southeastasia","createdTime":"2021-04-19T09:33:09.0356149Z","changedTime":"2021-04-19T09:33:09.256753Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","name":"clitest-vmvfvhd","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T09:33:07.9200047Z","changedTime":"2021-04-19T09:33:08.4535193Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkInterfaces/clitest-vmvfvhdVMNic","name":"clitest-vmvfvhdVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T09:33:07.3222251Z","changedTime":"2021-04-19T09:33:07.5015589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvfvhdNSG","name":"clitest-vmvfvhdNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2253777Z","changedTime":"2021-04-19T09:33:05.8669031Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/publicIPAddresses/clitest-vmvfvhdPublicIP","name":"clitest-vmvfvhdPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T09:33:05.2449767Z","changedTime":"2021-04-19T09:33:06.0809811Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/virtualNetworks/clitest-vmvfvhdVNET","name":"clitest-vmvfvhdVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2519916Z","changedTime":"2021-04-19T09:33:07.0363329Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvxyrektlils","name":"clitest-vaultvxyrektlils","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T09:33:00.0071222Z","changedTime":"2021-04-19T09:33:02.0880586Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfrljmepwlbq3b35hk5otzdgtwh4hqnykbitjgdwnwaj5hh4kdpcvxfc3fevvzovae/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyrzzkrmwmts","name":"clitest-vaultyrzzkrmwmts","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:23:11.9342702Z","changedTime":"2021-04-19T04:33:19.7106115Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T11:06:14.4982585Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus2","createdTime":"2021-04-19T09:25:25.8185965Z","changedTime":"2021-04-19T09:26:14.9480028Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/databases/master","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","location":"eastus2","createdTime":"2021-04-19T09:26:43.8648688Z","changedTime":"2021-04-19T09:26:43.9293152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGHWJQTOOPOZBFXFQ4HDCEY3UNPGOY5OYHQMJISBQOTBA25KNZUCO4C34GZ4ZVMFL4E/providers/Microsoft.Compute/disks/clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","name":"clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","location":"southeastasia","createdTime":"2021-04-16T09:03:56.5691534Z","changedTime":"2021-04-16T09:13:58.921169Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","name":"clitest-vmapciw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.5027178Z","changedTime":"2021-04-16T09:14:21.6793003Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkInterfaces/clitest-vmapciwVMNic","name":"clitest-vmapciwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:55.1089181Z","changedTime":"2021-04-16T09:13:56.3385997Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkSecurityGroups/clitest-vmapciwNSG","name":"clitest-vmapciwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:49.8438874Z","changedTime":"2021-04-16T09:15:54.3167924Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/publicIPAddresses/clitest-vmapciwPublicIP","name":"clitest-vmapciwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:49.8752582Z","changedTime":"2021-04-16T09:15:55.253218Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/virtualNetworks/clitest-vmapciwVNET","name":"clitest-vmapciwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.9424234Z","changedTime":"2021-04-16T09:13:54.8250426Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyhh4qtwrkvr","name":"clitest-vaultyhh4qtwrkvr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6645838Z","changedTime":"2021-04-16T09:13:43.8763025Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.RecoveryServices/vaults/clitest-vaulteubxds4e7dj","name":"clitest-vaulteubxds4e7dj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6705832Z","changedTime":"2021-04-16T13:18:10.7190838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T08:08:26.4794627Z","changedTime":"2021-04-19T08:50:49.5208577Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-7ho446gaojjt","name":"sfrp-cli-kv-7ho446gaojjt","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:06:48.4089367Z","changedTime":"2021-04-19T08:16:50.6104903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","name":"LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:06.9038901Z","changedTime":"2021-04-19T08:18:08.9868829Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:02.8646322Z","changedTime":"2021-04-19T08:18:09.5252072Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:08:02.9381415Z","changedTime":"2021-04-19T08:18:08.2939637Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-7arauzr5fjimrmm","name":"sfrp-cli-7arauzr5fjimrmm","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T08:08:24.0416139Z","changedTime":"2021-04-19T08:18:25.1154695Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/rye7le6arfuf23","name":"rye7le6arfuf23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8544492Z","changedTime":"2021-04-19T08:18:25.585202Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/sflogsrye7le6arfuf22","name":"sflogsrye7le6arfuf22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8499227Z","changedTime":"2021-04-19T08:18:23.6224346Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T04:23:45.3378587Z","changedTime":"2021-04-19T04:34:02.6718194Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-5","name":"profile123/cdn-cli-test-5","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:23:58.6353981Z","changedTime":"2021-04-19T04:34:46.3730465Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjjzlwchml4rqpgltu4xetvrkbckw24tqgnh6lyh4nmri2jlx43q34o27ojb4itvf2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizns75enlc7","name":"clitest-vaultizns75enlc7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.6054519Z","changedTime":"2021-04-19T08:50:03.1189501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T11:20:27.3851127Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGJSMTN6SPFH6TUZ4JYMOUQR33XUEB3LKBBV7BVFOOROY5IO7CD6OE3ZAYN56STPJYN/providers/Microsoft.Compute/disks/clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","name":"clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","location":"southeastasia","createdTime":"2021-04-19T02:47:06.3464877Z","changedTime":"2021-04-19T02:57:06.5849826Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","name":"clitest-vm35jy3","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:04.5675946Z","changedTime":"2021-04-19T02:57:33.6343604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkInterfaces/clitest-vm35jy3VMNic","name":"clitest-vm35jy3VMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:04.2253727Z","changedTime":"2021-04-19T02:57:04.7303352Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkSecurityGroups/clitest-vm35jy3NSG","name":"clitest-vm35jy3NSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9381108Z","changedTime":"2021-04-19T02:57:04.9901724Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/publicIPAddresses/clitest-vm35jy3PublicIP","name":"clitest-vm35jy3PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.9355374Z","changedTime":"2021-04-19T02:57:04.660964Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/virtualNetworks/clitest-vm35jy3VNET","name":"clitest-vm35jy3VNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9402505Z","changedTime":"2021-04-19T02:57:03.600596Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultedt62k7zvhu","name":"clitest-vaultedt62k7zvhu","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6148012Z","changedTime":"2021-04-19T02:56:56.0632835Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Storage/storageAccounts/clitesteq7n3hhs7fyymzakn","name":"clitesteq7n3hhs7fyymzakn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-19T02:48:02.3208104Z","changedTime":"2021-04-19T02:58:25.5376162Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgk32ngz6rpt/providers/Microsoft.BotService/botServices/cli3twndx3klwuc","name":"cli3twndx3klwuc","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2021-04-19T04:19:08.9903602Z","changedTime":"2021-04-19T04:19:09.0445736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-zndeyenhxuzm","name":"sfrp-cli-kv-zndeyenhxuzm","type":"Microsoft.KeyVault/vaults","location":"eastasia","createdTime":"2021-04-19T09:02:45.2710341Z","changedTime":"2021-04-19T09:12:54.5018133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.ServiceFabric/managedclusters/sfrp-cli-hqvjk4ymjsct2m2","name":"sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.ServiceFabric/managedclusters","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:42:19.0449005Z","changedTime":"2021-04-19T08:56:12.1367512Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:24:40.5167652Z","changedTime":"2021-04-19T09:25:53.427644Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/databases/master","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","location":"westeurope","createdTime":"2021-04-19T09:26:10.3316555Z","changedTime":"2021-04-19T09:26:10.3982145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGM36DC7BUAFAB42CIT7NLLSKTFXBC5WWFMMG3NJVH6SWZ4VDE6QXNPOBG5QNUDBA7V/providers/Microsoft.Compute/disks/clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","name":"clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","location":"southeastasia","createdTime":"2021-04-19T02:47:12.0297618Z","changedTime":"2021-04-19T02:57:13.8889984Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","name":"clitest-vmz7nxh","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:10.0372248Z","changedTime":"2021-04-19T02:58:26.6025482Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkInterfaces/clitest-vmz7nxhVMNic","name":"clitest-vmz7nxhVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:06.7445998Z","changedTime":"2021-04-19T02:57:08.3541333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkSecurityGroups/clitest-vmz7nxhNSG","name":"clitest-vmz7nxhNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:01.0281072Z","changedTime":"2021-04-19T02:57:05.3099185Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/publicIPAddresses/clitest-vmz7nxhPublicIP","name":"clitest-vmz7nxhPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:01.0137311Z","changedTime":"2021-04-19T02:57:02.5666554Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/virtualNetworks/clitest-vmz7nxhVNET","name":"clitest-vmz7nxhVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:01.1167585Z","changedTime":"2021-04-19T02:57:04.5860938Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnieezg6dop3","name":"clitest-vaultnieezg6dop3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1615158Z","changedTime":"2021-04-19T02:56:56.4131062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.KeyVault/vaults/clitestgbgy4a3th5o2focmv","name":"clitestgbgy4a3th5o2focmv","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:04:18.3998988Z","changedTime":"2021-04-19T03:14:24.9638051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh","name":"ido7edflxxrxtgkhcdzpmqsh","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:04:07.0287001Z","changedTime":"2021-04-19T03:14:17.0254027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7","name":"sa1oygtk3f2rgngyl7ednxd7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7/credentials/v2/userassigned?arpid=39fbab7e-51f0-482a-aaba-b4715d32b95a&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:05:13.9390184Z","changedTime":"2021-04-19T03:16:00.0850879Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa24bq36e62ve4t6qsd5pa4m","name":"sa24bq36e62ve4t6qsd5pa4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"32411212-1bfc-4377-a464-81139b97956a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:06:04.9375638Z","changedTime":"2021-04-19T03:19:17.777573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit","name":"sa3cmoyiicyb2rp2chp6qgit","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"e5ecc2d8-70c9-4e4f-a6ac-d887bb79c310","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit/credentials/v2/userassigned?arpid=f08cb05b-c19e-4d5e-845a-d7103205d9ed&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:06:30.8695107Z","changedTime":"2021-04-19T03:17:06.6255553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmawiihzv2ztze7gjjesuy2a2de22wkvhmqbqypkyx657qcaqlupqfcauektqibx2t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultorv5ijqllyq","name":"clitest-vaultorv5ijqllyq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6211066Z","changedTime":"2021-04-19T07:02:11.4530709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmijrf6lxqrppiiavxua4ij55yswz2zkjtovuxmmkjjr4p6v3up524pvnbsnkz4tze/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuxa7diukawk","name":"clitest-vaultuxa7diukawk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:10:54.8666061Z","changedTime":"2021-04-19T08:55:34.2659906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-16T09:10:51.1250727Z","changedTime":"2021-04-16T10:33:09.8070652Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-yrih5c4vcy5r","name":"sfrp-cli-kv-yrih5c4vcy5r","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-16T09:08:44.4632337Z","changedTime":"2021-04-16T09:18:51.3408949Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-i2kidudndpc746u-nt1vm","name":"LB-sfrp-cli-i2kidudndpc746u-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:28.119894Z","changedTime":"2021-04-16T09:20:31.4401274Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:17.8056896Z","changedTime":"2021-04-16T09:20:33.3981351Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:10:17.9871721Z","changedTime":"2021-04-16T09:20:34.0384846Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-i2kidudndpc746u","name":"sfrp-cli-i2kidudndpc746u","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-16T09:10:45.7770222Z","changedTime":"2021-04-16T09:20:50.0583514Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/sflogsyuncspwpmbsmk2","name":"sflogsyuncspwpmbsmk2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.7933801Z","changedTime":"2021-04-16T09:20:45.9472008Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/yuncspwpmbsmk3","name":"yuncspwpmbsmk3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.8167741Z","changedTime":"2021-04-16T09:20:46.2126509Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfq5jbtcrfu7ap7hb3wgss7p6sndk3ggf7zidp222u4zmzftbyfu3l3qjs7hquxaj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd2orcsqjviv","name":"clitest-vaultd2orcsqjviv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.9100002Z","changedTime":"2021-04-19T04:44:58.1569906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Verizon"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:46.8684475Z","changedTime":"2021-04-19T04:11:04.6163453Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-3","name":"profile123/cdn-cli-test-3","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:01:00.0469653Z","changedTime":"2021-04-19T04:11:29.6987683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqxr5jrejcigqiu6ydylw2q67f7mbndkgy5lzj7whswg5ir7gqkt42f5xrqdhlokw/providers/Microsoft.RecoveryServices/vaults/clitest-vault6rb74dse5uc","name":"clitest-vault6rb74dse5uc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.9980568Z","changedTime":"2021-04-19T07:21:54.4055143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:26:51.918381Z","changedTime":"2021-04-19T09:28:02.1327584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/db1","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/db1","type":"Microsoft.Sql/servers/databases","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":2},"kind":"v12.0,user,vcore","location":"eastus","createdTime":"2021-04-19T09:32:18.1908253Z","changedTime":"2021-04-19T09:32:19.7524674Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/master","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","location":"eastus","createdTime":"2021-04-19T09:28:15.2026127Z","changedTime":"2021-04-19T09:28:15.3011239Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgoy4whi553iwa7kmtmjqz26xctkpza4kkhgaepo6a2a6gcd6tl66pip3dqyp2ijlp5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultszrwsgnwemz","name":"clitest-vaultszrwsgnwemz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.91819Z","changedTime":"2021-04-19T04:44:59.0494619Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpkodvjufgz3njs6nmlsbm4ji37eo3rvjk72ljemvkfyxlmvv6xhnxt3o6hdhalp7n/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ze7sv5nfpg","name":"clitest-vault6ze7sv5nfpg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:52.2202728Z","changedTime":"2021-04-19T08:22:07.3494606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.KeyVault/vaults/clitestqykmnvpfrwg7fhc72","name":"clitestqykmnvpfrwg7fhc72","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:13:25.5283916Z","changedTime":"2021-04-19T03:23:34.5047324Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk","name":"idlf7yzvyjcim6vktmqf2mmk","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:13:12.1648816Z","changedTime":"2021-04-19T03:23:20.0881312Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri","name":"sa1eyzdihtcwdmy3zmgrkcri","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri/credentials/v2/userassigned?arpid=2620b059-cae9-4a14-8775-b5a2617e2ef5&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:14:23.0842735Z","changedTime":"2021-04-19T03:25:13.8510121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa2pmu4mhob343wjblprsgew","name":"sa2pmu4mhob343wjblprsgew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"50115edd-2717-4a63-9d1d-5e01bb651fff","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:15:16.3686372Z","changedTime":"2021-04-19T03:29:48.3260417Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx","name":"sa373fu4ogh4gfwbtfxe2xtx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"b0d1b1c2-edec-44ff-aa6d-b889a4527690","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx/credentials/v2/userassigned?arpid=8147c02e-ea54-475e-ba84-8f97c8dafe90&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:15:42.8388136Z","changedTime":"2021-04-19T03:26:25.5232679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpwxbk7bnxzhegqk77clydue4pvxlsy5sll6rmqdj54foitnirpvxailoxcvuyh676/providers/Microsoft.Sql/servers/clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3/databases/master","name":"clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpwxbk7bnxzhegqk77clydue4pvxlsy5sll6rmqdj54foitnirpvxailoxcvuyh676/providers/Microsoft.Sql/servers/clitestservervrgebmczooej3nc23uq3gu5ckxo2w4muxba3zcxbx4eecmxb3","location":"eastus","createdTime":"2021-04-19T09:25:57.4487993Z","changedTime":"2021-04-19T09:25:57.5701499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T02:53:49.7088714Z","changedTime":"2021-04-19T04:16:57.0475633Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-wwvqsei4kinc","name":"sfrp-cli-kv-wwvqsei4kinc","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:51:38.3128082Z","changedTime":"2021-04-19T03:01:46.1391553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-shrtab4dbwc6332-nt1vm","name":"LB-sfrp-cli-shrtab4dbwc6332-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:26.7662217Z","changedTime":"2021-04-19T03:03:32.5438524Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:13.3390964Z","changedTime":"2021-04-19T03:03:26.2455166Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:53:13.5865855Z","changedTime":"2021-04-19T03:03:27.0112693Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-shrtab4dbwc6332","name":"sfrp-cli-shrtab4dbwc6332","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T02:53:44.8954233Z","changedTime":"2021-04-19T03:03:51.340017Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/fqgisep4xxtru3","name":"fqgisep4xxtru3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:13.8624481Z","changedTime":"2021-04-19T03:03:41.4770985Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/sflogsfqgisep4xxtru2","name":"sflogsfqgisep4xxtru2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:16.3387857Z","changedTime":"2021-04-19T03:03:42.5798168Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.KeyVault/vaults/clitestzgylz5j4vixpbtlmg","name":"clitestzgylz5j4vixpbtlmg","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T01:54:23.1601375Z","changedTime":"2021-04-19T02:04:34.4452362Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idfltrijgz5jszpkryowtap3","name":"idfltrijgz5jszpkryowtap3","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T01:54:10.6572589Z","changedTime":"2021-04-19T02:04:19.013835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa1zxgyytiatwal3o2mugst4","name":"sa1zxgyytiatwal3o2mugst4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2021-04-19T01:55:22.5505579Z","changedTime":"2021-04-19T02:06:59.3455191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa25exzssxlnzfljlreu2m42","name":"sa25exzssxlnzfljlreu2m42","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T02:08:32.9460929Z","changedTime":"2021-04-19T02:19:07.883237Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","type":"Microsoft.Sql/servers","kind":"v12.0","location":"southeastasia","createdTime":"2021-04-19T09:17:12.9221681Z","changedTime":"2021-04-19T09:27:20.5738924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/cliautomationhs03","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/cliautomationhs03","type":"Microsoft.Sql/servers/databases","sku":{"name":"HS_Gen5","tier":"Hyperscale","family":"Gen5","capacity":8},"kind":"v12.0,user,vcore,hyperscale","location":"southeastasia","createdTime":"2021-04-19T09:21:34.4735873Z","changedTime":"2021-04-19T09:23:55.343175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/master","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","location":"southeastasia","createdTime":"2021-04-19T09:18:40.9969244Z","changedTime":"2021-04-19T09:18:41.0482447Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.RecoveryServices/vaults/clitest-vaultwigajwrefb6","name":"clitest-vaultwigajwrefb6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.0604904Z","changedTime":"2021-04-16T09:13:45.5142525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks","name":"profilebuz7my4tdavvwwgks","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:58:50.5277307Z","changedTime":"2021-04-19T04:09:06.5466804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks/endpoints/cdn-cli-test","name":"profilebuz7my4tdavvwwgks/cdn-cli-test","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:03.5176751Z","changedTime":"2021-04-19T04:09:21.6903446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.KeyVault/vaults/clitestzmkdc2g7bdwvndxd5","name":"clitestzmkdc2g7bdwvndxd5","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T02:19:22.3693562Z","changedTime":"2021-04-19T02:29:29.7793464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k","name":"idm26ifc6yghif3dkebx2m5k","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T02:19:11.123184Z","changedTime":"2021-04-19T02:29:21.1285953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle","name":"sa1bwis4hxlzb4i7htnd4rle","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k":{"principalId":"6d54df4c-e57b-47b9-91ad-f0ef77e64478","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"34ad0627-5891-4909-84aa-d8b0a56b32bb","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle/credentials/v2/userassigned?arpid=281e64c3-8e80-4aee-92ce-8ee9450ce46d&uaid=34ad0627-5891-4909-84aa-d8b0a56b32bb","certRenewAfter":"2021-06-04T02:14:00Z"}}},"createdTime":"2021-04-19T02:20:17.7238703Z","changedTime":"2021-04-19T02:32:11.3193942Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjavixfqwz6cxvpkn6u54ajk3fa6jjz4ruxuohjeynusnabiadcmmropup73v5lqw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultubxs2tf7fa7","name":"clitest-vaultubxs2tf7fa7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1329828Z","changedTime":"2021-04-19T02:56:57.9006269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjo3k2nafi2l6bzlrchsnxwaf27h3bxahipmj2n4uslifbcrogipfny66bcuyel6z/providers/Microsoft.Storage/storageAccounts/clitestlrjctts36gudiaq4a","name":"clitestlrjctts36gudiaq4a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:55.8896552Z","changedTime":"2021-04-19T09:28:22.2414901Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsuedfxc436s","name":"clitest-vaultsuedfxc436s","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.05224Z","changedTime":"2021-04-16T09:13:43.8501023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVPS3SF22MUKYRZD7X6W4AJS5DK7VYINVDNFFR2VZTO7VSEWLDKAF4YTQ3YFLABWRC/providers/Microsoft.Compute/disks/clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","name":"clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","location":"southeastasia","createdTime":"2021-04-16T09:03:58.0366389Z","changedTime":"2021-04-16T09:14:01.0311978Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","name":"clitest-vmb7duk","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8945379Z","changedTime":"2021-04-16T09:14:45.4494013Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkInterfaces/clitest-vmb7dukVMNic","name":"clitest-vmb7dukVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.9857642Z","changedTime":"2021-04-16T09:13:54.3182297Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmb7dukNSG","name":"clitest-vmb7dukNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0002004Z","changedTime":"2021-04-16T09:13:52.2109451Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/publicIPAddresses/clitest-vmb7dukPublicIP","name":"clitest-vmb7dukPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.0542928Z","changedTime":"2021-04-16T09:13:51.7128448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/virtualNetworks/clitest-vmb7dukVNET","name":"clitest-vmb7dukVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0912896Z","changedTime":"2021-04-16T09:13:54.3222293Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.RecoveryServices/vaults/clitest-vault6hmnpzruvsg","name":"clitest-vault6hmnpzruvsg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5286583Z","changedTime":"2021-04-16T09:13:44.7220246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVT3XX3E4UWHBUQ3PMTKF72FL674USGXLHEZWREH6VDF4JBSVNF4PWOHLB7HYYJ6QY/providers/Microsoft.Compute/disks/clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","name":"clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","location":"southeastasia","createdTime":"2021-04-19T02:47:07.5473352Z","changedTime":"2021-04-19T02:57:10.5017448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","name":"clitest-vmkukxw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.1104707Z","changedTime":"2021-04-19T02:57:34.4453118Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkInterfaces/clitest-vmkukxwVMNic","name":"clitest-vmkukxwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.3593831Z","changedTime":"2021-04-19T02:57:03.9145176Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkSecurityGroups/clitest-vmkukxwNSG","name":"clitest-vmkukxwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2141878Z","changedTime":"2021-04-19T02:57:04.5773591Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/publicIPAddresses/clitest-vmkukxwPublicIP","name":"clitest-vmkukxwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.1999328Z","changedTime":"2021-04-19T02:57:03.1615589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/virtualNetworks/clitest-vmkukxwVNET","name":"clitest-vmkukxwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2118732Z","changedTime":"2021-04-19T02:57:03.1688631Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultj24sii3xnu7","name":"clitest-vaultj24sii3xnu7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.2886417Z","changedTime":"2021-04-19T02:56:56.6193875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/databases/master","name":"clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t","location":"eastus","createdTime":"2021-04-19T09:29:57.0385044Z","changedTime":"2021-04-19T09:29:57.2182109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgycv2jxbfj6qifbexp7bdrd6dm2aevbj2p35klmxomh5h5z4243z67psnbkgllqeab/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdvn7euhxrai","name":"clitest-vaultdvn7euhxrai","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.9990328Z","changedTime":"2021-04-19T08:52:53.7982976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:25:43.1368905Z","changedTime":"2021-04-19T09:26:54.3358968Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/databases/db1","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/db1","type":"Microsoft.Sql/servers/databases","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":2},"kind":"v12.0,user,vcore","location":"westeurope","createdTime":"2021-04-19T09:28:00.7777257Z","changedTime":"2021-04-19T09:28:50.8483733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/databases/master","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","location":"westeurope","createdTime":"2021-04-19T09:27:11.9381343Z","changedTime":"2021-04-19T09:27:12.1580988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGZTYT5OGTTZ2MMNFAXYQCCDIPXXLIEJFHINF2FFGLJNLHYWAXXMZZIS5HYGY3Y5YP4/providers/Microsoft.Compute/disks/clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","name":"clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","location":"southeastasia","createdTime":"2021-04-19T02:47:08.7686258Z","changedTime":"2021-04-19T02:57:08.9533791Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","name":"clitest-vmw76iz","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.4885903Z","changedTime":"2021-04-19T02:58:24.5889947Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkInterfaces/clitest-vmw76izVMNic","name":"clitest-vmw76izVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.4458714Z","changedTime":"2021-04-19T02:57:03.6078042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkSecurityGroups/clitest-vmw76izNSG","name":"clitest-vmw76izNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2374084Z","changedTime":"2021-04-19T02:57:03.5011187Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/publicIPAddresses/clitest-vmw76izPublicIP","name":"clitest-vmw76izPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.2606346Z","changedTime":"2021-04-19T02:57:04.4353904Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/virtualNetworks/clitest-vmw76izVNET","name":"clitest-vmw76izVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2466786Z","changedTime":"2021-04-19T02:57:04.719598Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsn5dn6zaabo","name":"clitest-vaultsn5dn6zaabo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1845444Z","changedTime":"2021-04-19T02:56:57.8095873Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-EUS/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-19T07:48:50.6373195Z","changedTime":"2021-04-19T07:58:50.909066Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-WUS2/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","type":"Microsoft.OperationalInsights/workspaces","location":"westus2","createdTime":"2021-04-19T02:28:41.9904009Z","changedTime":"2021-04-19T02:38:43.7625917Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2021-04-19T02:28:49.8876091Z","changedTime":"2021-04-19T02:38:51.6570957Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2021-04-19T07:39:35.7546785Z","changedTime":"2021-04-19T07:49:37.1903666Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:05:47.283833Z","changedTime":"2021-04-19T06:16:11.8916737Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d2","name":"d2","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:12:05.9492262Z","changedTime":"2021-04-19T06:22:31.3901315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k1","name":"k1","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:06:23.8921344Z","changedTime":"2021-04-19T02:16:28.7769194Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k2","name":"k2","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:09:29.3233599Z","changedTime":"2021-04-19T02:19:35.0586728Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-3n75y/providers/Microsoft.HDInsight/clusters/hdicli-n7247mo52","name":"hdicli-n7247mo52","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:24:48.9810882Z","changedTime":"2021-04-19T08:25:02.3935153Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-n54fg/providers/Microsoft.HDInsight/clusters/hdicli-ck64kxr3c","name":"hdicli-ck64kxr3c","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:18:39.6020317Z","changedTime":"2021-04-19T09:28:47.0164046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-o67mv/providers/Microsoft.HDInsight/clusters/hdicli-ffzqxm4jf","name":"hdicli-ffzqxm4jf","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:25:32.9794328Z","changedTime":"2021-04-19T08:25:44.5603462Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-19T08:02:41.7377813Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"025c617e-cf87-4350-aee9-726d3db7c4d4","clientId":"7c3db5ff-cbb6-4d62-bb98-431736298370"}}},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"3a32cb7b-aed0-47ea-a32d-8615dacb894c","clientId":"72a98aad-a4dc-4cc0-97d2-c62ff0c6b1e6"}}},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"29a32b37-c958-424e-aabb-9ad27c486d63","clientId":"2d5b384e-4a64-46d3-ac72-6e6b7eefba56"}}},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"24de7e4c-58ba-4337-84cf-531624ba527b","clientId":"0bed8c94-c140-40e2-bbbf-3e89c26a7933"}}},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"701d4d1b-69d2-4611-a486-22d22b130d94","clientId":"c7d8d16d-32e7-4bd8-9b97-880b4f9d56b0"}}},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"9c00f972-5c39-432f-a11a-2f85d233e81b","clientId":"f60d1402-85dd-4eca-97a3-fbde0a1a5dfb"}}},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"19fc254d-dc12-4561-b3ce-af0fe556da17","clientId":"a235bd5a-d325-4459-bdac-455b8ef1f36e"}}},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"fed69d01-0358-4340-bc81-f15f246cecd7","clientId":"84341ca7-dd44-401a-99b3-0b8ed7311b1e"}}},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jf-test/providers/Microsoft.ServiceBus/namespaces/jf-namespace","name":"jf-namespace","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T09:10:02.2224116Z","changedTime":"2021-04-19T09:21:50.7729229Z","provisioningState":"Succeeded","tags":{"{''tag1":"value1''}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/jiasli-cli-dev/providers/microsoft.managedidentity/userassignedidentities/jlid1":{"principalId":"2fdcd421-c744-440d-b253-3daf68c697eb","clientId":"da95e381-d7ab-4fdc-8047-2457909c723b"}}},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/applicationGateways/ag","name":"ag","type":"Microsoft.Network/applicationGateways","location":"westus","createdTime":"2021-04-19T02:38:57.7104426Z","changedTime":"2021-04-19T06:11:14.4211213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/gateway_ip","name":"gateway_ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T02:37:56.9899099Z","changedTime":"2021-04-19T02:48:13.0193172Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/agVnet","name":"agVnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:38:42.7779781Z","changedTime":"2021-04-19T02:48:54.8112679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool":{"principalId":"bc0653aa-4310-4815-b6b6-e32ce13113d7","clientId":"d8fc3aad-b983-4520-98b9-74576d95ded9"}}},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool":{"principalId":"a7fa3b2a-a999-46a5-8a9c-c0d0a39ddc26","clientId":"bd7ece5e-69c5-4f71-9ca4-d62271460081"}}},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool":{"principalId":"8c082ab4-e02b-454e-b93b-22f93186b17c","clientId":"7a265029-9abf-4356-8b38-78dbe696cf57"}}},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool":{"principalId":"0a6b7869-1b6d-4e66-9499-4bc5f4d216d7","clientId":"c4721872-6504-4029-801c-7f62782f07fc"}}},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool":{"principalId":"d2dea38e-1f21-4f9c-9b0f-135df5dc4f68","clientId":"3a226aa6-08d9-4375-a06b-8f32f5ac7ef5"}}},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool":{"principalId":"e61d4772-fea2-4ffb-a9b1-50577d53abbd","clientId":"4700f809-abf4-410c-aab9-0b9ea6f8effb"}}},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool":{"principalId":"f3b5c4b8-eb5a-4194-9d3c-b52d2ba840ec","clientId":"3d092bfd-d0e2-461b-b066-927f47dbcdb2"}}},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_e6bb8572c81949938565e11a02e143df","name":"vm_disk1_e6bb8572c81949938565e11a02e143df","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-19T03:20:27.5290086Z","changedTime":"2021-04-19T03:30:27.9380762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2":{"principalId":"ca3b63bb-2720-4a80-8b27-5c2a910ab337","clientId":"6a54d9f7-eb32-48e1-890b-ced8039a28aa"}}},"createdTime":"2021-04-19T03:20:25.7463989Z","changedTime":"2021-04-19T04:02:00.0943857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-19T03:49:31.8128826Z","changedTime":"2021-04-19T03:59:40.8952572Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-19T03:20:21.7332166Z","changedTime":"2021-04-19T06:40:07.6125254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-19T03:20:07.6484362Z","changedTime":"2021-04-19T03:30:20.6910889Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-19T03:20:07.6699177Z","changedTime":"2021-04-19T03:30:22.259849Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-19T03:20:07.8743759Z","changedTime":"2021-04-19T03:30:21.3860899Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastasia","name":"NetworkWatcher_eastasia","type":"Microsoft.Network/networkWatchers","location":"eastasia","createdTime":"2021-04-19T08:09:27.8904392Z","changedTime":"2021-04-19T08:19:35.3631932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-19T07:31:00.224823Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/connectionMonitors/CMv2-01","name":"NetworkWatcher_eastus/CMv2-01","type":"Microsoft.Network/networkWatchers/connectionMonitors","location":"eastus","createdTime":"2021-04-19T07:48:48.6964748Z","changedTime":"2021-04-19T08:37:59.9573763Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/flowLogs/flow_log_test","name":"NetworkWatcher_eastus/flow_log_test","type":"Microsoft.Network/networkWatchers/flowLogs","location":"eastus","createdTime":"2021-04-19T07:48:02.1062916Z","changedTime":"2021-04-19T07:48:04.1861892Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-19T07:31:00.2819037Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-19T07:24:07.3758082Z","changedTime":"2021-04-19T07:34:09.7140807Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3d%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '488292' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3D%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","name":"vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.1966299Z","changedTime":"2021-04-19T07:40:06.5170303Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","name":"vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2132952Z","changedTime":"2021-04-19T07:40:07.2044281Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","name":"vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2091938Z","changedTime":"2021-04-19T07:40:06.9436767Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","name":"vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.3635314Z","changedTime":"2021-04-19T07:40:06.6261328Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk1_7036e05d00e040d8baaedede949e986a","name":"vm3980781_disk1_7036e05d00e040d8baaedede949e986a","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7385167Z","changedTime":"2021-04-19T07:22:02.372801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","name":"vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7888523Z","changedTime":"2021-04-19T07:22:02.1120383Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","name":"vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7476848Z","changedTime":"2021-04-19T07:22:02.2920907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","name":"vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7731014Z","changedTime":"2021-04-19T07:22:00.9454043Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","name":"vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.8969407Z","changedTime":"2021-04-19T07:22:00.9946055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/clusters/eventhubs-clus1-52p7","name":"eventhubs-clus1-52p7","type":"Microsoft.EventHub/clusters","sku":{"name":"Dedicated","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:44.2233646Z","changedTime":"2021-04-19T05:09:52.8595837Z","provisioningState":"Succeeded","tags":{"tag2":"value2"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/namespaces/eventhubs-nsclihh5fm","name":"eventhubs-nsclihh5fm","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:47.4949708Z","changedTime":"2021-04-19T05:08:49.5531237Z","provisioningState":"Succeeded","tags":{"{tag1":"value1}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-b7p4me5w3fm4v5ojterc5bon5uo5wbsmfhjxwdy5xwh42eurktn4sq3jdpe3raw6hjcsiww2bzn/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T10:17:20.5414426Z","changedTime":"2021-04-16T10:27:22.5824066Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:51.5333228Z","changedTime":"2021-04-16T10:28:52.8985143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:54.4690406Z","changedTime":"2021-04-16T10:28:55.7733108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-nr5t5tkrd3dfy5s3cdogjaul6vgau6zk3z2me6jepz3d2cmx6nj5vegeortzqh7xuzbvca6ok3l/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:08:09.5132813Z","changedTime":"2021-04-16T10:18:11.3260431Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-uprrmtmadxtglxidnidulnmwy6n6sfcqy2ieu5lzx7d3veixu2tmw4cwy4e4xzzk4hc3fcc6pcq/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:06:09.7360243Z","changedTime":"2021-04-16T10:16:11.5409437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ywtpgrr2wj4otjy2rml2yj3aqrrulvu55fcw3lqxna325xn4oga75gd4cjacd54u6gsmxafubco/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T09:55:44.8681585Z","changedTime":"2021-04-16T10:05:47.4324327Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-z2n6tjylaptobeb6qbnwfmgrjkzcq2eartmrevz2wtpszn5atgevjfzql4k5mzczomavumgwvxr/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:44:26.8175499Z","changedTime":"2021-04-16T09:54:28.5628695Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zpcge3ymst4galvq3izu3vyspbffzif3agefhirk52v6tudwfrxyufywqtiffjrseqnwh3xh4ju/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:46:28.3216664Z","changedTime":"2021-04-16T09:56:30.3702545Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:14.8539307Z","changedTime":"2021-04-16T10:07:16.7949574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:16.6411265Z","changedTime":"2021-04-16T10:07:18.8446376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Compute/virtualMachineScaleSets/pnt","name":"pnt","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2","tier":"Standard","capacity":5},"location":"eastasia","createdTime":"2021-04-19T08:48:31.5154262Z","changedTime":"2021-04-19T09:13:52.0102414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-hqvjk4ymjsct2m2","name":"LB-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:31.9349613Z","changedTime":"2021-04-19T08:55:32.08355Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/networkSecurityGroups/SF-NSG","name":"SF-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2021-04-19T08:45:25.8495007Z","changedTime":"2021-04-19T08:55:29.1238361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/publicIPAddresses/PublicIP-sfrp-cli-hqvjk4ymjsct2m2","name":"PublicIP-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:25.8393717Z","changedTime":"2021-04-19T08:56:00.5127966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/virtualNetworks/VNet-sfrp-cli-hqvjk4ymjsct2m2","name":"VNet-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2021-04-19T08:45:27.7827409Z","changedTime":"2021-04-19T08:55:34.1294128Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Storage/storageAccounts/sfmcwr73kjjku7u2a","name":"sfmcwr73kjjku7u2a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2021-04-19T08:45:25.8065311Z","changedTime":"2021-04-19T08:56:00.5177756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappvullq2rwvcrbi/providers/Microsoft.Network/virtualNetworks/swiftname63g6wvqkgvmodve","name":"swiftname63g6wvqkgvmodve","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T07:56:32.9282188Z","changedTime":"2021-04-19T08:06:41.0624174Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappykvmvassqkbkz/providers/Microsoft.Network/virtualNetworks/swiftname2ps6zotu23xidfe","name":"swiftname2ps6zotu23xidfe","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T03:20:28.6793668Z","changedTime":"2021-04-19T03:30:44.1605022Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-17T08:42:05.4240675Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/VN1_GROUP/providers/Microsoft.Compute/disks/vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","name":"vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","location":"eastus","createdTime":"2021-04-16T11:23:01.5707345Z","changedTime":"2021-04-16T11:33:01.944692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn2","name":"vn2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn2","location":"eastus","createdTime":"2021-04-16T11:35:20.1084868Z","changedTime":"2021-04-16T11:45:49.9008822Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn3","name":"vn3","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:38:30.0693076Z","changedTime":"2021-04-16T11:48:40.8049503Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn4","name":"vn4","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:39:09.2060209Z","changedTime":"2021-04-16T11:49:20.8552559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/snapshots/mcr","name":"mcr","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_ZRS","tier":"Standard"},"location":"eastus","createdTime":"2021-04-16T11:33:20.7879295Z","changedTime":"2021-04-16T11:43:33.8263068Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","name":"vn1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-16T11:23:00.0676719Z","changedTime":"2021-04-16T11:35:49.2799302Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn1584","name":"vn1584","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:22:57.6120101Z","changedTime":"2021-04-16T11:32:59.3802669Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn2993","name":"vn2993","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:36:27.642062Z","changedTime":"2021-04-16T11:46:32.1662446Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn3965","name":"vn3965","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:39:41.1647879Z","changedTime":"2021-04-16T11:49:44.302433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn4847","name":"vn4847","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:40:15.5960995Z","changedTime":"2021-04-16T11:50:19.0557899Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn1-nsg","name":"vn1-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:22:50.8844497Z","changedTime":"2021-04-16T11:32:57.9018339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn2-nsg","name":"vn2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:36:21.582964Z","changedTime":"2021-04-16T11:46:28.6185111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn3-nsg","name":"vn3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:39:35.2059082Z","changedTime":"2021-04-16T11:49:42.7216313Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn4-nsg","name":"vn4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:40:08.9335296Z","changedTime":"2021-04-16T11:50:15.4250071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn1-ip","name":"vn1-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:22:50.8880508Z","changedTime":"2021-04-16T11:32:59.0230002Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn2-ip","name":"vn2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:36:21.5799163Z","changedTime":"2021-04-16T11:46:27.3333311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn3-ip","name":"vn3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:39:35.2088513Z","changedTime":"2021-04-16T11:49:43.2079037Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn4-ip","name":"vn4-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:40:08.9293917Z","changedTime":"2021-04-16T11:52:16.7112272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/virtualNetworks/vn1_group-vnet","name":"vn1_group-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-16T11:22:50.9665105Z","changedTime":"2021-04-16T11:32:59.2963267Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/azureFirewalls/firewall-yyc","name":"firewall-yyc","type":"Microsoft.Network/azureFirewalls","location":"eastus2","createdTime":"2021-04-19T09:15:39.9172072Z","changedTime":"2021-04-19T09:25:55.5399056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/p2sVpnGateways/pvg-yyc","name":"pvg-yyc","type":"Microsoft.Network/p2sVpnGateways","location":"eastus2","createdTime":"2021-04-19T06:28:17.8009474Z","changedTime":"2021-04-19T07:38:26.2014501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2","createdTime":"2021-04-19T06:11:54.6587464Z","changedTime":"2021-04-19T06:25:53.5321654Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub-yyc","name":"vhub-yyc","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T06:05:34.3842152Z","changedTime":"2021-04-19T06:19:25.357434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualWans/vwan-yyc","name":"vwan-yyc","type":"Microsoft.Network/virtualWans","location":"eastus2","createdTime":"2021-04-19T06:05:09.9595861Z","changedTime":"2021-04-19T06:15:29.1267966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/vpnServerConfigurations/vsc-yyc","name":"vsc-yyc","type":"Microsoft.Network/vpnServerConfigurations","location":"eastus2","createdTime":"2021-04-19T06:27:01.4121158Z","changedTime":"2021-04-19T06:37:21.6505996Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-17T07:02:26.0736317Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T09:54:31.0574215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/ugyuftdf","name":"ugyuftdf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T06:44:35.3916861Z","changedTime":"2021-04-19T06:55:08.8615313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '115444' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=location%20eq%20%27southcentralus%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-19T09:33:21.378581Z","changedTime":"2021-04-19T09:33:26.7962552Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool":{"principalId":"d2dea38e-1f21-4f9c-9b0f-135df5dc4f68","clientId":"3a226aa6-08d9-4375-a06b-8f32f5ac7ef5"}}},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=location+eq+%27southcentralus%27&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3d%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '6615' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - -l - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=location+eq+%27southcentralus%27&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3D%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/clusters/eventhubs-clus1-52p7","name":"eventhubs-clus1-52p7","type":"Microsoft.EventHub/clusters","sku":{"name":"Dedicated","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:44.2233646Z","changedTime":"2021-04-19T05:09:52.8595837Z","provisioningState":"Succeeded","tags":{"tag2":"value2"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/namespaces/eventhubs-nsclihh5fm","name":"eventhubs-nsclihh5fm","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:47.4949708Z","changedTime":"2021-04-19T05:08:49.5531237Z","provisioningState":"Succeeded","tags":{"{tag1":"value1}"}}]}' - headers: - cache-control: - - no-cache - content-length: - - '910' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=resourceType%20eq%20%27Microsoft.Network%2FvirtualNetworks%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_address_poolt6oxl4koeg3wfjt5mgtbyku627cj35fvd3s4fuuimk7ypr34rzb/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:32:21.5886933Z","changedTime":"2021-04-19T08:42:26.5169434Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:32:23.5916344Z","changedTime":"2021-04-19T07:42:39.9312305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:18:36.0313431Z","changedTime":"2021-04-19T07:28:42.5533848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_http_settingskfu5de2vrkapsbx6b5obxwenybozqtgj3je2koogzdutyyhxay/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:34:36.1931932Z","changedTime":"2021-04-19T07:44:42.5763794Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_private_ipzoa2yhqfmhw5qlfxfskzlrb3bt5aywcamkaawmnbbtsbudw7mt6oh/providers/Microsoft.Network/virtualNetworks/ag3Vnet","name":"ag3Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:07.3819292Z","changedTime":"2021-04-19T07:23:13.5402712Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:46.121184Z","changedTime":"2021-04-19T08:23:52.7013801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:14:25.8282152Z","changedTime":"2021-04-19T08:24:30.4740724Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockeyeph6urdiahepybvmy4ii4czth2sauccfq7vcuz/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrcexcsufihmqf36rwkp","name":"cli.lock.rsrcexcsufihmqf36rwkp","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:17.9378773Z","changedTime":"2021-04-19T09:33:30.7741653Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_commands_with_idsxk5rzyhbczcrx2xbngqd7dynp2fh52voz6sv57no2me4/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetiqhig5nuz5cknoba3","name":"cli-lock-vnetiqhig5nuz5cknoba3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:18.2570526Z","changedTime":"2021-04-19T09:33:29.8152178Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_lock_with_resource_id22xz76sys3b7ybohtqh5h6ir7j2h3rowdedegswushwik/providers/Microsoft.Network/virtualNetworks/cli-lock-vnetrouxnni46r26omhqz","name":"cli-lock-vnetrouxnni46r26omhqz","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:18.586857Z","changedTime":"2021-04-19T09:33:30.4989141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_msi_no_scopefa5injgnsnwryna2d2pzwodyox6xdi37zj5bme3fvrjumzvh653k4v/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2018-04-14T05:48:22.7499035Z","changedTime":"2018-04-14T05:58:42.0862409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westcentralus","createdTime":"2021-04-19T08:06:39.9531253Z","changedTime":"2021-04-19T08:16:57.9750299Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-19T09:33:21.378581Z","changedTime":"2021-04-19T09:33:26.7962552Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/virtualNetworks/testdiagvmssVNET","name":"testdiagvmssVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:15:10.1939456Z","changedTime":"2021-04-19T09:15:21.0264376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:48.9504796Z","changedTime":"2021-04-19T08:40:57.6825258Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet2","name":"myvnet2","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:54.3777449Z","changedTime":"2021-04-19T08:41:01.426181Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet3","name":"myvnet3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:31:00.0358218Z","changedTime":"2021-04-19T08:41:07.0528399Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-19T09:23:44.864528Z","changedTime":"2021-04-19T09:24:00.6217374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/virtualNetworks/clitest-vmgmhwnVNET","name":"clitest-vmgmhwnVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3164009Z","changedTime":"2021-04-16T09:13:54.712945Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/virtualNetworks/clitest-vmvfvhdVNET","name":"clitest-vmvfvhdVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2519916Z","changedTime":"2021-04-19T09:33:07.0363329Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/virtualNetworks/clitest-vmapciwVNET","name":"clitest-vmapciwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.9424234Z","changedTime":"2021-04-16T09:13:54.8250426Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:08:02.9381415Z","changedTime":"2021-04-19T08:18:08.2939637Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/virtualNetworks/clitest-vm35jy3VNET","name":"clitest-vm35jy3VNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9402505Z","changedTime":"2021-04-19T02:57:03.600596Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/virtualNetworks/clitest-vmz7nxhVNET","name":"clitest-vmz7nxhVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:01.1167585Z","changedTime":"2021-04-19T02:57:04.5860938Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:10:17.9871721Z","changedTime":"2021-04-16T09:20:34.0384846Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:53:13.5865855Z","changedTime":"2021-04-19T03:03:27.0112693Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/virtualNetworks/clitest-vmb7dukVNET","name":"clitest-vmb7dukVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0912896Z","changedTime":"2021-04-16T09:13:54.3222293Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/virtualNetworks/clitest-vmkukxwVNET","name":"clitest-vmkukxwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2118732Z","changedTime":"2021-04-19T02:57:03.1688631Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/virtualNetworks/clitest-vmw76izVNET","name":"clitest-vmw76izVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2466786Z","changedTime":"2021-04-19T02:57:04.719598Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/agVnet","name":"agVnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:38:42.7779781Z","changedTime":"2021-04-19T02:48:54.8112679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-19T03:20:07.8743759Z","changedTime":"2021-04-19T03:30:21.3860899Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/virtualNetworks/VNet-sfrp-cli-hqvjk4ymjsct2m2","name":"VNet-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2021-04-19T08:45:27.7827409Z","changedTime":"2021-04-19T08:55:34.1294128Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappvullq2rwvcrbi/providers/Microsoft.Network/virtualNetworks/swiftname63g6wvqkgvmodve","name":"swiftname63g6wvqkgvmodve","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T07:56:32.9282188Z","changedTime":"2021-04-19T08:06:41.0624174Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappykvmvassqkbkz/providers/Microsoft.Network/virtualNetworks/swiftname2ps6zotu23xidfe","name":"swiftname2ps6zotu23xidfe","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T03:20:28.6793668Z","changedTime":"2021-04-19T03:30:44.1605022Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/virtualNetworks/vn1_group-vnet","name":"vn1_group-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-16T11:22:50.9665105Z","changedTime":"2021-04-16T11:32:59.2963267Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '45889' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=name%20eq%20%27vnet-000002%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-19T09:33:21.378581Z","changedTime":"2021-04-19T09:33:26.7962552Z","provisioningState":"Succeeded","tags":{"cli-test":"test"}}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=name+eq+%27vnet-000002%27&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3d%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '1092' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter=name+eq+%27vnet-000002%27&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTk2IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWRkpRVTVYUlU1VExVMUpRMUpQVTA5R1ZEb3lSVU5QVFZCVlZFVTZNa1pFU1ZOTFV6b3lSbEZKUVU1WFJVNDZNa1JVVWxWVFZGazZOVVpQVTBSSlUwczZOVVl4T2pWR01FWXlRa1UxT1VNMU9VUXhORFkyTmtFM01EQTVNVGd5UTBKRU4wSkRNRGN0UlVGVFZGVlQifQ%3D%3D - response: - body: - string: '{"value":[]}' - headers: - cache-control: - - no-cache - content-length: - - '12' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=tagname%20eq%20%27cli-test%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus"}]}' - headers: - cache-control: - - no-cache - content-length: - - '349' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:33 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - ParameterSetName: - - --tag - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=tagname%20eq%20%27cli-test%27%20and%20tagvalue%20eq%20%27test%27&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002","name":"vnet-000002","type":"Microsoft.Network/virtualNetworks","location":"southcentralus"}]}' - headers: - cache-control: - - no-cache - content-length: - - '349' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:35 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1562' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:36 GMT - etag: - - W/"1fba5106-b170-44a3-b64a-e4d2e6bc171e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 29a3ace6-0629-4385-b254-b213b20e6355 - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --namespace --parent --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --namespace --parent --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"subnet-000003\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n \"properties\": - {\r\n \"provisioningState\": \"Succeeded\",\r\n \"addressPrefix\": \"10.0.0.0/24\",\r\n - \ \"delegations\": [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n - \ \"privateLinkServiceNetworkPolicies\": \"Enabled\"\r\n },\r\n \"type\": - \"Microsoft.Network/virtualNetworks/subnets\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '657' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:37 GMT - etag: - - W/"1fba5106-b170-44a3-b64a-e4d2e6bc171e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 9a1f40ac-506a-43e9-a58f-a002e9f55afa - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {\r\n \"cli-test\": \"test\"\r\n },\r\n \"properties\": {\r\n - \ \"provisioningState\": \"Succeeded\",\r\n \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n - \ \"addressSpace\": {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n - \ ]\r\n },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n - \ },\r\n \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1562' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:38 GMT - etag: - - W/"1fba5106-b170-44a3-b64a-e4d2e6bc171e" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 5704e258-39d3-4945-a3a1-11ed59641e09 - status: - code: 200 - message: OK -- request: - body: '{"location": "southcentralus", "tags": {}, "properties": {"provisioningState": - "Succeeded", "resourceGuid": "861dbf00-901d-49f6-8085-6d1e693c50bc", "addressSpace": - {"addressPrefixes": ["10.0.0.0/16"]}, "dhcpOptions": {"dnsServers": []}, "subnets": - [{"name": "subnet-000003", "id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003", - "etag": "W/\"1fba5106-b170-44a3-b64a-e4d2e6bc171e\"", "properties": {"provisioningState": - "Succeeded", "addressPrefix": "10.0.0.0/24", "delegations": [], "privateEndpointNetworkPolicies": - "Enabled", "privateLinkServiceNetworkPolicies": "Enabled"}, "type": "Microsoft.Network/virtualNetworks/subnets"}], - "virtualNetworkPeerings": [], "enableDdosProtection": false}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - Content-Length: - - '922' - Content-Type: - - application/json - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/62a827c2-01c6-4d61-a5a3-dd3784a912d9?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:33:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 35957feb-b354-420a-90c1-3283405c0188 - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/62a827c2-01c6-4d61-a5a3-dd3784a912d9?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 438ef856-5d39-4451-9660-803c13fd89ac - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource tag - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type --tags - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:12 GMT - etag: - - W/"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 68e6006d-937d-451b-a201-2bf1da49f6ca - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource show - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: "{\r\n \"name\": \"vnet-000002\",\r\n \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n \"type\": - \"Microsoft.Network/virtualNetworks\",\r\n \"location\": \"southcentralus\",\r\n - \ \"tags\": {},\r\n \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"resourceGuid\": \"861dbf00-901d-49f6-8085-6d1e693c50bc\",\r\n \"addressSpace\": - {\r\n \"addressPrefixes\": [\r\n \"10.0.0.0/16\"\r\n ]\r\n - \ },\r\n \"dhcpOptions\": {\r\n \"dnsServers\": []\r\n },\r\n - \ \"subnets\": [\r\n {\r\n \"name\": \"subnet-000003\",\r\n - \ \"id\": \"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002/subnets/subnet-000003\",\r\n - \ \"etag\": \"W/\\\"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d\\\"\",\r\n - \ \"properties\": {\r\n \"provisioningState\": \"Succeeded\",\r\n - \ \"addressPrefix\": \"10.0.0.0/24\",\r\n \"delegations\": - [],\r\n \"privateEndpointNetworkPolicies\": \"Enabled\",\r\n \"privateLinkServiceNetworkPolicies\": - \"Enabled\"\r\n },\r\n \"type\": \"Microsoft.Network/virtualNetworks/subnets\"\r\n - \ }\r\n ],\r\n \"virtualNetworkPeerings\": [],\r\n \"enableDdosProtection\": - false\r\n }\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '1534' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:13 GMT - etag: - - W/"f4ef6aa9-c2ae-4881-bdd4-653fd9b2028d" - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c0365af1-861f-474e-a895-b1b41a3133cc - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network","namespace":"Microsoft.Network","authorizations":[{"applicationId":"2cf9eb86-36b5-49dc-86ae-9a63135dfa8c","roleDefinitionId":"13ba9ab4-19f0-4804-adc4-14ece36cc7a1"},{"applicationId":"7c33bfcb-8d33-48d6-8e60-dc6404003489","roleDefinitionId":"ad6261e4-fa9a-4642-aa5f-104f1b67e9e3"},{"applicationId":"1e3e4475-288f-4018-a376-df66fd7fac5f","roleDefinitionId":"1d538b69-3d87-4e56-8ff8-25786fd48261"},{"applicationId":"a0be0c72-870e-46f0-9c49-c98333a996f7","roleDefinitionId":"7ce22727-ffce-45a9-930c-ddb2e56fa131"},{"applicationId":"486c78bf-a0f7-45f1-92fd-37215929e116","roleDefinitionId":"98a9e526-0a60-4c1f-a33a-ae46e1f8dc0d"},{"applicationId":"19947cfd-0303-466c-ac3c-fcc19a7a1570","roleDefinitionId":"d813ab6c-bfb7-413e-9462-005b21f0ce09"},{"applicationId":"341b7f3d-69b3-47f9-9ce7-5b7f4945fdbd","roleDefinitionId":"8141843c-c51c-4c1e-a5bf-0d351594b86c"},{"applicationId":"328fd23b-de6e-462c-9433-e207470a5727","roleDefinitionId":"79e29e06-4056-41e5-a6b2-959f1f47747e"},{"applicationId":"6d057c82-a784-47ae-8d12-ca7b38cf06b4","roleDefinitionId":"c27dd31e-c1e5-4ab0-93e1-a12ba34f182e"},{"applicationId":"b4ca0290-4e73-4e31-ade0-c82ecfaabf6a","roleDefinitionId":"18363e25-ff21-4159-ae8d-7dfecb5bd001"},{"applicationId":"79d7fb34-4bef-4417-8184-ff713af7a679","roleDefinitionId":"1c1f11ef-abfa-4abe-a02b-226771d07fc7"}],"resourceTypes":[{"resourceType":"virtualNetworks","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworks/taggedTrafficConsumers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"natGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"publicIPAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"customIpPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"networkInterfaces","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dscpConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01"],"defaultApiVersion":"2020-06-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpoints","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateEndpointRedirectMaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","UAE North","Switzerland North","Germany West Central","Norway - East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"loadBalancers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationSecurityGroups","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2017-09-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"serviceEndpointPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkIntentPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","France - South","Australia Central","South Africa North","UAE North","Switzerland North","Germany - West Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"routeTables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"publicIPPrefixes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"CrossResourceGroupResourceMove, CrossSubscriptionResourceMove"},{"resourceType":"ddosCustomPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/connectionMonitors","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/flowLogs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"networkWatchers/pingMeshes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"virtualNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"localNetworkGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"connections","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-03-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"applicationGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"applicationGatewayWebApplicationFirewallPolicies","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/operationResults","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/CheckDnsNameAvailability","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"locations/setLoadBalancerFrontendPublicIpAddresses","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01"]},{"resourceType":"locations/usages","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2015-06-15"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2017-10-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2017-10-01"}]},{"resourceType":"locations/virtualNetworkAvailableEndpointServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01"]},{"resourceType":"locations/availableDelegations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/serviceTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availablePrivateEndpointTypes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01"]},{"resourceType":"locations/availableServiceAliases","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"]},{"resourceType":"locations/checkPrivateLinkServiceVisibility","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/autoApprovedPrivateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01"]},{"resourceType":"locations/batchValidatePrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/batchNotifyPrivateEndpointsForResourceMove","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"locations/supportedVirtualMachineSizes","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/getAzureNetworkManagerConfiguration","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01"]},{"resourceType":"locations/checkAcceleratedNetworkingSupport","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/validateResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/setResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"locations/effectiveResourceOwnership","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"]},{"resourceType":"operations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"dnszones","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2016-04-01"},{"profileVersion":"2018-03-01-hybrid","apiVersion":"2016-04-01"},{"profileVersion":"2019-03-01-hybrid","apiVersion":"2016-04-01"}],"capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsOperationResults","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnsOperationStatuses","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"getDnsResourceReference","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"internalNotify","locations":["global"],"apiVersions":["2018-05-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/A","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/AAAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CNAME","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/PTR","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/MX","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/TXT","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SRV","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/SOA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/NS","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/CAA","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/recordsets","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"dnszones/all","locations":["global"],"apiVersions":["2018-05-01","2018-03-01-preview","2017-10-01","2017-09-15-preview","2017-09-01","2016-04-01","2015-05-04-preview"],"defaultApiVersion":"2018-05-01"},{"resourceType":"privateDnsZones","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsZones/virtualNetworkLinks","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"privateDnsOperationResults","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsOperationStatuses","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZonesInternal","locations":["global"],"apiVersions":["2020-06-01","2020-01-01"],"defaultApiVersion":"2020-01-01"},{"resourceType":"privateDnsZones/A","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/AAAA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/CNAME","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/PTR","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/MX","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/TXT","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SRV","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/SOA","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"privateDnsZones/all","locations":["global"],"apiVersions":["2020-06-01","2020-01-01","2018-09-01"],"defaultApiVersion":"2018-09-01"},{"resourceType":"virtualNetworks/privateDnsZoneLinks","locations":["global"],"apiVersions":["2020-06-01"],"defaultApiVersion":"2020-06-01"},{"resourceType":"dnsResolvers","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"dnsResolvers/inboundEndpoints","locations":["West - Central US","East US 2","West Europe","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationResults","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"locations/dnsResolverOperationStatuses","locations":[],"apiVersions":["2020-04-01-preview"],"defaultApiVersion":"2020-04-01-preview"},{"resourceType":"trafficmanagerprofiles","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"trafficmanagerprofiles/heatMaps","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"checkTrafficManagerNameAvailability","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01","2015-11-01","2015-04-28-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerUserMetricsKeys","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2017-09-01-preview"],"defaultApiVersion":"2018-08-01"},{"resourceType":"trafficManagerGeographicHierarchies","locations":["global"],"apiVersions":["2018-08-01","2018-04-01","2018-03-01","2018-02-01","2017-05-01","2017-03-01"],"defaultApiVersion":"2018-08-01"},{"resourceType":"expressRouteCircuits","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteServiceProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"]},{"resourceType":"applicationGatewayAvailableWafRuleSets","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01"]},{"resourceType":"applicationGatewayAvailableSslOptions","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01"]},{"resourceType":"applicationGatewayAvailableServerVariables","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableRequestHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"applicationGatewayAvailableResponseHeaders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01"]},{"resourceType":"routeFilters","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01","2016-11-01","2016-10-01","2016-09-01","2016-08-01","2016-07-01","2016-06-01","2016-03-30","2015-06-15","2015-05-01-preview","2014-12-01-preview"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"bgpServiceCommunities","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01","2017-08-01","2017-06-01","2017-04-01","2017-03-01","2016-12-01"]},{"resourceType":"virtualWans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnSites","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnServerConfigurations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","South - Africa North","Switzerland North","Germany West Central","Norway East","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualHubs","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"vpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"p2sVpnGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","UAE North","South Africa North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRouteGateways","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"expressRoutePortsLocations","locations":["France - Central","West US","East US","North Europe","West Europe","East Asia","Southeast - Asia","North Central US","South Central US","Central US","East US 2","Japan - East","Japan West","Brazil South","Australia East","Australia Southeast","Central - India","South India","West India","Canada Central","Canada East","West Central - US","West US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea - Central","Korea South","Australia Central","South Africa North","UAE North","Switzerland - North","Germany West Central","Norway East","East US SLV","Jio India Central","Jio - India West"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"firewallPolicies","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Brazil Southeast","Japan East","UK West","West US","East - US","North Europe","West Europe","West Central US","South Central US","Australia - East","Australia Central","Australia Southeast","UK South","East US 2","West - US 2","North Central US","Canada Central","France Central","Central US","Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipGroups","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","South Central US","Australia East","Australia Central","Australia - Southeast","UK South","East US 2","West US 2","North Central US","Canada Central","France - Central","West Central US","Central US","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"azureWebCategories","locations":[],"apiVersions":["2020-11-01","2020-08-01"],"defaultApiVersion":"2020-08-01"},{"resourceType":"locations/nfvOperations","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"locations/nfvOperationResults","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01"]},{"resourceType":"securityPartnerProviders","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Central US - EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"azureFirewalls","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Brazil South","Australia - East","Australia Southeast","Central India","South India","West India","Canada - Central","Canada East","West Central US","West US 2","UK West","UK South","France - Central","Australia Central","Japan West","Japan East","Korea Central","Korea - South","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01"],"defaultApiVersion":"2020-03-01","zoneMappings":[{"location":"East - US 2","zones":["2","3","1"]},{"location":"Central US","zones":["2","3","1"]},{"location":"West - Europe","zones":["2","3","1"]},{"location":"East US 2 EUAP","zones":["1","2","3"]},{"location":"Central - US EUAP","zones":["1","2"]},{"location":"France Central","zones":["2","3","1"]},{"location":"Southeast - Asia","zones":["2","3","1"]},{"location":"West US 2","zones":["2","3","1"]},{"location":"North - Europe","zones":["2","3","1"]},{"location":"East US","zones":["2","3","1"]},{"location":"UK - South","zones":["2","3","1"]},{"location":"Japan East","zones":["2","3","1"]},{"location":"Australia - East","zones":["2","3","1"]},{"location":"South Africa North","zones":[]},{"location":"South - Central US","zones":["2","3","1"]},{"location":"Canada Central","zones":["2","3","1"]},{"location":"Germany - West Central","zones":["2","3","1"]},{"location":"Brazil South","zones":["2","3","1"]},{"location":"Central - India","zones":[]},{"location":"Korea Central","zones":[]},{"location":"Norway - East","zones":[]}],"capabilities":"None"},{"resourceType":"azureFirewallFqdnTags","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"]},{"resourceType":"virtualNetworkTaps","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"locations/privateLinkServices","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"]},{"resourceType":"ddosProtectionPlans","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01"],"defaultApiVersion":"2020-03-01","apiProfiles":[{"profileVersion":"2017-03-09-profile","apiVersion":"2018-02-01"}],"capabilities":"None"},{"resourceType":"networkProfiles","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"checkFrontdoorNameAvailability","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallManagedRuleSets","locations":["global","Central - US","East US","East US 2","North Central US","South Central US","West US","North - Europe","West Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil - South","Australia East","Australia Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01"],"defaultApiVersion":"2020-11-01"},{"resourceType":"locations/bareMetalTenants","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"]},{"resourceType":"bastionHosts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"virtualRouters","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"networkVirtualAppliances","locations":["UAE - North","Australia Central 2","UAE Central","Germany North","Central India","Korea - South","Switzerland North","Switzerland West","Japan West","France South","South - Africa West","West India","Canada East","South India","Germany West Central","Norway - East","Norway West","South Africa North","East Asia","Southeast Asia","Korea - Central","Brazil South","Japan East","UK West","West US","East US","North - Europe","West Europe","West Central US","South Central US","Australia East","Australia - Central","Australia Southeast","UK South","East US 2","West US 2","North Central - US","Canada Central","France Central","Central US","Central US EUAP","East - US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01"],"defaultApiVersion":"2020-04-01","capabilities":"None"},{"resourceType":"ipAllocations","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Korea Central","Korea South","France Central","Australia - Central","South Africa North","UAE North","Switzerland North","Germany West - Central","Norway East","Central US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"locations/commitInternalAzureNetworkManagerConfiguration","locations":["West - Central US","East US 2 EUAP","Central US EUAP"],"apiVersions":["2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2019-12-01","2019-11-01"]},{"resourceType":"networkVirtualApplianceSkus","locations":[],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01"],"defaultApiVersion":"2020-04-01"},{"resourceType":"networkWatchers/lenses","locations":["Central - US EUAP","East US 2 EUAP"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01","2018-06-01","2018-05-01","2018-04-01","2018-03-01","2018-02-01","2018-01-01","2017-11-01","2017-10-01","2017-09-01"],"defaultApiVersion":"2020-03-01","capabilities":"CrossResourceGroupResourceMove, - CrossSubscriptionResourceMove"},{"resourceType":"expressRoutePorts","locations":["West - US","East US","North Europe","West Europe","East Asia","Southeast Asia","North - Central US","South Central US","Central US","East US 2","Japan East","Japan - West","Brazil South","Australia East","Australia Southeast","Central India","South - India","West India","Canada Central","Canada East","West Central US","West - US 2","UK West","UK South","Central US EUAP","East US 2 EUAP","Korea Central","Korea - South","France Central","Australia Central","UAE North","South Africa North","Switzerland - North","Germany West Central","Norway East","East US SLV"],"apiVersions":["2020-11-01","2020-08-01","2020-07-01","2020-06-01","2020-05-01","2020-04-01","2020-03-01","2020-01-01","2019-12-01","2019-11-01","2019-09-01","2019-08-01","2019-07-01","2019-06-01","2019-04-01","2019-02-01","2018-12-01","2018-11-01","2018-10-01","2018-08-01","2018-07-01"],"defaultApiVersion":"2020-03-01","capabilities":"None"},{"resourceType":"frontdoorOperationResults","locations":["global"],"apiVersions":["2020-11-01","2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-11-01","2019-10-01","2019-08-01","2019-05-01","2019-04-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01","capabilities":"None"},{"resourceType":"frontdoors/frontendEndpoints","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoors/frontendEndpoints/customHttpsConfiguration","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","North Europe","West Europe","East - Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2020-07-01","2020-05-01","2020-04-01","2020-01-01","2019-08-01","2019-05-01","2019-04-01","2018-08-01"],"defaultApiVersion":"2020-07-01"},{"resourceType":"frontdoorWebApplicationFirewallPolicies","locations":["East - US 2 EUAP","global","Central US","East US","East US 2","North Central US","South - Central US","West US","North Europe","West Europe","East Asia","Southeast - Asia","Japan East","Japan West","Brazil South","Australia East","Australia - Southeast"],"apiVersions":["2020-11-01","2020-04-01","2019-10-01","2019-03-01","2018-08-01"],"defaultApiVersion":"2020-11-01","capabilities":"None"},{"resourceType":"networkExperimentProfiles","locations":["Central - US EUAP","East US 2 EUAP","global","Central US","East US","East US 2","North - Central US","South Central US","West US","West US 2","North Europe","West - Europe","East Asia","Southeast Asia","Japan East","Japan West","Brazil South","Australia - East","Australia Southeast"],"apiVersions":["2019-11-01"],"defaultApiVersion":"2019-11-01","capabilities":"None"}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '106081' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/cli_test_resource_scenario000001/providers/Microsoft.Network/virtualNetworks/vnet-000002?api-version=2020-11-01 - response: - body: - string: '' - headers: - azure-asyncnotification: - - Enabled - azure-asyncoperation: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/e0abf840-ba02-49fc-beeb-7db354e31a29?api-version=2020-11-01 - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 19 Apr 2021 09:34:17 GMT - expires: - - '-1' - location: - - https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operationResults/e0abf840-ba02-49fc-beeb-7db354e31a29?api-version=2020-11-01 - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - 5f325460-6472-465a-a272-30ac17071d0d - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - resource delete - Connection: - - keep-alive - ParameterSetName: - - -n -g --resource-type - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Network/locations/southcentralus/operations/e0abf840-ba02-49fc-beeb-7db354e31a29?api-version=2020-11-01 - response: - body: - string: "{\r\n \"status\": \"Succeeded\"\r\n}" - headers: - cache-control: - - no-cache - content-length: - - '29' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Microsoft-HTTPAPI/2.0 - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-arm-service-request-id: - - c209f4ef-8e19-4277-b422-7184c498f4eb - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?$filter=&$expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486","name":"acctestsig201105133030970486","type":"Microsoft.Compute/galleries","location":"westeurope","createdTime":"2020-11-05T05:30:46.2076666Z","changedTime":"2020-11-05T05:41:11.5597808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-201105133030970486/providers/Microsoft.Compute/galleries/acctestsig201105133030970486/images/acctest-gallery-image","name":"acctestsig201105133030970486/acctest-gallery-image","type":"Microsoft.Compute/galleries/images","location":"westeurope","createdTime":"2020-11-05T05:34:31.9451241Z","changedTime":"2020-11-05T05:44:59.3377576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102","name":"nxSIG07102","type":"Microsoft.Compute/galleries","location":"westus2","createdTime":"2020-07-10T11:42:52.5985146Z","changedTime":"2020-07-10T11:53:22.6097922Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102","name":"nxSIG07102/nxSIGImg07102","type":"Microsoft.Compute/galleries/images","location":"westus2","createdTime":"2020-07-10T11:43:02.952491Z","changedTime":"2020-07-10T11:53:27.8404666Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24328.22282","name":"nxSIG07102/nxSIGImg07102/0.24328.22282","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-10T11:54:51.1680609Z","changedTime":"2020-07-10T13:04:53.9445578Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"004a9308-143e-44b8-b3b1-5af42eff96a7","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24342.56449","name":"nxSIG07102/nxSIGImg07102/0.24342.56449","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-07-21T12:16:02.1664432Z","changedTime":"2020-07-21T13:26:04.0660672Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"5145b042-1359-4ed4-9f19-6099fd0b2383","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24468.61453","name":"nxSIG07102/nxSIGImg07102/0.24468.61453","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T03:25:01.8703777Z","changedTime":"2020-10-25T04:35:04.4028615Z","provisioningState":"Succeeded","tags":{"baseosimg":"sigDistUbuntu1804","correlationId":"3efdc5f6-daa2-4969-8ee0-bace6b37b8a8","source":"sigDist"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24469.61454","name":"nxSIG07102/nxSIGImg07102/0.24469.61454","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:40:04.234614Z","changedTime":"2020-10-25T09:59:38.8261528Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Compute/galleries/nxSIG07102/images/nxSIGImg07102/versions/0.24470.61455","name":"nxSIG07102/nxSIGImg07102/0.24470.61455","type":"Microsoft.Compute/galleries/images/versions","location":"westus2","createdTime":"2020-10-25T09:58:51.50527Z","changedTime":"2020-10-25T10:18:23.1194543Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity","name":"acctestIBT24Identity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2020-07-10T11:42:52.4556843Z","changedTime":"2020-07-10T11:53:00.0038971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-07T07:14:31.7897832Z","changedTime":"2021-04-07T07:26:43.0023655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0710-2","name":"acctest-IBT-0710-2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-10T11:43:12.5888397Z","changedTime":"2020-07-10T11:54:22.3314764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-0721-1","name":"acctest-IBT-0721-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-07-21T11:48:56.5731254Z","changedTime":"2020-07-21T11:59:27.1790442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-102510","name":"acctest-IBT-102510","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:54:15.1571876Z","changedTime":"2020-10-25T09:04:51.1877257Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10251-1","name":"acctest-IBT-10251-1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T02:28:27.5465752Z","changedTime":"2020-10-25T02:39:01.0283988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10252","name":"acctest-IBT-10252","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:09:52.9694941Z","changedTime":"2020-10-25T03:20:29.5493007Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10253","name":"acctest-IBT-10253","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T03:57:03.2920452Z","changedTime":"2020-10-25T04:07:41.3974639Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10254","name":"acctest-IBT-10254","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T04:23:56.8647542Z","changedTime":"2020-10-25T04:34:27.2311755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10258","name":"acctest-IBT-10258","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:12:52.4683068Z","changedTime":"2020-10-25T08:23:23.6867854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/acctestRG-ibt-24/providers/Microsoft.VirtualMachineImages/imageTemplates/acctest-IBT-10259","name":"acctest-IBT-10259","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acctestRG-ibt-24/providers/Microsoft.ManagedIdentity/userAssignedIdentities/acctestIBT24Identity":{"principalId":"8a435db6-b240-4b64-9ceb-2d3c6645251a","clientId":"c3c58fc2-f83d-408d-afbe-cc1e6505b03a"}}},"createdTime":"2020-10-25T08:30:33.3874492Z","changedTime":"2020-10-25T08:41:06.8073302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-0_OSDisk","name":"arofw67q5rek52-52k7q-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.2462502Z","changedTime":"2021-04-12T09:00:08.5839118Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-1_OSDisk","name":"arofw67q5rek52-52k7q-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:08.3675105Z","changedTime":"2021-04-12T09:00:08.5914759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-master-2_OSDisk","name":"arofw67q5rek52-52k7q-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:10.3890171Z","changedTime":"2021-04-12T09:00:10.6115612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:46.1020785Z","changedTime":"2021-04-12T09:09:46.310256Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:47.3275008Z","changedTime":"2021-04-12T09:09:47.6190678Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-SVOHDZM0/providers/Microsoft.Compute/disks/arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:50.4640691Z","changedTime":"2021-04-12T09:09:50.6095643Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-0","name":"arofw67q5rek52-52k7q-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:06.685089Z","changedTime":"2021-04-12T09:04:09.2839945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-1","name":"arofw67q5rek52-52k7q-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:06.7086872Z","changedTime":"2021-04-12T09:04:09.7753193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-master-2","name":"arofw67q5rek52-52k7q-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:06.7103577Z","changedTime":"2021-04-12T09:04:20.3638058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus1-nwrfg","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:44.3669211Z","changedTime":"2021-04-12T09:14:02.8746516Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus2-2l2c2","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:46.3667531Z","changedTime":"2021-04-12T09:11:12.2529418Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Compute/virtualMachines/arofw67q5rek52-52k7q-worker-eastus3-h4wt6","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:48.3627993Z","changedTime":"2021-04-12T09:11:20.2127337Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arofw67q5rek52-52k7q":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q","name":"arofw67q5rek52-52k7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.6002811Z","changedTime":"2021-04-12T09:14:19.1179351Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/loadBalancers/arofw67q5rek52-52k7q-internal","name":"arofw67q5rek52-52k7q-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1302336Z","changedTime":"2021-04-12T08:59:27.9410906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master0-nic","name":"arofw67q5rek52-52k7q-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.304125Z","changedTime":"2021-04-12T09:00:06.393648Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master1-nic","name":"arofw67q5rek52-52k7q-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3040502Z","changedTime":"2021-04-12T09:00:06.3845496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-master2-nic","name":"arofw67q5rek52-52k7q-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:06.3039171Z","changedTime":"2021-04-12T09:00:06.6901414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","name":"arofw67q5rek52-52k7q-pls.nic.77e5dd9d-0a4a-45ce-9490-116e060411ed","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:28.3250287Z","changedTime":"2021-04-12T09:01:29.5464385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","name":"arofw67q5rek52-52k7q-worker-eastus1-nwrfg-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:43.5082081Z","changedTime":"2021-04-12T09:09:43.8143791Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","name":"arofw67q5rek52-52k7q-worker-eastus2-2l2c2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:45.625482Z","changedTime":"2021-04-12T09:09:45.8235558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkInterfaces/arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","name":"arofw67q5rek52-52k7q-worker-eastus3-h4wt6-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:47.512729Z","changedTime":"2021-04-12T09:09:47.6081221Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/networkSecurityGroups/arofw67q5rek52-52k7q-nsg","name":"arofw67q5rek52-52k7q-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:26.1543677Z","changedTime":"2021-04-12T09:14:14.9148863Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/privateLinkServices/arofw67q5rek52-52k7q-pls","name":"arofw67q5rek52-52k7q-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:28.0399366Z","changedTime":"2021-04-12T08:59:29.728812Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-default-v4","name":"arofw67q5rek52-52k7q-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1534992Z","changedTime":"2021-04-12T08:59:28.2759547Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Network/publicIPAddresses/arofw67q5rek52-52k7q-pip-v4","name":"arofw67q5rek52-52k7q-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:26.1588977Z","changedTime":"2021-04-12T08:59:27.9490525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/clusterg7scd","name":"clusterg7scd","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:26.1436126Z","changedTime":"2021-04-12T08:59:45.2533904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-svohdzm0/providers/Microsoft.Storage/storageAccounts/imageregistryarofw6nwzts","name":"imageregistryarofw6nwzts","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:31.4054697Z","changedTime":"2021-04-12T09:15:50.7760855Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-0_OSDisk","name":"arov6yibwhxvjm-w22v4-master-0_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:08.540155Z","changedTime":"2021-04-12T09:00:08.9556544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-1_OSDisk","name":"arov6yibwhxvjm-w22v4-master-1_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:07.9609988Z","changedTime":"2021-04-12T09:00:08.2398219Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-master-2_OSDisk","name":"arov6yibwhxvjm-w22v4-master-2_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:07.4950766Z","changedTime":"2021-04-12T09:00:07.9074486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:28.4605977Z","changedTime":"2021-04-12T09:09:28.6625365Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:40.9139948Z","changedTime":"2021-04-12T09:09:41.1793822Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ARO-UT6BERCG/providers/Microsoft.Compute/disks/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k_OSDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:25.0253124Z","changedTime":"2021-04-12T09:09:25.3996457Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-0","name":"arov6yibwhxvjm-w22v4-master-0","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:50:05.222845Z","changedTime":"2021-04-12T09:04:38.4634184Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-1","name":"arov6yibwhxvjm-w22v4-master-1","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:50:05.219315Z","changedTime":"2021-04-12T09:04:17.3053581Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-master-2","name":"arov6yibwhxvjm-w22v4-master-2","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:50:05.1606849Z","changedTime":"2021-04-12T09:04:27.8606539Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["1"],"createdTime":"2021-04-12T08:59:27.2000516Z","changedTime":"2021-04-12T09:11:18.9345559Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["2"],"createdTime":"2021-04-12T08:59:39.6104838Z","changedTime":"2021-04-12T09:14:32.1052501Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Compute/virtualMachines/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k","type":"Microsoft.Compute/virtualMachines","location":"eastus","zones":["3"],"createdTime":"2021-04-12T08:59:23.6455586Z","changedTime":"2021-04-12T09:13:48.4686171Z","provisioningState":"Succeeded","tags":{"kubernetes.io-cluster-arov6yibwhxvjm-w22v4":"owned"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4","name":"arov6yibwhxvjm-w22v4","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:27.998699Z","changedTime":"2021-04-12T09:13:49.5705456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/loadBalancers/arov6yibwhxvjm-w22v4-internal","name":"arov6yibwhxvjm-w22v4-internal","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7558103Z","changedTime":"2021-04-12T08:59:27.6124441Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master0-nic","name":"arov6yibwhxvjm-w22v4-master0-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5421372Z","changedTime":"2021-04-12T09:00:04.7643067Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master1-nic","name":"arov6yibwhxvjm-w22v4-master1-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5393757Z","changedTime":"2021-04-12T09:00:05.0915013Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-master2-nic","name":"arov6yibwhxvjm-w22v4-master2-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:50:04.5410727Z","changedTime":"2021-04-12T09:00:04.8832948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","name":"arov6yibwhxvjm-w22v4-pls.nic.06dcb48f-8738-4211-9656-b75b72f90acf","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:49:26.7505008Z","changedTime":"2021-04-12T09:01:28.6237424Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus1-vs6c8-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:26.3261486Z","changedTime":"2021-04-12T09:09:26.413167Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus2-qmzv7-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:38.4834471Z","changedTime":"2021-04-12T09:09:38.8688044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkInterfaces/arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","name":"arov6yibwhxvjm-w22v4-worker-eastus3-nl45k-nic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-12T08:59:22.8312605Z","changedTime":"2021-04-12T09:09:23.0419419Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/networkSecurityGroups/arov6yibwhxvjm-w22v4-nsg","name":"arov6yibwhxvjm-w22v4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-12T08:49:24.7521838Z","changedTime":"2021-04-12T09:13:45.3613148Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/privateLinkServices/arov6yibwhxvjm-w22v4-pls","name":"arov6yibwhxvjm-w22v4-pls","type":"Microsoft.Network/privateLinkServices","location":"eastus","createdTime":"2021-04-12T08:49:26.3014379Z","changedTime":"2021-04-12T08:59:28.739045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-default-v4","name":"arov6yibwhxvjm-w22v4-default-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7542707Z","changedTime":"2021-04-12T08:59:28.8553948Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Network/publicIPAddresses/arov6yibwhxvjm-w22v4-pip-v4","name":"arov6yibwhxvjm-w22v4-pip-v4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-12T08:49:24.7375592Z","changedTime":"2021-04-12T08:59:28.9320962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/clusterlsklq","name":"clusterlsklq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T08:49:24.7298291Z","changedTime":"2021-04-12T08:59:43.7438124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/aro-ut6bercg/providers/Microsoft.Storage/storageAccounts/imageregistryarov6yf6vcw","name":"imageregistryarov6yf6vcw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:05:11.2368603Z","changedTime":"2021-04-12T09:15:31.1150544Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv2","name":"azps-test-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-05-05T11:31:41.5298101Z","changedTime":"2020-05-05T11:41:50.557608Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.KeyVault/vaults/azps-test-kv4","name":"azps-test-kv4","type":"Microsoft.KeyVault/vaults","location":"southcentralus","createdTime":"2020-05-05T11:55:38.2444907Z","changedTime":"2020-05-05T12:05:44.0757099Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationalInsights/workspaces/azps-test-la3","name":"azps-test-la3","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2020-05-05T12:54:39.2933466Z","changedTime":"2020-05-05T13:04:47.3002718Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(azps-test-la3)","name":"ContainerInsights(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"ContainerInsights(azps-test-la3)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2020-08-06T04:55:09.4143462Z","changedTime":"2020-08-06T05:05:16.19692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azps-test-group/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(azps-test-la3)","name":"SecurityCenterFree(azps-test-la3)","type":"Microsoft.OperationsManagement/solutions","location":"eastus","plan":{"name":"SecurityCenterFree(azps-test-la3)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2020-05-09T01:16:13.5096844Z","changedTime":"2020-05-09T01:26:16.4823977Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azextensionedge","name":"azextensionedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-22T08:51:56.5044652Z","changedTime":"2021-01-22T09:02:27.8598282Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-edge/providers/Microsoft.Storage/storageAccounts/azurecliedge","name":"azurecliedge","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-13T08:41:33.5170234Z","changedTime":"2021-01-13T08:52:05.0097032Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-group3yqjvwdwmnx2u5yrciutjqdcmvbpm5xe/providers/Microsoft.Storage/storageAccounts/armbuilddemovtxzzcjo","name":"armbuilddemovtxzzcjo","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T08:17:24.1098394Z","changedTime":"2021-04-13T08:28:48.0824903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupbvy56l4cm5xvclfem5lifl725op2rsc3/providers/Microsoft.Storage/storageAccounts/armbuilddemo5ygtzdg6","name":"armbuilddemo5ygtzdg6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T09:33:55.3062088Z","changedTime":"2021-04-14T09:45:48.6784085Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupcdatmlwa5j3tifda5whe7d52z4kd5hfs/providers/Microsoft.Storage/storageAccounts/armbuilddemomywovund","name":"armbuilddemomywovund","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-16T02:02:01.7490751Z","changedTime":"2021-04-16T02:14:04.1093545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-sub-resource-groupq7pgu7g74kinmn5rzzthu6dosn6x3bow/providers/Microsoft.Storage/storageAccounts/armbuilddemokch5pqfy","name":"armbuilddemokch5pqfy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-12T09:14:08.7393045Z","changedTime":"2021-04-12T09:25:57.063287Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.ApiManagement/service/yu-api-managemnt","name":"yu-api-managemnt","type":"Microsoft.ApiManagement/service","sku":{"name":"Developer","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-11T08:38:46.888819Z","changedTime":"2021-04-11T08:48:53.3212263Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er3","name":"er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:06:36.3521127Z","changedTime":"2021-04-10T17:54:50.2975164Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/azure-cli-test-rg/providers/Microsoft.Network/expressRouteCircuits/er4","name":"er4","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Premium_MeteredData","tier":"Premium","family":"MeteredData"},"location":"westus","createdTime":"2020-06-29T06:09:29.3443889Z","changedTime":"2021-04-10T17:54:47.8484572Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm26re6_2261088488855263421","name":"AzureBackup_clitest-vm26re6_2261088488855263421","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:26:29.1204485Z","changedTime":"2021-04-19T04:36:29.829373Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm2t3gu_2261158857931067538","name":"AzureBackup_clitest-vm2t3gu_2261158857931067538","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:30.6612334Z","changedTime":"2021-04-16T07:18:32.2322519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3324p_2261106080172620846","name":"AzureBackup_clitest-vm3324p_2261106080172620846","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:40.2857914Z","changedTime":"2021-04-19T03:18:41.6848015Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm35jy3_2261141265524437188","name":"AzureBackup_clitest-vm35jy3_2261141265524437188","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:05.678983Z","changedTime":"2021-04-19T02:59:06.0393385Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm3wjhb_2261088489278086062","name":"AzureBackup_clitest-vm3wjhb_2261088489278086062","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.804397Z","changedTime":"2021-04-16T02:40:44.600556Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm5u7qx_2261053303681191575","name":"AzureBackup_clitest-vm5u7qx_2261053303681191575","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.1506033Z","changedTime":"2021-04-16T02:40:42.7163544Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vm6fvdn_2261053303720667753","name":"AzureBackup_clitest-vm6fvdn_2261053303720667753","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:08:53.5777624Z","changedTime":"2021-04-19T03:18:54.9324571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vma264i_2261141265111804690","name":"AzureBackup_clitest-vma264i_2261141265111804690","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:40.9775125Z","changedTime":"2021-04-16T09:16:41.1595311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmadhle_2260859790611926139","name":"AzureBackup_clitest-vmadhle_2260859790611926139","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:48.868856Z","changedTime":"2021-04-16T07:18:49.6855604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmapciw_2260859791356008235","name":"AzureBackup_clitest-vmapciw_2260859791356008235","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:41.556148Z","changedTime":"2021-04-16T09:16:41.7225567Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmb7duk_2261088489774212355","name":"AzureBackup_clitest-vmb7duk_2261088489774212355","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:43.285658Z","changedTime":"2021-04-16T09:16:44.156077Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmd2aii_2261229225878424060","name":"AzureBackup_clitest-vmd2aii_2261229225878424060","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:09.2143666Z","changedTime":"2021-04-19T04:47:09.5137293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmdcma5_2261158858213169159","name":"AzureBackup_clitest-vmdcma5_2261158858213169159","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.7131897Z","changedTime":"2021-04-19T03:00:14.4389376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmgmhwn_2261141266250633839","name":"AzureBackup_clitest-vmgmhwn_2261141266250633839","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:07:13.480346Z","changedTime":"2021-04-16T09:17:14.8053716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmhjfw6_2261053305118118382","name":"AzureBackup_clitest-vmhjfw6_2261053305118118382","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:09:12.2882703Z","changedTime":"2021-04-16T07:19:13.6593866Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmi4jap_2260859790485391088","name":"AzureBackup_clitest-vmi4jap_2260859790485391088","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:29:56.3357952Z","changedTime":"2021-04-16T02:39:57.1719318Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmiciac_2261088489056547135","name":"AzureBackup_clitest-vmiciac_2261088489056547135","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:31.0216665Z","changedTime":"2021-04-16T07:03:31.8973369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmikbf6_2261229226311650386","name":"AzureBackup_clitest-vmikbf6_2261229226311650386","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:49.1072481Z","changedTime":"2021-04-16T07:18:50.2869271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmj6du6_2261158857934913237","name":"AzureBackup_clitest-vmj6du6_2261158857934913237","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T09:06:42.1518997Z","changedTime":"2021-04-16T09:16:43.9773093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmk44by_2261229225473548201","name":"AzureBackup_clitest-vmk44by_2261229225473548201","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:01.1014075Z","changedTime":"2021-04-16T07:04:02.3547098Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmkukxw_2260894975511828621","name":"AzureBackup_clitest-vmkukxw_2260894975511828621","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:49:55.7714218Z","changedTime":"2021-04-19T02:59:57.9798884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmbwpy_2260877382003851269","name":"AzureBackup_clitest-vmmbwpy_2260877382003851269","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:14:16.8461273Z","changedTime":"2021-04-19T03:24:18.1698686Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmmfxvu_2260912566599811453","name":"AzureBackup_clitest-vmmfxvu_2260912566599811453","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:53:15.4788182Z","changedTime":"2021-04-16T07:03:17.9538523Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmnmrcp_2260824606527382206","name":"AzureBackup_clitest-vmnmrcp_2260824606527382206","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:00.8677421Z","changedTime":"2021-04-16T07:04:00.8437587Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmoj34e_2261158858203422346","name":"AzureBackup_clitest-vmoj34e_2261158858203422346","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T07:08:19.2945172Z","changedTime":"2021-04-16T07:18:20.5722036Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmpobgl_2260824606254262585","name":"AzureBackup_clitest-vmpobgl_2260824606254262585","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.7763942Z","changedTime":"2021-04-19T04:48:16.3770703Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmqzv6i_2260859791250480109","name":"AzureBackup_clitest-vmqzv6i_2260859791250480109","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.8936399Z","changedTime":"2021-04-19T04:47:58.6984875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrtwpn_2261229226023458214","name":"AzureBackup_clitest-vmrtwpn_2261229226023458214","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:37:56.7582012Z","changedTime":"2021-04-19T04:47:57.9082721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmrxhtu_2261053303968076284","name":"AzureBackup_clitest-vmrxhtu_2261053303968076284","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:30:42.5677788Z","changedTime":"2021-04-16T02:40:43.0940958Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmshpos_2261158857219504867","name":"AzureBackup_clitest-vmshpos_2261158857219504867","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T06:54:24.1188256Z","changedTime":"2021-04-16T07:04:27.6468755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmsv4ov_2260824606495890296","name":"AzureBackup_clitest-vmsv4ov_2260824606495890296","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T04:38:14.5424491Z","changedTime":"2021-04-19T04:48:15.6671255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmu5dsp_2260842198981971005","name":"AzureBackup_clitest-vmu5dsp_2260842198981971005","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T03:07:40.0020045Z","changedTime":"2021-04-19T03:17:40.6741316Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmvp3rj_2260877383307929596","name":"AzureBackup_clitest-vmvp3rj_2260877383307929596","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-16T02:31:05.1802996Z","changedTime":"2021-04-16T02:41:06.7955643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmw76iz_2261229225544885407","name":"AzureBackup_clitest-vmw76iz_2261229225544885407","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.3940245Z","changedTime":"2021-04-19T03:00:15.0503048Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureBackupRG_southeastasia_1/providers/Microsoft.Compute/restorePointCollections/AzureBackup_clitest-vmz7nxh_2261088488670144788","name":"AzureBackup_clitest-vmz7nxh_2261088488670144788","type":"Microsoft.Compute/restorePointCollections","location":"southeastasia","createdTime":"2021-04-19T02:50:12.6522625Z","changedTime":"2021-04-19T03:00:13.8366229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto","name":"fyauto","type":"Microsoft.Automation/automationAccounts","location":"westus","createdTime":"2020-04-24T07:06:07.418757Z","changedTime":"2020-04-24T07:16:08.9280598Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Automation/automationAccounts/fyauto/runbooks/test","name":"fyauto/test","type":"Microsoft.Automation/automationAccounts/runbooks","location":"westus","createdTime":"2020-04-27T05:34:43.2354012Z","changedTime":"2020-04-27T05:44:51.5497093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/AzureSDKTest_ScheduledCleaner","name":"AzureSDKTest_ScheduledCleaner","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-18T06:40:57.1273717Z","changedTime":"2019-11-18T06:50:56.307573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/FetchModules","name":"FetchModules","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2020-04-24T06:32:56.3582667Z","changedTime":"2020-04-24T06:42:59.0756784Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Logic/workflows/TestLogicApp","name":"TestLogicApp","type":"Microsoft.Logic/workflows","location":"westus","createdTime":"2019-11-25T03:03:31.6341307Z","changedTime":"2019-11-25T03:13:34.2546185Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/azuresdktest","name":"azuresdktest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2020-08-12T06:32:05.3619532Z","changedTime":"2020-08-12T06:42:31.7422018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs1100320007de01867","name":"cs1100320007de01867","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-25T03:23:57.62202Z","changedTime":"2020-09-25T03:34:27.725325Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Storage/storageAccounts/cs110032000ca62af00","name":"cs110032000ca62af00","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-09-22T02:06:15.3601567Z","changedTime":"2020-09-22T02:16:42.6239426Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/arm","name":"arm","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T10:24:07.4450787Z","changedTime":"2019-11-21T10:34:13.538956Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azureautomation","name":"azureautomation","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-21T14:07:55.6147516Z","changedTime":"2019-11-21T14:18:00.3517767Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/AzureSDKTest_reserved/providers/Microsoft.Web/connections/azuremonitorlogs","name":"azuremonitorlogs","type":"Microsoft.Web/connections","location":"westus","createdTime":"2019-11-25T09:14:14.3956474Z","changedTime":"2019-11-25T09:24:22.6790709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/bez-rg/providers/Microsoft.AppConfiguration/configurationStores/bez-appconfig","name":"bez-appconfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"eastus","createdTime":"2021-04-19T08:38:39.2695045Z","changedTime":"2021-04-19T08:48:57.7529998Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-beta/providers/Microsoft.Storage/storageAccounts/azureclibetarelease","name":"azureclibetarelease","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGZRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-06-11T10:32:23.2413615Z","changedTime":"2020-06-11T10:42:49.2492786Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/cli-test-alert","name":"cli-test-alert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:17:29.2915668Z","changedTime":"2020-11-11T15:27:34.6963894Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/microsoft.insights/activityLogAlerts/testalert","name":"testalert","type":"microsoft.insights/activityLogAlerts","location":"global","createdTime":"2020-11-11T15:10:08.782962Z","changedTime":"2020-11-11T15:20:15.5004722Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/advisortestsa","name":"advisortestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T02:39:44.5545349Z","changedTime":"2020-10-29T02:50:30.631325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli-live-test-rg/providers/Microsoft.Storage/storageAccounts/locksa","name":"locksa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-29T03:24:13.5900838Z","changedTime":"2020-10-29T03:34:42.5080723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/networkInterfaces/anf-cli-vnet-lefr-02-nic-OP6BGH","name":"anf-cli-vnet-lefr-02-nic-OP6BGH","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-05-10T06:59:55.9824507Z","changedTime":"2020-10-27T09:57:21.0871297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_netappfiles_test_snapshot_vpshzlob7c63iuglneagoxjxa45dqn6eoglhf37oo5cms/providers/Microsoft.Network/virtualNetworks/cli-vnet-lefr-02","name":"cli-vnet-lefr-02","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-05-10T06:48:02.4981841Z","changedTime":"2020-10-27T05:58:01.0989747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_adls_mgmtc3u7bspjdsazbjn63zrfarkvixs7rdsochnt5sgeo6onz5j6zoizpm6vc/providers/Microsoft.DataLakeStore/accounts/cliadlsgo26touowieb2cen6","name":"cliadlsgo26touowieb2cen6","type":"Microsoft.DataLakeStore/accounts","location":"eastus2","createdTime":"2020-12-24T21:04:09.17285Z","changedTime":"2020-12-24T22:14:56.5420596Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_address_poolt6oxl4koeg3wfjt5mgtbyku627cj35fvd3s4fuuimk7ypr34rzb/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:32:21.5886933Z","changedTime":"2021-04-19T08:42:26.5169434Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:32:23.4384457Z","changedTime":"2021-04-19T07:42:39.8215529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_sku4rfgsu3nhaogvv7klbipjfxwe2flslnmx47ocdd2db/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:32:23.5916344Z","changedTime":"2021-04-19T07:42:39.9312305Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T06:18:30.3372951Z","changedTime":"2021-04-19T07:28:38.1015355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_basic_with_waf_v2_skurb5y24lw5woheldkqs2yy5et7qx36xefw2o4cfimzi/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:18:36.0313431Z","changedTime":"2021-04-19T07:28:42.5533848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_http_settingskfu5de2vrkapsbx6b5obxwenybozqtgj3je2koogzdutyyhxay/providers/Microsoft.Network/virtualNetworks/ag1Vnet","name":"ag1Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T06:34:36.1931932Z","changedTime":"2021-04-19T07:44:42.5763794Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_ag_private_ipzoa2yhqfmhw5qlfxfskzlrb3bt5aywcamkaawmnbbtsbudw7mt6oh/providers/Microsoft.Network/virtualNetworks/ag3Vnet","name":"ag3Vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:07.3819292Z","changedTime":"2021-04-19T07:23:13.5402712Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic","tier":"Regional"},"location":"westus","createdTime":"2021-04-19T07:13:46.0989194Z","changedTime":"2021-04-19T07:13:47.4964419Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_configqsljmybfjbuesu4pxo24flujxse7pejbiwwxxg3ief3g/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:13:46.121184Z","changedTime":"2021-04-19T08:23:52.7013801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T07:14:19.1339652Z","changedTime":"2021-04-19T08:24:26.4272612Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_app_gateway_waf_v2_configfn4rzzccu6mig3ien4cegwuuj5ujbnpgedm7k45jn/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T07:14:25.8282152Z","changedTime":"2021-04-19T08:24:30.4740724Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8914675Z","changedTime":"2021-04-12T08:58:40.3758816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_create2waiwujue/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arofw67q5rek52","name":"arofw67q5rek52","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:48.5400984Z","changedTime":"2021-04-12T09:58:51.2060405Z","provisioningState":"Succeeded","tags":{"test":"create"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.Network/virtualNetworks/dev-vnet","name":"dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-12T08:48:20.8755968Z","changedTime":"2021-04-12T08:58:39.5679313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_aro_delete36jyrecqs/providers/Microsoft.RedHatOpenShift/OpenShiftClusters/arov6yibwhxvjm","name":"arov6yibwhxvjm","type":"Microsoft.RedHatOpenShift/OpenShiftClusters","location":"eastus","createdTime":"2021-04-12T08:48:47.9935057Z","changedTime":"2021-04-12T09:58:50.5594979Z","provisioningState":"Succeeded","tags":{"test":"delete"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/azureFirewalls/af1","name":"af1","type":"Microsoft.Network/azureFirewalls","location":"westus","createdTime":"2021-04-12T09:03:04.0367428Z","changedTime":"2021-04-12T11:33:57.0721361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip","name":"pubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:21.9675128Z","changedTime":"2021-04-12T09:13:38.9330258Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:30.2164826Z","changedTime":"2021-04-12T09:13:44.4480486Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:39.3288107Z","changedTime":"2021-04-12T09:13:57.5869497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/publicIPAddresses/pubip4","name":"pubip4","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-12T09:03:47.1984094Z","changedTime":"2021-04-12T09:13:59.0876932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_management_ip_configw5gnu7v4akix2d2letnb6zooidpbqyp/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-12T09:03:53.3128391Z","changedTime":"2021-04-12T09:14:08.3283227Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupse4upfibqoujmdn4odvtgrbuvqqgdvwd7/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2019-12-30T02:25:16.3095615Z","changedTime":"2020-10-27T09:45:50.0429716Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_azure_firewall_rules_with_ipgroupsqiervqkqdl6gyu4szgpwbyiw7zx3ucbo/providers/Microsoft.Network/ipGroups/destinationipgroup","name":"destinationipgroup","type":"Microsoft.Network/ipGroups","location":"westus","createdTime":"2020-04-15T03:16:15.9940413Z","changedTime":"2020-12-05T15:14:21.3798881Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cannotdelete_resource_lockbfuaftaa7m4m77urywe56rs3yfr4sr3ybmrsclix/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchikdj2r5lezlez4w6","name":"cli.lock.rsrchikdj2r5lezlez4w6","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:32:38.6940754Z","changedTime":"2021-03-15T09:42:57.0446664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.DocumentDB/databaseAccounts/clid54s6kmw5lrn","name":"clid54s6kmw5lrn","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"principalId":"788276c6-b598-4e17-8d99-5e2590f60ac2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T08:28:24.6997378Z","changedTime":"2021-04-19T08:42:21.3351228Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cosmosdb_managed_service_identity4hai5d62ht3bs4jwmjmwo4v6m226cjwlg/providers/Microsoft.KeyVault/vaults/cliilyurd6vstia","name":"cliilyurd6vstia","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:27:40.7164456Z","changedTime":"2021-04-19T08:37:45.9012352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/loadBalancers/regional_lbxkh23noyglagq","name":"regional_lbxkh23noyglagq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:15.1922556Z","changedTime":"2021-03-26T14:51:19.3652118Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyu5n3vm5v4kwtqy2nbo2lbqzxpy/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbxkh23noyglagq","name":"PublicIPregional_lbxkh23noyglagq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-26T14:41:06.089486Z","changedTime":"2021-03-26T14:51:19.8439999Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/loadBalancers/regional_lbcf3555ehqbtyl","name":"regional_lbcf3555ehqbtyl","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:21.4836335Z","changedTime":"2021-03-01T13:20:21.791231Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszfkzun2fx2qfg42djotmmoanpjp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcf3555ehqbtyl","name":"PublicIPregional_lbcf3555ehqbtyl","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-01T13:10:14.5117863Z","changedTime":"2021-03-01T13:20:18.4191355Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/loadBalancers/regional_lbzjby4ql6bksa2","name":"regional_lbzjby4ql6bksa2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:20.138089Z","changedTime":"2021-03-11T22:48:20.2258585Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesj3khcfi6gc7323w35chifz7kg2ev/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzjby4ql6bksa2","name":"PublicIPregional_lbzjby4ql6bksa2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T22:38:14.2496312Z","changedTime":"2021-03-11T22:48:20.6400934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/loadBalancers/regional_lbjpisrdcxtbqct","name":"regional_lbjpisrdcxtbqct","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:44.9673711Z","changedTime":"2021-02-26T02:33:51.6317627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesoignfq5bvlkrkbe5twew74cnqf4u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbjpisrdcxtbqct","name":"PublicIPregional_lbjpisrdcxtbqct","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-26T02:23:32.612122Z","changedTime":"2021-02-26T02:39:44.3217692Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/loadBalancers/regional_lb25be43jzjpf7d","name":"regional_lb25be43jzjpf7d","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:57.858486Z","changedTime":"2021-01-15T07:21:00.2685278Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses32d6xsgucbg5imtbdod4xoclof3b/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb25be43jzjpf7d","name":"PublicIPregional_lb25be43jzjpf7d","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-15T07:10:51.1175065Z","changedTime":"2021-01-15T07:20:57.1605729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/loadBalancers/regional_lbybt2r6fcanbhh","name":"regional_lbybt2r6fcanbhh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:20.2027735Z","changedTime":"2020-12-10T23:04:22.080298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses6amluposjhq63wl56nm5uuqagvkm/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbybt2r6fcanbhh","name":"PublicIPregional_lbybt2r6fcanbhh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-10T22:54:12.0213425Z","changedTime":"2020-12-10T23:04:19.3875225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/loadBalancers/regional_lbd7cionsklxxqx","name":"regional_lbd7cionsklxxqx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:31.4083116Z","changedTime":"2021-03-04T09:36:42.9382451Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesdrdvvdd7gc7cfyojr5d25mhmzuyj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbd7cionsklxxqx","name":"PublicIPregional_lbd7cionsklxxqx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T09:26:22.1553247Z","changedTime":"2021-03-04T09:36:38.8075349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/loadBalancers/regional_lbagho65afea3vh","name":"regional_lbagho65afea3vh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:42.8678369Z","changedTime":"2021-04-01T23:45:43.1939051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5jczhp4wxusv7bc7xtsyoob6prc5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbagho65afea3vh","name":"PublicIPregional_lbagho65afea3vh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-01T23:35:41.502152Z","changedTime":"2021-04-01T23:45:43.6919402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/loadBalancers/regional_lbnv4tc5zx2h5ym","name":"regional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:48.2442696Z","changedTime":"2020-12-16T06:27:51.9479415Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfnbu2imlr2kcby76zts45sgtnuou/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbnv4tc5zx2h5ym","name":"PublicIPregional_lbnv4tc5zx2h5ym","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-16T06:17:35.4065067Z","changedTime":"2020-12-16T06:27:46.8044352Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/loadBalancers/regional_lbv7wp2dd2wqqyx","name":"regional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:07.4112645Z","changedTime":"2021-01-18T05:07:09.3912002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswdaazq5357pzccv2mh52buhikdnc/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbv7wp2dd2wqqyx","name":"PublicIPregional_lbv7wp2dd2wqqyx","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-18T04:57:04.7138066Z","changedTime":"2021-01-18T05:07:10.6585147Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/loadBalancers/regional_lb2tzyxdnv4qnzq","name":"regional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:22.922429Z","changedTime":"2021-01-28T22:32:25.0897376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqgwuc7c7icriidypw6qifpcmgsp7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2tzyxdnv4qnzq","name":"PublicIPregional_lb2tzyxdnv4qnzq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-28T22:22:17.0337405Z","changedTime":"2021-01-28T22:32:27.4361055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/loadBalancers/regional_lb4j7jgdn7wcvrb","name":"regional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:48.4904745Z","changedTime":"2021-02-24T12:07:54.1274893Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4kvora4kip33pj3fbm3o5vrtueye/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb4j7jgdn7wcvrb","name":"PublicIPregional_lb4j7jgdn7wcvrb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T11:57:36.6338101Z","changedTime":"2021-02-24T12:07:47.6327189Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/loadBalancers/regional_lbzg42koygsu4vz","name":"regional_lbzg42koygsu4vz","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:22.6943012Z","changedTime":"2021-04-08T23:16:24.1008332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmrvt3vrxqgrrpv4xpmo4sdpb4pjr/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzg42koygsu4vz","name":"PublicIPregional_lbzg42koygsu4vz","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-08T23:06:21.5434071Z","changedTime":"2021-04-08T23:16:23.3066805Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/loadBalancers/regional_lbvbmqznhkakb7q","name":"regional_lbvbmqznhkakb7q","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:36.3749368Z","changedTime":"2021-02-11T22:24:38.6772131Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressessdj5k2myktnd5nbo3qbakrenw5kg/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbvbmqznhkakb7q","name":"PublicIPregional_lbvbmqznhkakb7q","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-11T22:14:30.9050069Z","changedTime":"2021-02-11T22:24:35.6360514Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/loadBalancers/regional_lbm25pqw3luzarb","name":"regional_lbm25pqw3luzarb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:39.1273566Z","changedTime":"2020-12-24T22:17:41.5822183Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesgsknvtdkrmwttlqodredixgsi6bh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbm25pqw3luzarb","name":"PublicIPregional_lbm25pqw3luzarb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-24T22:07:35.4568842Z","changedTime":"2020-12-24T22:18:39.0344628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/loadBalancers/regional_lbn4pv3q6sjmfry","name":"regional_lbn4pv3q6sjmfry","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:12.6835731Z","changedTime":"2021-03-04T22:51:13.3648488Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesrqudeuqxhsifw6sqqy2fojahsf4w/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbn4pv3q6sjmfry","name":"PublicIPregional_lbn4pv3q6sjmfry","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T22:41:08.9159566Z","changedTime":"2021-03-04T22:51:12.0064533Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/loadBalancers/regional_lb46d27g77nkzvq","name":"regional_lb46d27g77nkzvq","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:39.2836914Z","changedTime":"2021-03-11T05:34:46.5140066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses76jhg2vitn465djvqxk2gb4ubps7/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46d27g77nkzvq","name":"PublicIPregional_lb46d27g77nkzvq","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-11T05:24:26.0692072Z","changedTime":"2021-03-11T05:34:44.3689555Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/loadBalancers/regional_lbzudxfxriszmql","name":"regional_lbzudxfxriszmql","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:19.9376988Z","changedTime":"2021-03-04T06:24:26.8067859Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesqkyuavqqwin5za2ujunpdcbrbcww/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbzudxfxriszmql","name":"PublicIPregional_lbzudxfxriszmql","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-04T06:14:08.8748832Z","changedTime":"2021-03-04T06:24:27.8744374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/loadBalancers/regional_lbcai7tfqae5mly","name":"regional_lbcai7tfqae5mly","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:31.3106572Z","changedTime":"2020-12-02T08:45:37.6006808Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesvyrgv4r2yw5xrv3a327jhtlxzarx/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcai7tfqae5mly","name":"PublicIPregional_lbcai7tfqae5mly","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:35:16.1420897Z","changedTime":"2020-12-02T08:45:35.1802775Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/loadBalancers/regional_lbw6w2xoz5fx5qh","name":"regional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:30.2019811Z","changedTime":"2021-02-25T22:45:32.2075698Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesfm65azpgfoj4h26v4rf3g6xo7qdb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbw6w2xoz5fx5qh","name":"PublicIPregional_lbw6w2xoz5fx5qh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T22:35:27.3771248Z","changedTime":"2021-02-25T22:45:32.5620549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/loadBalancers/regional_lb47ywzrihojvbn","name":"regional_lb47ywzrihojvbn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:55:01.9908672Z","changedTime":"2021-02-08T08:05:05.9186973Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesn4ef42fb2zewgwsuxwizvypu6enh/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb47ywzrihojvbn","name":"PublicIPregional_lb47ywzrihojvbn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:54:51.4775203Z","changedTime":"2021-02-08T08:05:06.1246053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/loadBalancers/regional_lbsff2pnbruzuhj","name":"regional_lbsff2pnbruzuhj","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:57.0610884Z","changedTime":"2021-03-25T23:09:57.3288166Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseswb44v3w4efove3ym7n7rpbiq27ze/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbsff2pnbruzuhj","name":"PublicIPregional_lbsff2pnbruzuhj","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-25T22:59:55.32535Z","changedTime":"2021-03-25T23:09:57.5012421Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/loadBalancers/regional_lb46b3dwre5nwds","name":"regional_lb46b3dwre5nwds","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:13.5854899Z","changedTime":"2021-02-25T03:38:19.8757747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesmy6qtgk5zsucfq6c3b6umwpmeedn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb46b3dwre5nwds","name":"PublicIPregional_lb46b3dwre5nwds","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-02-25T03:28:01.8791254Z","changedTime":"2021-02-25T03:38:16.1106384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/loadBalancers/regional_lblnhmsh42fioeh","name":"regional_lblnhmsh42fioeh","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:19.39214Z","changedTime":"2020-12-02T10:28:24.6415456Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess7qzk3wraffcw5jeohhoryzdfdbn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lblnhmsh42fioeh","name":"PublicIPregional_lblnhmsh42fioeh","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T10:18:07.7222345Z","changedTime":"2020-12-02T10:28:27.1723167Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/loadBalancers/regional_lbdwqxowqtnpmfp","name":"regional_lbdwqxowqtnpmfp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:54.0837225Z","changedTime":"2020-12-02T08:59:59.2460588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesopbetueqhagzmpp4uljksscc3zea/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdwqxowqtnpmfp","name":"PublicIPregional_lbdwqxowqtnpmfp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:49:38.166803Z","changedTime":"2020-12-02T09:00:00.2498559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/loadBalancers/regional_lb7akfmw4cdcucm","name":"regional_lb7akfmw4cdcucm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:52.4284961Z","changedTime":"2020-12-17T22:56:25.0166129Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesuenpaq5fiaea46gr2npvcwwc2cfb/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7akfmw4cdcucm","name":"PublicIPregional_lb7akfmw4cdcucm","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-17T22:45:46.2205057Z","changedTime":"2020-12-17T22:55:51.802693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/loadBalancers/regional_lba5wiqc3sn2t4i","name":"regional_lba5wiqc3sn2t4i","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:39.7490958Z","changedTime":"2020-12-02T08:36:46.4808097Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesd3aexjpxti3bukzb2rqqynhtjptq/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lba5wiqc3sn2t4i","name":"PublicIPregional_lba5wiqc3sn2t4i","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-02T08:26:29.036419Z","changedTime":"2020-12-02T08:36:44.5142522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/loadBalancers/regional_lb7iw5ga3czzyea","name":"regional_lb7iw5ga3czzyea","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:22:32.8875279Z","changedTime":"2020-12-14T06:32:38.9959332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesf6mql6vj5l73ihr7d7uogkaq3atk/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb7iw5ga3czzyea","name":"PublicIPregional_lb7iw5ga3czzyea","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T06:21:25.0778145Z","changedTime":"2020-12-14T06:34:05.9130986Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/loadBalancers/regional_lbudcuorv72b6iy","name":"regional_lbudcuorv72b6iy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:43.6953157Z","changedTime":"2021-02-04T22:18:46.1482772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesi2vdjk7hyqvrtkkhi6hnjtv3iaq4/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbudcuorv72b6iy","name":"PublicIPregional_lbudcuorv72b6iy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-04T22:08:38.6954529Z","changedTime":"2021-02-04T22:18:45.6026588Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/loadBalancers/regional_lb5dtpfe4qdpuje","name":"regional_lb5dtpfe4qdpuje","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:36.7589302Z","changedTime":"2021-03-18T22:49:38.2277051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesotkiar665vufxm7uk6wtbbvlymc3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb5dtpfe4qdpuje","name":"PublicIPregional_lb5dtpfe4qdpuje","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-03-18T22:39:34.9087676Z","changedTime":"2021-03-18T22:49:41.2357601Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/loadBalancers/regional_lbhohutoxiebqgp","name":"regional_lbhohutoxiebqgp","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:25.7557267Z","changedTime":"2021-02-08T07:10:27.7982676Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseszq6ofmau5cowzkmc4cfn4voo5bbw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbhohutoxiebqgp","name":"PublicIPregional_lbhohutoxiebqgp","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-08T07:00:14.4359159Z","changedTime":"2021-02-08T07:10:27.1700969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/loadBalancers/regional_lbmdpx7446pzc5y","name":"regional_lbmdpx7446pzc5y","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:19.959827Z","changedTime":"2021-01-21T22:27:22.022545Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressespl3xt34nfw6vt5xfyaxkxirxjevj/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbmdpx7446pzc5y","name":"PublicIPregional_lbmdpx7446pzc5y","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-21T22:17:07.6375889Z","changedTime":"2021-01-21T22:27:39.0509779Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/loadBalancers/regional_lby77zlrziten5o","name":"regional_lby77zlrziten5o","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:10.4743661Z","changedTime":"2021-01-08T00:25:12.3145632Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressescldivssh73qdsgwqhy2zz3236pfp/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lby77zlrziten5o","name":"PublicIPregional_lby77zlrziten5o","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-08T00:15:06.7386285Z","changedTime":"2021-01-08T00:25:23.6376298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/loadBalancers/regional_lb2ybo2vend7ihy","name":"regional_lb2ybo2vend7ihy","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:54:08.5633583Z","changedTime":"2021-02-23T10:04:13.1737717Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesnv6vuqrzbvdshvt7kucy7tpmzocf/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb2ybo2vend7ihy","name":"PublicIPregional_lb2ybo2vend7ihy","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-23T09:53:56.4461096Z","changedTime":"2021-02-23T10:04:08.6476402Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/loadBalancers/regional_lb43z7636enp4af","name":"regional_lb43z7636enp4af","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:50.5089071Z","changedTime":"2021-02-18T22:24:52.2733684Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressess6pmcdeelfzx52vg33377ouswbu3/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lb43z7636enp4af","name":"PublicIPregional_lb43z7636enp4af","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-18T22:14:43.1496657Z","changedTime":"2021-02-18T22:24:50.5565814Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/loadBalancers/regional_lbcobx6djp6sm7l","name":"regional_lbcobx6djp6sm7l","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:53.7540421Z","changedTime":"2021-01-22T16:04:55.6545993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresseshtwcgm3z3cu3q77liwmn2yoho3rn/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbcobx6djp6sm7l","name":"PublicIPregional_lbcobx6djp6sm7l","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-01-22T15:54:47.113249Z","changedTime":"2021-01-22T16:04:53.92469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/loadBalancers/regional_lbdnhcgcr6tzpby","name":"regional_lbdnhcgcr6tzpby","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:25:00.4799061Z","changedTime":"2021-04-19T06:35:01.7092502Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesay6bkqwdivijakmosbvwpql4v7xw/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbdnhcgcr6tzpby","name":"PublicIPregional_lbdnhcgcr6tzpby","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus2","createdTime":"2021-04-19T06:24:55.3409752Z","changedTime":"2021-04-19T06:35:00.1460487Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/loadBalancers/regional_lbp3hl65myihzl7","name":"regional_lbp3hl65myihzl7","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:25.4107346Z","changedTime":"2021-02-24T05:45:27.5473683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses4bgar3de24y4pwudnnq77rvvgd3u/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbp3hl65myihzl7","name":"PublicIPregional_lbp3hl65myihzl7","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-02-24T05:35:22.8536721Z","changedTime":"2021-02-24T05:45:28.0574347Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/loadBalancers/regional_lbbdqczdejohyig","name":"regional_lbbdqczdejohyig","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:21.9547655Z","changedTime":"2020-12-31T22:15:25.1889539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addresses5hnlb7t3cisfqh6ygv3xiajgzn4a/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbdqczdejohyig","name":"PublicIPregional_lbbdqczdejohyig","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-31T22:05:14.8634883Z","changedTime":"2020-12-31T22:15:19.9170379Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/loadBalancers/regional_lbbooefhvedifqn","name":"regional_lbbooefhvedifqn","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:38:08.5253683Z","changedTime":"2020-12-14T04:48:14.1545122Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_cross_region_lb_address_pool_addressesxc3jz5jnajip6ymgroiqxt6xzzg5/providers/Microsoft.Network/publicIPAddresses/PublicIPregional_lbbooefhvedifqn","name":"PublicIPregional_lbbooefhvedifqn","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-12-14T04:37:56.2549967Z","changedTime":"2020-12-14T04:50:12.4792096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployments7kgomn77lfxtroxvnz5bxqf7wnrc5o7dxv6gimlrsdc22hlaz6f4ow4/providers/Microsoft.Network/loadBalancers/test-lb","name":"test-lb","type":"Microsoft.Network/loadBalancers","location":"westus","createdTime":"2021-04-19T09:34:12.6206329Z","changedTime":"2021-04-19T09:34:13.8434079Z","provisioningState":"Succeeded","tags":{"key":"super=value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_deployments7kgomn77lfxtroxvnz5bxqf7wnrc5o7dxv6gimlrsdc22hlaz6f4ow4/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:49.1928149Z","changedTime":"2021-04-19T09:34:00.1589501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_group_deployment_no_waith6ttsvj6w7i266dm2kckimrojqsasof2nsoxyn47tp/providers/Microsoft.Network/networkSecurityGroups/azure-cli-deploy-test-nsg1","name":"azure-cli-deploy-test-nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-19T09:34:06.9068271Z","changedTime":"2021-04-19T09:34:08.714502Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Compute/virtualMachines/cli-test-vmnibf5bvklywq2ymmtdy","name":"cli-test-vmnibf5bvklywq2ymmtdy","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-15T07:13:29.467257Z","changedTime":"2021-04-15T07:24:18.1627157Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkInterfaces/cli-test-vmnibf5bvklywq2ymmtdyVMNic","name":"cli-test-vmnibf5bvklywq2ymmtdyVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T07:13:09.7725797Z","changedTime":"2021-04-15T07:23:14.7190309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/networkSecurityGroups/cli-test-vmnibf5bvklywq2ymmtdyNSG","name":"cli-test-vmnibf5bvklywq2ymmtdyNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T07:12:58.5696502Z","changedTime":"2021-04-15T07:23:11.2703669Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/publicIPAddresses/cli-test-vmnibf5bvklywq2ymmtdyPublicIP","name":"cli-test-vmnibf5bvklywq2ymmtdyPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T07:12:58.7843504Z","changedTime":"2021-04-15T07:23:12.5093109Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Network/virtualNetworks/cli-test-vmnibf5bvklywq2ymmtdyVNET","name":"cli-test-vmnibf5bvklywq2ymmtdyVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T07:12:58.7288493Z","changedTime":"2021-04-15T07:23:14.1782772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_invoke_actionkcijqrlzz6uanpvfjygacx6adl5p3mytk73vdybjmskrjewyzwlzh/providers/Microsoft.Storage/storageAccounts/vhdstorage90ae149a0f6ea4","name":"vhdstorage90ae149a0f6ea4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T07:12:58.1498159Z","changedTime":"2021-04-15T07:23:26.1705332Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_certggzs7nxo5hjulhbph77kpvp354aj2g76gnb4o6vaxi6syrqnv6ggq/providers/Microsoft.KeyVault/vaults/cli-test-kv-ct-jf3usxgrl","name":"cli-test-kv-ct-jf3usxgrl","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:06:53.4814235Z","changedTime":"2021-04-14T05:16:58.5743522Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.KeyVault/vaults/cli-test-kv-pec-x4mreb6v","name":"cli-test-kv-pec-x4mreb6v","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:06.0972466Z","changedTime":"2021-04-14T05:16:14.1674993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/networkInterfaces/cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","name":"cli-pe-mycqx4fn44yjpcc46.nic.f7997500-340e-44b5-8b85-215a28c08bb3","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T05:07:05.3813476Z","changedTime":"2021-04-14T05:19:09.2676052Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/privateEndpoints/cli-pe-mycqx4fn44yjpcc46","name":"cli-pe-mycqx4fn44yjpcc46","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T05:07:01.3595479Z","changedTime":"2021-04-14T05:17:49.7499046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_pecls2h5rxvfaqqkvye55nhoori3r3dmwaqfb7lzom54axazkkm4is7ke/providers/Microsoft.Network/virtualNetworks/cli-vnet-5r4bugubroyt4do","name":"cli-vnet-5r4bugubroyt4do","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T05:06:46.821525Z","changedTime":"2021-04-14T05:17:05.6788368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_sdmncdngmrvbbjhfs6a2sosy2kv22fuft3gi3yy6yqcgh53atiqp7iu6m/providers/Microsoft.KeyVault/vaults/cli-test-kv-sd-bii62ul25","name":"cli-test-kv-sd-bii62ul25","type":"Microsoft.KeyVault/vaults","location":"eastus2","createdTime":"2021-04-14T05:06:55.9703219Z","changedTime":"2021-04-14T05:17:00.3337256Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secret_soft_deletemq3pggvjub2evjp5lm4u3p6pogoqzenw3teewhk/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-sd-oftopu","name":"cli-test-kv-se-sd-oftopu","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-14T05:06:56.0416638Z","changedTime":"2021-04-14T05:17:02.2096416Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_keyvault_secretf6hut52qzfmqwtgebrz7mtpsdiu7jd2kq2enndadzgrvtk5prq6/providers/Microsoft.KeyVault/vaults/cli-test-kv-se-ewh7pirby","name":"cli-test-kv-se-ewh7pirby","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-14T05:07:32.5504336Z","changedTime":"2021-04-14T05:17:37.7303662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_managed_disk4gexyu6rdwvnrzdt4mthvex6lpqrabxlgduby2r2t3hfh5chs7mu4e/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-13T07:24:20.9314503Z","changedTime":"2021-04-13T07:34:41.5918451Z","provisioningState":"Succeeded","tags":{"tag1":"d1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_mixed_realitygv2l3elh76a7brm66drgektfyzfsijxog6smmqzg6dnn2r7ofuf6c/providers/Microsoft.MixedReality/spatialAnchorsAccounts/MyAccount","name":"MyAccount","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2019-12-27T22:16:04.2975773Z","changedTime":"2019-12-27T22:17:51.020628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_monitor_workspace_linked_storagejdybkqmzzolzk7dgnj4hfk65ggvvqbambj/providers/Microsoft.OperationalInsights/workspaces/clitestbyywriwbrsoo6","name":"clitestbyywriwbrsoo6","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-01T23:19:00.1397446Z","changedTime":"2021-04-09T11:38:07.3394121Z","provisioningState":"Succeeded","tags":{"clitest":"myron"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/publicIPAddresses/vgw1-pip","name":"vgw1-pip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westcentralus","createdTime":"2021-04-19T08:06:54.7669945Z","changedTime":"2021-04-19T08:17:14.3106693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworkGateways/vgw1","name":"vgw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westcentralus","createdTime":"2021-04-19T08:07:05.8580788Z","changedTime":"2021-04-19T09:17:11.6310311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_nw_troubleshootingcxmhvxpcu4fitdoa5ddcwflpojdyaoqwqzf5yrplvud2jrfo/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westcentralus","createdTime":"2021-04-19T08:06:39.9531253Z","changedTime":"2021-04-19T08:16:57.9750299Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_lockjx6ttb3z65qxag5jmkyx57xqdixze3rygnpzx7sod6tm/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrchobu6m73s6wskn2sb","name":"cli.lock.rsrchobu6m73s6wskn2sb","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:37.1521424Z","changedTime":"2021-04-19T09:33:48.0065489Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_readonly_resource_locklucgtzf5vgc65f5gjnxtn3kf4axeyzdcowlatqmvexq3/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrctghseyfj2qky7arbn","name":"cli.lock.rsrctghseyfj2qky7arbn","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-15T09:33:21.9151951Z","changedTime":"2021-03-15T09:43:37.5383326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redis72lrbohiall3omaxteflhwvcztjybszy2dxkcknzx66rqo2ymfujgjecjix5l/providers/Microsoft.Cache/Redis/cliredislr23mtndoqdrx6o5","name":"cliredislr23mtndoqdrx6o5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.0410862Z","changedTime":"2021-04-19T07:21:00.4378925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisbd6lg5gsy32xl3zaqq5ers2x3t6d2nkwuspuqt56wlieix7joeu7zadhwq6je/providers/Microsoft.Cache/Redis/cliredisimh4d33g6cdokgtl","name":"cliredisimh4d33g6cdokgtl","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.2312064Z","changedTime":"2021-04-19T07:21:02.0241293Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisfju4rneakqb7nmzfnnnqzmu2yc5kp2myutewvccnkyudlw5mh5heqqb5ifiut/providers/Microsoft.Cache/Redis/cliredisygvhhehhu6blh5u5","name":"cliredisygvhhehhu6blh5u5","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:58.778601Z","changedTime":"2021-04-19T07:21:01.5374846Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redist5gc77ersi3mo7qnzre5bpogm7fxqtjwsefaolg2vmoko7suac73dtu7ds4b2/providers/Microsoft.Cache/Redis/cliredisoofqqahr6eh6txte","name":"cliredisoofqqahr6eh6txte","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.172837Z","changedTime":"2021-04-19T07:21:01.9606525Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisuuzbnqjk7xgwae77vgjxythmzoufdmc3o72lk3sycp5jblm5bise7cgg53jab/providers/Microsoft.Cache/Redis/cliredisnoa2jcbl326h65ig","name":"cliredisnoa2jcbl326h65ig","type":"Microsoft.Cache/Redis","location":"westus2","createdTime":"2021-04-19T07:10:59.4690116Z","changedTime":"2021-04-19T07:21:02.5300058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_redisyhaknwblib2ekf2effk7iloyxhpbhtjhufc7lb4cs75jkze5r7jywfv4kmoyt/providers/Microsoft.Cache/Redis/cliredis22gxcsv4swgkqjml","name":"cliredis22gxcsv4swgkqjml","type":"Microsoft.Cache/Redis","location":"westus2","zones":["1","2"],"createdTime":"2021-04-19T07:10:58.9197511Z","changedTime":"2021-04-19T07:21:01.4734145Z","provisioningState":"Succeeded","tags":{"test":"tryingzones"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_idzhezjhdkb5gczwubf4mo7uq3q26wmuyv5kfxzwdzfcwbesjalin5ffp/providers/Microsoft.Storage/storageAccounts/stor1ds2a4","name":"stor1ds2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:33:36.4192379Z","changedTime":"2021-04-19T09:34:31.9270236Z","provisioningState":"Succeeded","tags":{"isTag":"True","isNotTag":"False"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_idzhezjhdkb5gczwubf4mo7uq3q26wmuyv5kfxzwdzfcwbesjalin5ffp/providers/Microsoft.Storage/storageAccounts/stor2yvcr4","name":"stor2yvcr4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:34:02.1265766Z","changedTime":"2021-04-19T09:34:32.8988809Z","provisioningState":"Succeeded","tags":{"isTag":"True","isNotTag":"False"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_lockuodwhd47pgm42vztcbvnf6wmbhhzsfpugxow5ptsmq5r7xofhrnyk/providers/Microsoft.Network/virtualNetworks/cli.lock.rsrc6fa2l26oiakpuunlh","name":"cli.lock.rsrc6fa2l26oiakpuunlh","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:33:48.4469794Z","changedTime":"2021-04-19T09:34:00.3981951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_resource_move_sourcepn2xpiarmq2wtrw3pegvs2b2d5a7fka25tr2irjx77edsq/providers/Microsoft.Network/networkSecurityGroups/nsg-moveqszoe435hhlo","name":"nsg-moveqszoe435hhlo","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-19T09:34:25.8688861Z","changedTime":"2021-04-19T09:34:35.3995046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-11T10:04:16.7912462Z","changedTime":"2021-01-11T10:30:18.1993484Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_router6lqcede55saqwy746lez7yiissupaobalfp4i5inkemiba5r/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-11T10:03:23.9104149Z","changedTime":"2021-01-11T10:13:46.8989133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualHubs/vrouter2","name":"vrouter2","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2021-01-12T01:34:55.6988156Z","changedTime":"2021-01-12T02:00:52.5077504Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_hub_routerzlnzyyilv2433byynbvahv7qbyeutjbxxgz7ok4sklbmw47m/providers/Microsoft.Network/virtualNetworks/vnet2","name":"vnet2","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2021-01-12T01:34:07.4545316Z","changedTime":"2021-01-12T01:44:33.7211916Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_router7i5huw42zwou3aczqdcerbcubvy4a2yyto6kyqtakyhxgzwszdtv/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T11:57:43.759605Z","changedTime":"2020-10-27T09:56:48.169579Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routerkavia6zlpypv4eb4df4yt6fqkczgl6f3oh6ceynvxvde4omwl7jk/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:37:41.5626979Z","changedTime":"2020-10-27T09:56:58.3329909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_virtual_routeroh7t5sncdhzf5tz2pybikadld3aii24mjytfxnhefltdqd4w6djy/providers/Microsoft.Network/virtualRouters/vrouter1","name":"vrouter1","type":"Microsoft.Network/virtualRouters","location":"westcentralus","createdTime":"2020-09-15T12:16:43.1749026Z","changedTime":"2020-10-27T09:56:53.4242673Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-14T10:17:18.6398379Z","changedTime":"2021-04-14T10:27:32.0047629Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/images/img-from-vm","name":"img-from-vm","type":"Microsoft.Compute/images","location":"westus","createdTime":"2021-04-14T10:18:14.1038543Z","changedTime":"2021-04-14T10:28:35.8733143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:15:47.9898943Z","changedTime":"2021-04-14T10:26:26.910204Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:15:25.8852724Z","changedTime":"2021-04-14T10:25:27.7859988Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:15:15.4788303Z","changedTime":"2021-04-14T10:25:22.7156363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:15:15.4944307Z","changedTime":"2021-04-14T10:25:25.1941113Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:15:15.2139001Z","changedTime":"2021-04-14T10:25:27.0616457Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflict2hlt3hjd6ftbhmhgs4sme5ehjdliqmupshzat3mfm4/providers/Microsoft.Storage/storageAccounts/vhdstorage1cc5c55e65c6ba","name":"vhdstorage1cc5c55e65c6ba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:15:14.9794463Z","changedTime":"2021-04-14T10:25:42.9151871Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/disks/test-vm","name":"test-vm","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2021-04-13T03:56:49.6141209Z","changedTime":"2021-04-13T04:07:05.1152253Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Compute/virtualMachines/test-vm","name":"test-vm","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-13T03:55:23.3261934Z","changedTime":"2021-04-13T04:05:59.4796662Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkInterfaces/test-vmVMNic","name":"test-vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-13T03:55:06.5442246Z","changedTime":"2021-04-13T04:05:10.7906295Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/networkSecurityGroups/test-vmNSG","name":"test-vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-13T03:54:52.0687603Z","changedTime":"2021-04-13T04:07:02.8554534Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/publicIPAddresses/test-vmPublicIP","name":"test-vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-13T03:54:52.0629964Z","changedTime":"2021-04-13T04:07:01.6787116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Network/virtualNetworks/test-vmVNET","name":"test-vmVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-13T03:54:52.0730746Z","changedTime":"2021-04-13T04:05:08.586206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_custom_image_conflicttl5x5jhkyghl4tgcjnc5fzoouxxkiwqaqytbgj2uyi/providers/Microsoft.Storage/storageAccounts/vhdstorage322ec240306b45","name":"vhdstorage322ec240306b45","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:54:52.0591502Z","changedTime":"2021-04-13T04:05:20.5522652Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/disks/os1","name":"os1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","location":"westus","createdTime":"2021-04-14T07:13:39.3203368Z","changedTime":"2021-04-14T07:23:54.3300727Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:12:14.7227679Z","changedTime":"2021-04-14T07:22:55.9342259Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:13.7225438Z","changedTime":"2021-04-14T07:24:40.5675318Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:11:48.6194997Z","changedTime":"2021-04-14T07:21:52.7030697Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:06.8963903Z","changedTime":"2021-04-14T07:24:11.1489777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:11:37.7687609Z","changedTime":"2021-04-14T07:21:47.1240589Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:55.0773567Z","changedTime":"2021-04-14T07:26:03.228249Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:11:37.7714401Z","changedTime":"2021-04-14T07:21:52.6753633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:55.3009958Z","changedTime":"2021-04-14T07:26:06.0623905Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:11:38.0178778Z","changedTime":"2021-04-14T07:21:52.557459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_from_unmanaged_diskdssdpxnb5ldydequta6oeaw5ageohexhny22dt6pecu3/providers/Microsoft.Storage/storageAccounts/vhdstorage275fba07affab1","name":"vhdstorage275fba07affab1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:11:37.7753705Z","changedTime":"2021-04-14T07:22:08.6762842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T04:26:22.339761Z","changedTime":"2021-04-14T04:37:41.548773Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T04:27:52.3156543Z","changedTime":"2021-04-14T04:38:49.3974403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T04:26:02.3047462Z","changedTime":"2021-04-14T04:36:07.3571727Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T04:25:49.4476995Z","changedTime":"2021-04-14T04:36:00.6949869Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T04:25:49.4469167Z","changedTime":"2021-04-14T04:36:01.7998701Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T04:25:49.5629591Z","changedTime":"2021-04-14T04:36:04.1561612Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modb53dudzecixoz4yulrklowkbwbckllykr746enpdi34nwuc6irkd5k/providers/Microsoft.Storage/storageAccounts/clistorage3knyi","name":"clistorage3knyi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T04:25:49.4529158Z","changedTime":"2021-04-14T04:36:14.1914218Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-15T06:18:12.0020084Z","changedTime":"2021-04-15T06:28:57.4595256Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-15T06:19:13.9695988Z","changedTime":"2021-04-15T06:30:27.8847792Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T06:17:52.3910227Z","changedTime":"2021-04-15T06:27:57.9105133Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-15T06:17:40.5648728Z","changedTime":"2021-04-15T06:27:51.4381038Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-15T06:17:40.732065Z","changedTime":"2021-04-15T06:27:54.2845364Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T06:17:40.7581178Z","changedTime":"2021-04-15T06:27:57.1908618Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modebyipc5ssddkadxg5yrhyqndckmodizzl3cc7hsmirdqb6dr2ylk5t/providers/Microsoft.Storage/storageAccounts/clistorage4z7vj","name":"clistorage4z7vj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-15T06:17:40.5730879Z","changedTime":"2021-04-15T06:28:04.806112Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod","name":"vm-state-mod","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-14T13:36:39.1619535Z","changedTime":"2021-04-14T13:47:38.3532554Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Compute/virtualMachines/vm-state-mod/extensions/enablevmaccess","name":"vm-state-mod/enablevmaccess","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastus","createdTime":"2021-04-14T13:37:44.3143193Z","changedTime":"2021-04-14T13:48:58.8453095Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkInterfaces/vm-state-modVMNic","name":"vm-state-modVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-14T13:36:24.2119547Z","changedTime":"2021-04-14T13:46:25.5018605Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/networkSecurityGroups/mynsg","name":"mynsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-14T13:36:11.4987643Z","changedTime":"2021-04-14T13:46:25.4673184Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/publicIPAddresses/mypubip","name":"mypubip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-14T13:36:11.5326954Z","changedTime":"2021-04-14T13:46:27.389234Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Network/virtualNetworks/myvnet","name":"myvnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-14T13:36:11.6437245Z","changedTime":"2021-04-14T13:46:25.5960514Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_state_modjdjpnmmhsg5ksljahrwrnsp5ibudhksggzzbmp4pjqmc47pesomh3r/providers/Microsoft.Storage/storageAccounts/clistoragejc6le","name":"clistoragejc6le","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"eastus","createdTime":"2021-04-14T13:36:11.5027687Z","changedTime":"2021-04-14T13:46:38.9587079Z","provisioningState":"Succeeded","tags":{"firsttag":"1","secondtag":"2","thirdtag":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/loadBalancers/testdiagvmssLB","name":"testdiagvmssLB","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:15.9821987Z","changedTime":"2021-04-19T09:15:22.4055188Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/publicIPAddresses/testdiagvmssLBPublicIP","name":"testdiagvmssLBPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T09:15:10.1922185Z","changedTime":"2021-04-19T09:15:20.754921Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_vmss_diagnostics_extensionxdfrd4gjmmhtwzumyi56p6b2g4pi6eqwc3viq/providers/Microsoft.Network/virtualNetworks/testdiagvmssVNET","name":"testdiagvmssVNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T09:15:10.1939456Z","changedTime":"2021-04-19T09:15:21.0264376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T13:38:05.8757948Z","changedTime":"2021-04-14T13:48:53.6869762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T13:37:49.5640959Z","changedTime":"2021-04-14T13:47:54.6440156Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T13:37:39.1403319Z","changedTime":"2021-04-14T13:47:50.3031704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T13:37:39.5287606Z","changedTime":"2021-04-14T13:47:54.8313337Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T13:37:39.2208005Z","changedTime":"2021-04-14T13:47:54.9407184Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disk3n7e7ckolh67wsjyh5we5a3jyl7cxfqv/providers/Microsoft.Storage/storageAccounts/vhdstorage8eeecfe0931d90","name":"vhdstorage8eeecfe0931d90","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T13:37:39.4813737Z","changedTime":"2021-04-14T13:48:06.5402993Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T07:14:21.2078737Z","changedTime":"2021-04-14T07:25:08.7475967Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T07:14:01.9004292Z","changedTime":"2021-04-14T07:24:03.4275048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T07:13:50.8712373Z","changedTime":"2021-04-14T07:23:59.2217943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T07:13:50.8579072Z","changedTime":"2021-04-14T07:24:00.4754539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T07:13:51.0219732Z","changedTime":"2021-04-14T07:24:05.5124791Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_disksg6yqaj5wgtkxwkb4flr3x5c56fq5wf6/providers/Microsoft.Storage/storageAccounts/vhdstoragef5d18edf59d8b9","name":"vhdstoragef5d18edf59d8b9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:13:50.8769792Z","changedTime":"2021-04-14T07:24:16.8331964Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Compute/virtualMachines/vm2","name":"vm2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-04-14T10:17:31.1988842Z","changedTime":"2021-04-14T10:29:07.0527956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:13:35.9358381Z","changedTime":"2021-04-14T10:23:41.1365248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkInterfaces/vm2VMNic","name":"vm2VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T10:17:27.9030667Z","changedTime":"2021-04-14T10:27:31.0097914Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:13:20.6278166Z","changedTime":"2021-04-14T10:25:32.1336996Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/networkSecurityGroups/vm2NSG","name":"vm2NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-14T10:17:20.3443481Z","changedTime":"2021-04-14T10:27:32.7356577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:13:20.5431625Z","changedTime":"2021-04-14T10:25:32.7739442Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/publicIPAddresses/vm2PublicIP","name":"vm2PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T10:17:19.9753468Z","changedTime":"2021-04-14T10:27:30.7362934Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T10:13:20.7006974Z","changedTime":"2021-04-14T10:23:32.9767172Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskqjsj2uyj7ggeqph7kggnq7xhxqrguxq3/providers/Microsoft.Storage/storageAccounts/vhdstoragecbb56a895c55ad","name":"vhdstoragecbb56a895c55ad","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T10:13:20.5083271Z","changedTime":"2021-04-14T10:23:46.7448827Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-15T06:19:26.847989Z","changedTime":"2021-04-15T06:29:29.324591Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-15T06:19:12.3926727Z","changedTime":"2021-04-15T06:29:23.0494371Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-15T06:19:12.0860741Z","changedTime":"2021-04-15T06:29:25.581989Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-15T06:19:12.2535978Z","changedTime":"2021-04-15T06:29:25.5404248Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vm_with_specialized_unmanaged_diskvi24oti7kwtozytlnbd5545nkxjm2vr4/providers/Microsoft.Storage/storageAccounts/vhdstorageb22faf61acadba","name":"vhdstorageb22faf61acadba","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Premium_LRS","tier":"Premium"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T06:19:12.0721496Z","changedTime":"2021-04-15T06:29:39.5890995Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/publicIPAddresses/pip1","name":"pip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T04:55:47.1564919Z","changedTime":"2021-04-16T05:05:58.2703477Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworkGateways/gw1","name":"gw1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-16T04:55:55.857246Z","changedTime":"2021-04-16T06:06:02.1985158Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vnet_gateway_ipsec5ej3cmqy6zfnrqtv63fqz65dqs3o3mtk347gigxk3wlsssit/providers/Microsoft.Network/virtualNetworks/vnet1","name":"vnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T04:55:36.0095051Z","changedTime":"2021-04-16T05:05:53.4486963Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-14T08:54:23.0323575Z","changedTime":"2021-04-14T09:04:37.9586623Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-14T08:54:40.2170547Z","changedTime":"2021-04-14T10:04:47.2070428Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T08:54:30.7749739Z","changedTime":"2021-04-14T09:04:47.7239104Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gateway_package_capturefy2mop6bzrqz7hyfzlnc7xxafevlj4l5h5gbgds/providers/Microsoft.Storage/storageAccounts/clitestvpngix7nhukff6lqx","name":"clitestvpngix7nhukff6lqx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:53:56.3484543Z","changedTime":"2021-04-14T09:04:25.1122609Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip1","name":"pubip1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:38.1670333Z","changedTime":"2021-04-19T08:42:44.3040878Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip2","name":"pubip2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:41.7450033Z","changedTime":"2021-04-19T08:40:46.8918827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/publicIPAddresses/pubip3","name":"pubip3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:30:45.5339444Z","changedTime":"2021-04-19T08:40:51.3137721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway1","name":"gateway1","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:05.7301369Z","changedTime":"2021-04-19T09:07:08.3166613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway2","name":"gateway2","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:08.8972744Z","changedTime":"2021-04-19T09:18:35.4686487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworkGateways/gateway3","name":"gateway3","type":"Microsoft.Network/virtualNetworkGateways","location":"westus","createdTime":"2021-04-19T08:31:11.557161Z","changedTime":"2021-04-19T09:14:39.1945973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet1","name":"myvnet1","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:48.9504796Z","changedTime":"2021-04-19T08:40:57.6825258Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet2","name":"myvnet2","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:30:54.3777449Z","changedTime":"2021-04-19T08:41:01.426181Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cli_test_vpn_gatewayrjgn4wzfhqaavmqd5gyzc6h7drpwbfhnl52cnxvfks6lz6wvh7wbzcz/providers/Microsoft.Network/virtualNetworks/myvnet3","name":"myvnet3","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:31:00.0358218Z","changedTime":"2021-04-19T08:41:07.0528399Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest26dv6eu6lv/providers/Microsoft.ContainerService/managedClusters/cliakstestxh34h5","name":"cliakstestxh34h5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"cdaa83a5-968f-4e64-9460-3121c6fb58cd","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:39:51.9391391Z","changedTime":"2021-04-13T08:59:33.48044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-19T09:22:42.6780732Z","changedTime":"2021-04-19T09:22:50.4658591Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-19T09:23:57.6298312Z","changedTime":"2021-04-19T09:24:05.0145521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-19T09:23:44.864528Z","changedTime":"2021-04-19T09:24:00.6217374Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/managedInstances/clitestmid2cou574uxp","name":"clitestmid2cou574uxp","type":"Microsoft.Sql/managedInstances","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":4},"location":"westeurope","identity":{"principalId":"00000000-0000-0000-0000-000000000000","tenantId":"00000000-0000-0000-0000-000000000000","type":"SystemAssigned"},"createdTime":"2021-04-19T09:24:40.2473544Z","changedTime":"2021-04-19T09:24:51.7662163Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest3qatsyd2lqmkms3vxy62qqdr4fzaze5htdx5tnbo3tmbfrprw4zroeimyfd2whc7blpl/providers/Microsoft.Sql/virtualClusters/VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","name":"VirtualCluster7dd92eb9-8e9a-4b92-8f89-83efb61a43e1","type":"Microsoft.Sql/virtualClusters","location":"westeurope","createdTime":"2021-04-19T09:25:56.2100225Z","changedTime":"2021-04-19T09:25:56.2991497Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest5hd5ygbfne/providers/Microsoft.ContainerService/managedClusters/cliakstestd7wsg5","name":"cliakstestd7wsg5","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1edd760a-6e90-4b5f-a61d-26bde533699b","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:10.4326183Z","changedTime":"2021-04-13T09:00:47.243303Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay3j4ivasbsry/providers/Microsoft.Storage/storageAccounts/logreplay3tsvbsxzhww4a2t","name":"logreplay3tsvbsxzhww4a2t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:38:05.2265275Z","changedTime":"2021-04-16T02:48:38.5367273Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4f5woz7fdh7/providers/Microsoft.Storage/storageAccounts/logreplayjqcird5d233j2u5","name":"logreplayjqcird5d233j2u5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T07:37:30.5082933Z","changedTime":"2021-04-16T07:48:03.6989728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay4m2drnfli6e/providers/Microsoft.Storage/storageAccounts/logreplaygcndz4f2tucqo56","name":"logreplaygcndz4f2tucqo56","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:48:18.3280021Z","changedTime":"2021-04-16T06:58:50.698061Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay63czao7jwhg/providers/Microsoft.Storage/storageAccounts/logreplay44mbr4klhfzsems","name":"logreplay44mbr4klhfzsems","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:35:16.7399481Z","changedTime":"2021-04-16T06:45:49.9724469Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplay7gep5ibopcy/providers/Microsoft.Storage/storageAccounts/logreplayf6wgz54rxj2ases","name":"logreplayf6wgz54rxj2ases","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T02:24:29.9802033Z","changedTime":"2021-04-16T02:35:07.1545628Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayckje47h47fz/providers/Microsoft.Storage/storageAccounts/logreplayfupbun4ee7tq2a4","name":"logreplayfupbun4ee7tq2a4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:09:23.2664622Z","changedTime":"2021-04-16T06:19:57.6977464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayfpuuxvh6mjd/providers/Microsoft.Storage/storageAccounts/logreplaykks6vblal5aswvg","name":"logreplaykks6vblal5aswvg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T03:17:09.0871714Z","changedTime":"2021-04-16T03:27:41.0144262Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayiq52ahrsqwq/providers/Microsoft.Storage/storageAccounts/logreplayq24otsytylxy2qy","name":"logreplayq24otsytylxy2qy","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:17:02.81961Z","changedTime":"2021-04-16T06:27:35.2435615Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayjtev6savipl/providers/Microsoft.Storage/storageAccounts/logreplayfgm5cv7k3n2k5n2","name":"logreplayfgm5cv7k3n2k5n2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:57:56.003391Z","changedTime":"2021-04-16T06:08:30.1048196Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplaywe66zkituq4/providers/Microsoft.Storage/storageAccounts/logreplaya26phnixqzwde64","name":"logreplaya26phnixqzwde64","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T05:53:16.3395147Z","changedTime":"2021-04-16T06:03:48.0224267Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-logreplayzgsbalufaum/providers/Microsoft.Storage/storageAccounts/logreplay3ls57q6uhfjr2c7","name":"logreplay3ls57q6uhfjr2c7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westcentralus","createdTime":"2021-04-16T06:19:37.7442547Z","changedTime":"2021-04-16T06:30:09.9032409Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/managedHSMs/clitest-0419","name":"clitest-0419","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"westus","createdTime":"2021-04-19T02:40:41.1532576Z","changedTime":"2021-04-19T02:50:46.9143411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest-mhsm-rg/providers/Microsoft.KeyVault/vaults/clitest-1102","name":"clitest-1102","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:37:34.9372505Z","changedTime":"2021-04-19T02:47:40.6289627Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.KeyVault/vaults/clitestulm3hjz742zufyi6c","name":"clitestulm3hjz742zufyi6c","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T06:47:39.2543046Z","changedTime":"2021-04-19T06:57:47.1730965Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz","name":"idnbvrgdcfwfdat3p6pjwjtz","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T06:47:23.7515908Z","changedTime":"2021-04-19T06:57:33.0554325Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi","name":"sa1lkyjaomuvduan6lsr5dzi","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa1lkyjaomuvduan6lsr5dzi/credentials/v2/userassigned?arpid=2cd2e884-2439-4609-a48e-4fa212011f2d&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:48:38.2194019Z","changedTime":"2021-04-19T06:59:29.6097279Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa2zazvqtgsdaarxcvfd6s33","name":"sa2zazvqtgsdaarxcvfd6s33","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"8f710395-b611-4a0d-9f34-d0a216558c81","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T06:49:31.8987391Z","changedTime":"2021-04-19T07:15:17.9888438Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j","name":"sa3rmbj3mt42ockj2tqtuu2j","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"7475c74b-3f37-4980-8896-76a5822ffa1e","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idnbvrgdcfwfdat3p6pjwjtz":{"principalId":"3c289144-e9bc-4d69-a355-09b325cd99e1","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5a698a6c-08de-420a-80b6-ebcbec9dfd6d","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rg24qo52n7lpsoneiwrr6suva5klra2nadjifklbmrfg3vjko3dh6m4wjmw5pygtklp/providers/Microsoft.Storage/storageAccounts/sa3rmbj3mt42ockj2tqtuu2j/credentials/v2/userassigned?arpid=40045fc4-886c-49dd-be91-1bd234338751&uaid=5a698a6c-08de-420a-80b6-ebcbec9dfd6d","certRenewAfter":"2021-06-04T06:42:00Z"}}},"createdTime":"2021-04-19T06:50:01.9641738Z","changedTime":"2021-04-19T07:00:44.6692425Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Devices/IotHubs/identitytesthubgnogzzttecxkz2oq6","name":"identitytesthubgnogzzttecxkz2oq6","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"9ceb9797-8567-4d2b-840d-cbba7132a608","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T07:53:53.0108579Z","changedTime":"2021-04-14T08:10:58.6112225Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1rgpxuks","name":"ehNamespaceiothubfortest1rgpxuks","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:58:43.5441879Z","changedTime":"2021-04-14T08:08:50.4713146Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/networkInterfaces/iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","name":"iot-private-endpoint.nic.04c58d93-36b5-4dbd-a4fa-5f4f8669b2bd","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-14T08:01:28.019362Z","changedTime":"2021-04-14T08:13:30.3686818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/privateEndpoints/iot-private-endpoint","name":"iot-private-endpoint","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-14T08:01:24.1365323Z","changedTime":"2021-04-14T08:12:56.4795943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Network/virtualNetworks/test-iot-vnet","name":"test-iot-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-14T08:01:08.4660985Z","changedTime":"2021-04-14T08:11:22.9428933Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg26ny3xcsyfewv3qg3asrpdgrkc64rwrbyonfryslosgoxwmvoz2x4qln7fd2lowsj/providers/Microsoft.Storage/storageAccounts/clitest5ai4souyakgrdg5oz","name":"clitest5ai4souyakgrdg5oz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:16.8016039Z","changedTime":"2021-04-14T08:03:47.6136361Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2gou4phnc7exgeyb7hljfdqyk5st2mvcr6ve65j2j2zgqrbndhlnlw4udb6gn4epb/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ht6hcki7pg","name":"clitest-vault6ht6hcki7pg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-25T03:23:36.032795Z","changedTime":"2021-02-25T03:33:38.3372955Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2owofsdncw4f2lxrnuxovubfggtckkgwsws55vjabds67w6wdpu3bq465trcmu24r/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfxfeakupkqc","name":"clitest-vaultfxfeakupkqc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.7125538Z","changedTime":"2021-04-16T11:05:52.5177916Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2qgvxjxy46scnjuh6q5gtypebpi5oeuajfgxb7yrrsggnqxrij6pnc3d7ybz2chih/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcriakztggjr","name":"clitest-vaultcriakztggjr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-16T14:48:54.485756Z","changedTime":"2020-07-24T18:46:57.1875532Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/databases/master","name":"clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg2wbbi45smlsoqnmbw3mikxgcbmd52jxqihhel5fkvpadiktjhuyvfbi64gy44merq/providers/Microsoft.Sql/servers/clitestserverwfi7wij6eng5rluvfeh34e3fgppz5qwz3rgxwenbeq7to545o","location":"westeurope","createdTime":"2021-04-19T09:31:40.5147795Z","changedTime":"2021-04-19T09:31:40.5778629Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35bwcr5pmt4ku67pnbokoybgxl4dqku2txk4oj5qnhth4zx45a3lctlsqa5jh7cfd/providers/Microsoft.RecoveryServices/vaults/clitest-vault7hhhb5yjvw6","name":"clitest-vault7hhhb5yjvw6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T20:54:02.7595867Z","changedTime":"2021-04-09T02:32:25.3373422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg35pihforqftkb5qllg3t75zoxlztjwsmuftgdsphbiy2r3adx3t3spnkzzs2c5c4s/providers/Microsoft.RecoveryServices/vaults/clitest-vaultonvx2gbjtjz","name":"clitest-vaultonvx2gbjtjz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:33.2337236Z","changedTime":"2019-12-09T07:20:04.5666801Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:24:58.8404941Z","changedTime":"2021-04-19T09:26:07.4404903Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/createUnzonedUpdateToZonedDb","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/createUnzonedUpdateToZonedDb","type":"Microsoft.Sql/servers/databases","sku":{"name":"Premium","tier":"Premium","capacity":125},"kind":"v12.0,user","location":"eastus","createdTime":"2021-04-19T09:26:06.6362087Z","changedTime":"2021-04-19T09:29:28.4759481Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/createZonedUpdateToUnzonedDb","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/createZonedUpdateToUnzonedDb","type":"Microsoft.Sql/servers/databases","sku":{"name":"Premium","tier":"Premium","capacity":125},"kind":"v12.0,user","location":"eastus","createdTime":"2021-04-19T09:29:40.8674973Z","changedTime":"2021-04-19T09:33:03.0198214Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/databases/master","name":"clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg365jup4g2j63zuqqm7ootq6anrtzss2oq6jq5zt5ovfuclndys6af6fvsla7qwr2x/providers/Microsoft.Sql/servers/clitestserveraqrfrd64ofjovadktwxybncbdcjh53n3ecivmzrzzb6hubxr7","location":"eastus","createdTime":"2021-04-19T09:26:20.1021931Z","changedTime":"2021-04-19T09:26:20.2284393Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG36LWPM3IJ3TLUHLODHRJ6QMSWAOORPIO4ORUVLVXNXVBAI4SLGEM5TLL7VPBGZAG7/providers/Microsoft.Compute/disks/clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","name":"clitest-vmgmhwn_OsDisk_1_807759b7722346bc8c3c38f44854d5c8","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","location":"southeastasia","createdTime":"2021-04-16T09:03:58.1925827Z","changedTime":"2021-04-16T09:13:58.7598058Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Compute/virtualMachines/clitest-vmgmhwn","name":"clitest-vmgmhwn","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8829168Z","changedTime":"2021-04-16T09:15:03.3436683Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkInterfaces/clitest-vmgmhwnVMNic","name":"clitest-vmgmhwnVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.8810776Z","changedTime":"2021-04-16T09:13:53.3394306Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/networkSecurityGroups/clitest-vmgmhwnNSG","name":"clitest-vmgmhwnNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3105323Z","changedTime":"2021-04-16T09:13:48.8252521Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/publicIPAddresses/clitest-vmgmhwnPublicIP","name":"clitest-vmgmhwnPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:47.3074778Z","changedTime":"2021-04-16T09:13:51.5404073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Network/virtualNetworks/clitest-vmgmhwnVNET","name":"clitest-vmgmhwnVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:47.3164009Z","changedTime":"2021-04-16T09:13:54.712945Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultukoqsmzbf7l","name":"clitest-vaultukoqsmzbf7l","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6071079Z","changedTime":"2021-04-16T09:13:43.0164014Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg36lwpm3ij3tluhlodhrj6qmswaoorpio4oruvlvxnxvbai4slgem5tll7vpbgzag7/providers/Microsoft.Storage/storageAccounts/clitestidjdbydl23y6isfnz","name":"clitestidjdbydl23y6isfnz","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T09:05:19.7820154Z","changedTime":"2021-04-16T09:15:43.7077284Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3axcwvonc4sg5yhkdbmdbmljgufox3k7dginqtm4rfhecqdblrpvf2vamrdztqds7/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx5hv3ehcvet","name":"clitest-vaultx5hv3ehcvet","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:09.6531856Z","changedTime":"2021-03-26T02:01:25.8503813Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG3IFGVCA3BGT7CRIRWEFJSORGJODJSHGB4PB62JDIZUDOFNZCZKMGWVVF4E47JQ6RV/providers/Microsoft.Compute/disks/clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","name":"clitest-vmi4jap_disk1_4ee4922722244493ba7e698435eff8bd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2860469Z","changedTime":"2021-04-16T02:37:36.9007707Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Compute/virtualMachines/clitest-vmi4jap","name":"clitest-vmi4jap","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:33.5656045Z","changedTime":"2021-04-16T02:38:00.7716401Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkInterfaces/clitest-vmi4japVMNic","name":"clitest-vmi4japVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:33.1811466Z","changedTime":"2021-04-16T02:37:33.5204723Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/networkSecurityGroups/clitest-vmi4japNSG","name":"clitest-vmi4japNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1644046Z","changedTime":"2021-04-16T02:37:33.8782842Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/publicIPAddresses/clitest-vmi4japPublicIP","name":"clitest-vmi4japPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.173309Z","changedTime":"2021-04-16T02:37:34.2627557Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.Network/virtualNetworks/clitest-vmi4japVNET","name":"clitest-vmi4japVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.1694761Z","changedTime":"2021-04-16T02:37:34.4644138Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3ifgvca3bgt7crirwefjsorgjodjshgb4pb62jdizudofnzczkmgwvvf4e47jq6rv/providers/Microsoft.RecoveryServices/vaults/clitest-vault4ek6vsryrqm","name":"clitest-vault4ek6vsryrqm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2446587Z","changedTime":"2021-04-16T02:37:27.5313176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3mpot4mmz4pqvpkn27u4t7wyujucwn34bnr5apovxszciewewvk7kkpwwlezlqcjw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgpw7q5kmvtb","name":"clitest-vaultgpw7q5kmvtb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2904101Z","changedTime":"2021-04-19T08:49:43.99702Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3n5py2zcs4gpei2yrnrlx56l2relpjegza7qvv4plsjzez26k2haokm5kqhybcguz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtjcf7jddzi","name":"clitest-vaultrtjcf7jddzi","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:58.4276855Z","changedTime":"2021-04-19T04:44:58.6277651Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3s3h2izedr4olwdk4jqjhltn4lkukfixgfalhtfjmiy6u3xndqvdkrr4j4jqhx6hu/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjs23w5bobvn","name":"clitest-vaultjs23w5bobvn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:43:29.7166661Z","changedTime":"2019-10-17T15:53:33.3173392Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg3soa4y6skcz3d2gjbzvwaxkly25e4v5y7yqyn6vhjflcrc3lf625pxahhnigve7nw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultigdbqvq3pvt","name":"clitest-vaultigdbqvq3pvt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:37:15.6135092Z","changedTime":"2021-03-26T12:36:16.8084058Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.8571891Z","changedTime":"2021-04-19T03:48:54.51151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg46im67qychkztllkmqylfvhlde7vyc2mmees3hi3claav2dyrmaik42uesg4mmb4r/providers/Microsoft.Storage/storageAccounts/clitestjppv6zemocoezqllw","name":"clitestjppv6zemocoezqllw","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2163643Z","changedTime":"2021-04-19T03:48:52.5725Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-19T03:38:53.4867428Z","changedTime":"2021-04-19T03:48:53.8372193Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4cfyaey3xpqplu2o63tqznvwdyscz3hc72v3dcr2k3h6jrz35rtzhxov7dzw3in74/providers/Microsoft.Storage/storageAccounts/clitestu5pvusta54uxmc6sn","name":"clitestu5pvusta54uxmc6sn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T03:38:33.2352877Z","changedTime":"2021-04-19T03:48:52.4463911Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4ikwnaqyhmwijajn5xtsc4vjvtztotdvlgqbzlf6a63v6hrlpqdxwqccsjda4o25n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultar474rkdjah","name":"clitest-vaultar474rkdjah","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:58.2196464Z","changedTime":"2020-12-18T04:48:07.1962189Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4vzcctackr3xkeouuakrlu3v5iahfsyh5tbu6wimbgipsvlnnydknmqqzno4naid6/providers/Microsoft.RecoveryServices/vaults/clitest-vault4dwvbxrcdlv","name":"clitest-vault4dwvbxrcdlv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:26:57.9582917Z","changedTime":"2020-07-07T07:37:02.6869208Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG4Y6IDHTNLEVQYCTKCQFEOGQPLW4NTZOERPJSVBXIFR4M7DLELXV4ISC2X2WBEAOZB/providers/Microsoft.Compute/disks/clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","name":"clitest-vm3wjhb_OsDisk_1_eb58352ec91c4ef7a99b11531305e58a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","location":"southeastasia","createdTime":"2021-04-16T02:27:40.420816Z","changedTime":"2021-04-16T02:37:40.9605694Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Compute/virtualMachines/clitest-vm3wjhb","name":"clitest-vm3wjhb","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:38.3487044Z","changedTime":"2021-04-16T02:38:45.3123266Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkInterfaces/clitest-vm3wjhbVMNic","name":"clitest-vm3wjhbVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2407547Z","changedTime":"2021-04-16T02:37:36.5171206Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/networkSecurityGroups/clitest-vm3wjhbNSG","name":"clitest-vm3wjhbNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3417413Z","changedTime":"2021-04-16T02:37:34.447376Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/publicIPAddresses/clitest-vm3wjhbPublicIP","name":"clitest-vm3wjhbPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.3415987Z","changedTime":"2021-04-16T02:37:33.9328513Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.Network/virtualNetworks/clitest-vm3wjhbVNET","name":"clitest-vm3wjhbVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.3502705Z","changedTime":"2021-04-16T02:37:36.2587061Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg4y6idhtnlevqyctkcqfeogqplw4ntzoerpjsvbxifr4m7dlelxv4isc2x2wbeaozb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd4w7kja3ziz","name":"clitest-vaultd4w7kja3ziz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:25.2972274Z","changedTime":"2021-04-16T02:37:29.6475173Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RG5OGMURWWBGVNZ3EDPLDGHIZ222ZTJPOH2I2G7VR3XMF5WF2SGVFXQJGZCMTTONYUF/providers/Microsoft.Compute/disks/clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","name":"clitest-vmrxhtu_OsDisk_1_293dbca00cdf42ed8eb02cc75def041f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","location":"southeastasia","createdTime":"2021-04-16T02:27:36.290176Z","changedTime":"2021-04-16T02:37:37.7095705Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Compute/virtualMachines/clitest-vmrxhtu","name":"clitest-vmrxhtu","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.0133898Z","changedTime":"2021-04-16T02:38:39.6349599Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkInterfaces/clitest-vmrxhtuVMNic","name":"clitest-vmrxhtuVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.4555943Z","changedTime":"2021-04-16T02:37:34.5169706Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/networkSecurityGroups/clitest-vmrxhtuNSG","name":"clitest-vmrxhtuNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2929106Z","changedTime":"2021-04-16T02:37:33.2502999Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/publicIPAddresses/clitest-vmrxhtuPublicIP","name":"clitest-vmrxhtuPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2778464Z","changedTime":"2021-04-16T02:37:33.2674941Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.Network/virtualNetworks/clitest-vmrxhtuVNET","name":"clitest-vmrxhtuVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2992379Z","changedTime":"2021-04-16T02:37:39.3992349Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5ogmurwwbgvnz3edpldghiz222ztjpoh2i2g7vr3xmf5wf2sgvfxqjgzcmttonyuf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultju4yj2laejy","name":"clitest-vaultju4yj2laejy","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9603202Z","changedTime":"2021-04-16T02:37:25.8387519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5rskdpkj3rbjyz7ih65i2cbtg3smrw7a2pwubxdxglu56jqpwohb64srfpj6minne/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuwm4fjulufx","name":"clitest-vaultuwm4fjulufx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:53.6758437Z","changedTime":"2021-04-02T01:42:00.6833229Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:32.4807081Z","changedTime":"2021-04-19T04:09:48.9332771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5waka3ioxigz2xdrwz25rcesr4tgbinuz7ec6cq3lfdixpe56gw2ggciksrsd5qpu/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-2","name":"profile123/cdn-cli-test-2","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:45.7562826Z","changedTime":"2021-04-19T04:10:20.523554Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg5xntpmeb4rqhvckiwahzdgzq4uu5jqxuf2wkxbpvvbevq5a6sp7jmvqh66us4wc3c/providers/Microsoft.RecoveryServices/vaults/clitest-vaultepw2nq7icpj","name":"clitest-vaultepw2nq7icpj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1643105Z","changedTime":"2021-04-16T11:20:28.2215516Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg623ovxonqoofdgeyej3xqrshx3zw4uukvn6eqkyb3vioc7ylybv6sqtpknt4h5nph/providers/Microsoft.RecoveryServices/vaults/clitest-vault3mcynv26uw7","name":"clitest-vault3mcynv26uw7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.2845404Z","changedTime":"2021-04-19T04:44:59.9366875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.RecoveryServices/vaults/clitest-vault37l77wc5c65","name":"clitest-vault37l77wc5c65","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2019-12-30T01:51:50.2593Z","changedTime":"2019-12-30T06:03:40.8040739Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6i4hl6iakg/providers/Microsoft.Storage/storageAccounts/clitestu3p7a7ib4n4y7gt4m","name":"clitestu3p7a7ib4n4y7gt4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2019-12-30T01:51:52.9173004Z","changedTime":"2019-12-30T02:02:13.0104135Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6mxjzuorkskzxoisjj4q7leopfu5mge2nncxfuw33pn7w5rzgt6nqhx3f2koq427p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqcbszkdhprt","name":"clitest-vaultqcbszkdhprt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:40.8592674Z","changedTime":"2019-11-11T09:09:45.5147751Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6q2l3p72qqjpfunzm7jjooz6jhbttu5hsrvd3ntvnpziwpzeefe34prc77w3drrzp/providers/Microsoft.RecoveryServices/vaults/clitest-vaultetraqqoyajx","name":"clitest-vaultetraqqoyajx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9482528Z","changedTime":"2020-11-20T09:06:16.8532529Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg6zauw27sl6ezzkzhluow5ftph4pjex2cgd5mzzjfv4rviudkm6rw5ey3mh2qkasfn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsc5zwvzk3vb","name":"clitest-vaultsc5zwvzk3vb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1623058Z","changedTime":"2020-12-18T04:48:08.2891774Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7rruhv3oehetxpfjfousi7yjkkftsi6s7k2s6hpr4t7gzrvftgbl3meukm2nbffth/providers/Microsoft.RecoveryServices/vaults/clitest-vault732hntbnreq","name":"clitest-vault732hntbnreq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:50.8883124Z","changedTime":"2021-04-02T01:43:10.1091512Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rg7yglmw66mbxpzgx2iwpndithxjwojwsyifywclyi6k2enoyb4x7qusntacpmnz5wx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpqgazhztope","name":"clitest-vaultpqgazhztope","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5330162Z","changedTime":"2021-04-16T13:18:37.6445368Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgad2rkdrk2yhzaptjchzxi4urhl6nptuogvmop47bsemxfupskti624nfybc3s3ihq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkveoay4ozx6","name":"clitest-vaultkveoay4ozx6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:45.6109733Z","changedTime":"2020-10-29T20:18:56.5365909Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualHubs/clitestvhub","name":"clitestvhub","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T08:11:46.0560572Z","changedTime":"2021-04-19T08:26:03.4941124Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/virtualWans/clitestvwan","name":"clitestvwan","type":"Microsoft.Network/virtualWans","location":"westus","createdTime":"2021-04-19T08:11:29.2669836Z","changedTime":"2021-04-19T08:21:45.4054235Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaemv6r3one2vficqkku6itoovn3mslt4c2jbcxb4aeyp7yqwmungkvx5gknsdsgvm/providers/Microsoft.Network/vpnGateways/cligateway","name":"cligateway","type":"Microsoft.Network/vpnGateways","location":"westus","createdTime":"2021-04-19T08:18:15.5299236Z","changedTime":"2021-04-19T09:28:20.5669642Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgatrqh2o7wvc7xtmkufwuxthna2bhqxv5vowcgnf2dy2r7ipozhl57bltjtij2326p/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmv33w2by72m","name":"clitest-vaultmv33w2by72m","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.4354446Z","changedTime":"2021-04-19T08:53:04.0516941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.EventHub/namespaces/cliehnamespacedb01","name":"cliehnamespacedb01","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westeurope","createdTime":"2021-04-19T09:24:29.5666937Z","changedTime":"2021-04-19T09:24:33.4521297Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.OperationalInsights/workspaces/laws6zmkf7sgfnchv2b5","name":"laws6zmkf7sgfnchv2b5","type":"Microsoft.OperationalInsights/workspaces","location":"westeurope","createdTime":"2021-04-19T09:21:23.2816462Z","changedTime":"2021-04-19T09:21:40.4215152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:15:33.3690367Z","changedTime":"2021-04-19T09:27:23.2480029Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/databases/master","name":"clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Sql/servers/clitestservergwdvi3qri43kwtb3kffzfvnbf5ce75np26grxfyxhpl2lroun","location":"westeurope","createdTime":"2021-04-19T09:17:36.2204648Z","changedTime":"2021-04-19T09:17:36.407869Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgaze3psfzczpfn3kasb3itdt2ylpcvfnwojcidn7nc33v44krg6kmcfni3trclu5jn/providers/Microsoft.Storage/storageAccounts/clitestowfrzpzalrflu2xmk","name":"clitestowfrzpzalrflu2xmk","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:32.7881365Z","changedTime":"2021-04-19T09:27:58.8679956Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:10.03155Z","changedTime":"2021-04-19T04:09:25.6209979Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbap5655emptgeiauav5tqvrta2ubu4uo6nseiwpa73xlebhfdrtjcyrj5vod6ixzm/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-4","name":"profile123/cdn-cli-test-4","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:23.5981685Z","changedTime":"2021-04-19T04:10:56.4338086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbdapvnatpofvyqr4msto2emr6k7pb7ucgnwhh6pomydfrv6jo6ukkq2c3x4qzkxa2/providers/Microsoft.RecoveryServices/vaults/clitest-vault3rxgdw2s4qw","name":"clitest-vault3rxgdw2s4qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:30:21.1494979Z","changedTime":"2021-03-26T12:08:07.7032088Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbmdw6c7wzx47fqiuxeheuvucemg6yabmzqrg4m3sfdppdrd7hdzx4kbmmniiw3tfj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpl6e5qwozim","name":"clitest-vaultpl6e5qwozim","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9306023Z","changedTime":"2021-04-16T03:37:26.9793576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbr2a2442ouo2khk6uuxheavwfrrdoftt5r4pgj2zgak67hqaxb6lihg4eyx26omka/providers/Microsoft.RecoveryServices/vaults/clitest-vault4osjqryvake","name":"clitest-vault4osjqryvake","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.0666068Z","changedTime":"2020-10-29T20:19:00.7738175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbtvrcxqdig2h6wgyuhtkpfo3mmkudbsixktr5iltt2n7afa7qniquhjzgjdah5zqi/providers/Microsoft.RecoveryServices/vaults/clitest-vault6gbxle4dtzk","name":"clitest-vault6gbxle4dtzk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8977062Z","changedTime":"2021-04-02T01:10:16.1567246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11jki35ht7w67ho","name":"iot-hub-for-test-11jki35ht7w67ho","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T07:57:59.4130321Z","changedTime":"2021-04-14T12:08:03.8813722Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1y3bytqv","name":"ehNamespaceiothubfortest1y3bytqv","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T07:53:46.445156Z","changedTime":"2021-04-14T08:03:52.1884913Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbvg2r7nbxazbiahljziu2uimigqorwz4k4qumvj5peulw2lh3hjx4igwxqgdyrttk/providers/Microsoft.Storage/storageAccounts/clitestlvvl7xg7t3iwdjgbh","name":"clitestlvvl7xg7t3iwdjgbh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T07:53:17.7345027Z","changedTime":"2021-04-14T08:03:48.157759Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgbwo5qgjdw44ak7y6db5pg25hlh7llnedxbxtnpqkvallsua7hhometrf4bngqdjgr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultk5h7hxwodbq","name":"clitest-vaultk5h7hxwodbq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.2233349Z","changedTime":"2021-04-19T07:20:51.0715983Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgc3w7cbd2sngpufklomlt6qb6ju3cbocdcct5tyzzlwwwiwtrh6adyms2mls6eg75m/providers/Microsoft.Sql/servers/clitestservervxgw2kc7mhixhyh7ehqb6ejv6g2vk4vutwfyaq3c2fq5n3zpn/databases/master","name":"clitestservervxgw2kc7mhixhyh7ehqb6ejv6g2vk4vutwfyaq3c2fq5n3zpn/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgc3w7cbd2sngpufklomlt6qb6ju3cbocdcct5tyzzlwwwiwtrh6adyms2mls6eg75m/providers/Microsoft.Sql/servers/clitestservervxgw2kc7mhixhyh7ehqb6ejv6g2vk4vutwfyaq3c2fq5n3zpn","location":"westus2","createdTime":"2021-04-19T09:33:29.0934658Z","changedTime":"2021-04-19T09:33:29.1455626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgc655xu4pvrsud7k3pfwxnc7hiql5daey5nhocousvw76xcqszuuthz4ptsaaev7lq/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"northeurope","createdTime":"2021-04-19T03:38:34.2053024Z","changedTime":"2021-04-19T03:48:36.6864387Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclirep1clirecording-licationmgmts","name":"azuredbclirep1clirecording-licationmgmts","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:34:46.3542933Z","changedTime":"2021-04-19T08:44:46.2809564Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-licationmgmtscena/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-licationmgmt","name":"azuredbclitest-clirecording-licationmgmt","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:21:15.1080006Z","changedTime":"2021-04-19T07:36:17.9676272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-4clirecording-mgmtscenari","name":"azuredbclitest-4clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable","capacity":1},"location":"eastus2euap","createdTime":"2021-04-19T08:08:02.2136473Z","changedTime":"2021-04-19T08:23:05.3447444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-5clirecording-mgmtscenari","name":"azuredbclitest-5clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_E2s_v3","tier":"MemoryOptimized","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:13:14.8252846Z","changedTime":"2021-04-19T08:27:16.7474139Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-mgmtscenariotest/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-6clirecording-mgmtscenari","name":"azuredbclitest-6clirecording-mgmtscenari","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:03:49.1264687Z","changedTime":"2021-04-19T08:17:52.254606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-proxyresourcemgmt/providers/Microsoft.DBforPostgreSQL/flexibleServers/azuredbclitest-clirecording-proxyresourc","name":"azuredbclitest-clirecording-proxyresourc","type":"Microsoft.DBforPostgreSQL/flexibleServers","sku":{"name":"Standard_D2s_v3","tier":"GeneralPurpose","capacity":2},"location":"eastus2euap","createdTime":"2021-04-19T08:15:39.226806Z","changedTime":"2021-04-19T08:30:42.7405433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-vnetservermgmtsce/providers/Microsoft.Network/virtualNetworks/VNETbclitest-2clirecording-vnetserverm","name":"VNETbclitest-2clirecording-vnetserverm","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-04T07:35:59.884262Z","changedTime":"2021-03-04T07:46:23.6849621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgclirecording-xyresourcemgmtsce/providers/Microsoft.DBforMySQL/flexibleServers/azuredbclitest-clirecording-xyresourcemg","name":"azuredbclitest-clirecording-xyresourcemg","type":"Microsoft.DBforMySQL/flexibleServers","sku":{"name":"Standard_B1ms","tier":"Burstable"},"location":"eastus2euap","createdTime":"2021-04-19T07:20:22.2044527Z","changedTime":"2021-04-19T07:36:26.43405Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyokf24ijnjysza6zauhdysrwqqoef2cttxnnkr2jq7h36aanigxsw3mqzbgwgtut/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjojjamza56k","name":"clitest-vaultjojjamza56k","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.8142578Z","changedTime":"2021-04-19T04:44:59.4331602Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGCYUCHMXB3NQBLZC2DSMHFGVHB3AU4FKFTKZYHWOZFNMYJNZNAN5IUXVG5BUSYQ7XR/providers/Microsoft.Compute/disks/clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","name":"clitest-vm5u7qx_OsDisk_1_3eb5268fffdc48239136fdc4bdab2a16","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","location":"southeastasia","createdTime":"2021-04-16T02:27:36.7084439Z","changedTime":"2021-04-16T02:37:38.3347604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Compute/virtualMachines/clitest-vm5u7qx","name":"clitest-vm5u7qx","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:35.2361489Z","changedTime":"2021-04-16T02:38:44.3177925Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkInterfaces/clitest-vm5u7qxVMNic","name":"clitest-vm5u7qxVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:34.843752Z","changedTime":"2021-04-16T02:37:36.9460073Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/networkSecurityGroups/clitest-vm5u7qxNSG","name":"clitest-vm5u7qxNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2777952Z","changedTime":"2021-04-16T02:37:33.2956465Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/publicIPAddresses/clitest-vm5u7qxPublicIP","name":"clitest-vm5u7qxPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:31.2858478Z","changedTime":"2021-04-16T02:37:37.6586037Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.Network/virtualNetworks/clitest-vm5u7qxVNET","name":"clitest-vm5u7qxVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:31.2969958Z","changedTime":"2021-04-16T02:37:36.6470062Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgcyuchmxb3nqblzc2dsmhfgvhb3au4fkftkzyhwozfnmyjnznan5iuxvg5busyq7xr/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqs74nztibvf","name":"clitest-vaultqs74nztibvf","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9237187Z","changedTime":"2021-04-16T02:37:27.7961359Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3","name":"cliregddgterb3mhd7e3","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Premium","tier":"Premium"},"location":"eastus","createdTime":"2021-04-13T08:38:21.3914127Z","changedTime":"2021-04-13T08:48:29.2913566Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents1","name":"cliregddgterb3mhd7e3/agents1","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:38:43.2467187Z","changedTime":"2021-04-13T08:57:09.0592425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.ContainerRegistry/registries/cliregddgterb3mhd7e3/agentPools/agents2","name":"cliregddgterb3mhd7e3/agents2","type":"Microsoft.ContainerRegistry/registries/agentPools","location":"eastus","createdTime":"2021-04-13T08:47:12.5204953Z","changedTime":"2021-04-13T09:01:48.8951657Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdi77mnantrfnsehyzs6iooxxbif2ufolkbevzqdgt4dwfwmyekfhl7miwrthjzvsu/providers/Microsoft.Network/virtualNetworks/agentvnets","name":"agentvnets","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:38:30.4021004Z","changedTime":"2021-04-13T08:48:50.8957622Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdifh4xipmrzpjxpvbvgxnnst2tukozr2vf2wzp2ltx5bwtgv5os3fdvgjkmflorlt/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn5cdt7qv6b2","name":"clitest-vaultn5cdt7qv6b2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8265634Z","changedTime":"2021-04-09T00:03:25.7319718Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgduxuhyeqzrek7s3jfr776qvugv4qtmrxnlqcwiodxu2wihvqvuajr5bvtbfw2c74d/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvgik7njuazq","name":"clitest-vaultvgik7njuazq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.4146953Z","changedTime":"2020-09-22T09:19:12.8635745Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgdzk3w2kpwtbjaippkz6nrab53pinz3nbdcoxurf2fm477d5j2qa43kpmvlh34nudn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultijxt4x4hr4n","name":"clitest-vaultijxt4x4hr4n","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:49.0191346Z","changedTime":"2019-11-11T09:09:52.0294485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgedvszyrgqx/providers/Microsoft.BotService/botServices/cli3wkgg5xm6ihi","name":"cli3wkgg5xm6ihi","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"sdk","location":"global","createdTime":"2021-04-19T04:20:07.6378467Z","changedTime":"2021-04-19T04:20:08.6289222Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgel7il7fyqlmrrmikjggzotgg33plbuedq3gs7t7avshz7owt56ipmf73yynfya5hc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvjmnh65jfgd","name":"clitest-vaultvjmnh65jfgd","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.3340145Z","changedTime":"2021-04-19T07:01:32.2314584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgemk3m6yms6gmurrkkob3gdz25k4suv6fh6jh4yklmr2ujlzz42sj5y6ialqhuwywf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulthmbto4zryjv","name":"clitest-vaulthmbto4zryjv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1433317Z","changedTime":"2020-11-20T09:06:16.9350573Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgethjn3m2dt3g7ib3vmvbxqmovbpzxb7pubzuo5jh55xcmgigqykrxmwrgs5dsvtmf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt6pp2xe72lv","name":"clitest-vaultt6pp2xe72lv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1124963Z","changedTime":"2021-04-16T07:15:32.4160178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGFDHL3N5C2QLSIRFEDRHDFZ7SA7HOP6BDCVWUID3JB4EIT5KT46Q6QNQMVWEZFQFHE/providers/Microsoft.Compute/disks/clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","name":"clitest-vmvfvhd_disk1_9a833ac3066b417db4d4469a979ee3f1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","location":"southeastasia","createdTime":"2021-04-19T09:33:09.0356149Z","changedTime":"2021-04-19T09:33:09.256753Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Compute/virtualMachines/clitest-vmvfvhd","name":"clitest-vmvfvhd","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T09:33:07.9200047Z","changedTime":"2021-04-19T09:33:32.6821966Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkInterfaces/clitest-vmvfvhdVMNic","name":"clitest-vmvfvhdVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T09:33:07.3222251Z","changedTime":"2021-04-19T09:33:07.5015589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvfvhdNSG","name":"clitest-vmvfvhdNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2253777Z","changedTime":"2021-04-19T09:33:05.8669031Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/publicIPAddresses/clitest-vmvfvhdPublicIP","name":"clitest-vmvfvhdPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T09:33:05.2449767Z","changedTime":"2021-04-19T09:33:06.0809811Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.Network/virtualNetworks/clitest-vmvfvhdVNET","name":"clitest-vmvfvhdVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T09:33:05.2519916Z","changedTime":"2021-04-19T09:33:07.0363329Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfdhl3n5c2qlsirfedrhdfz7sa7hop6bdcvwuid3jb4eit5kt46q6qnqmvwezfqfhe/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvxyrektlils","name":"clitest-vaultvxyrektlils","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T09:33:00.0071222Z","changedTime":"2021-04-19T09:33:02.0880586Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfrljmepwlbq3b35hk5otzdgtwh4hqnykbitjgdwnwaj5hh4kdpcvxfc3fevvzovae/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyrzzkrmwmts","name":"clitest-vaultyrzzkrmwmts","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:23:11.9342702Z","changedTime":"2021-04-19T04:33:19.7106115Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgfyjqahsj5r5tgl7u6ghyjj5wrsjici7xlqi274usbzyfyam52qmcdk7kn4nrbx2zb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultl5b2i6b2vbz","name":"clitest-vaultl5b2i6b2vbz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T21:51:52.3007807Z","changedTime":"2021-03-26T03:37:21.5010915Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggihmrio7mkr75oe7hhgfzlif36x2foqoaayd64obnotugzqiqrszmyluzk52spfyl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultzuqclzzofd3","name":"clitest-vaultzuqclzzofd3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.1022287Z","changedTime":"2020-11-20T09:06:16.9489111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggjhzlnqjmvpjkwe4f5d7kf6tmcsy7kq6u6w42og4uoqiqddxyrpt2kipllj2mkrx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqyseb5x766c","name":"clitest-vaultqyseb5x766c","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.8821846Z","changedTime":"2021-04-16T11:06:14.4982585Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rggnjd24vd3426k7xejyyb5lcp6f6zir5trgy7ctsdcy5ea4ibnyyym3puwxifrgvgk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuzuyi24axgn","name":"clitest-vaultuzuyi24axgn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2020-07-07T07:20:09.4597323Z","changedTime":"2020-07-07T07:30:16.4174783Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh4ph4zy2imewaisnszkiwxynzkxdnjctkzt3wpjqljnhdfvwdvi4epjcn4xptkjc4/providers/Microsoft.RecoveryServices/vaults/clitest-vault6fhramr2xbw","name":"clitest-vault6fhramr2xbw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:42.9862697Z","changedTime":"2021-04-16T07:00:46.4678638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGH7LOPM6FZOHQ7MLULPVLPQHTTIHE36CFDSMPJA6YJUSS6YGTGRUOJQPKVL3BWXYBC/providers/Microsoft.Compute/disks/clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","name":"clitest-vmvp3rj_OsDisk_1_0989a4d0e4984b87954e1ffc79f4bfc5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","location":"southeastasia","createdTime":"2021-04-16T02:27:40.0581609Z","changedTime":"2021-04-16T02:37:42.0974042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Compute/virtualMachines/clitest-vmvp3rj","name":"clitest-vmvp3rj","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T02:27:37.9819903Z","changedTime":"2021-04-16T02:38:45.1456865Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkInterfaces/clitest-vmvp3rjVMNic","name":"clitest-vmvp3rjVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T02:27:35.3612817Z","changedTime":"2021-04-16T02:37:35.4973333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmvp3rjNSG","name":"clitest-vmvp3rjNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7751365Z","changedTime":"2021-04-16T02:37:33.7238222Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/publicIPAddresses/clitest-vmvp3rjPublicIP","name":"clitest-vmvp3rjPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775723Z","changedTime":"2021-04-16T02:37:33.9559818Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Network/virtualNetworks/clitest-vmvp3rjVNET","name":"clitest-vmvp3rjVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T02:27:30.7775096Z","changedTime":"2021-04-16T02:37:34.4663018Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkyeuooxw7qk","name":"clitest-vaultkyeuooxw7qk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.8401427Z","changedTime":"2021-04-16T02:37:27.8226507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgh7lopm6fzohq7mlulpvlpqhttihe36cfdsmpja6yjuss6ygtgruojqpkvl3bwxybc/providers/Microsoft.Storage/storageAccounts/clitesterlb3npa6l4s4denq","name":"clitesterlb3npa6l4s4denq","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-16T02:29:02.2896035Z","changedTime":"2021-04-16T02:39:26.1097115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghburwdz4jh4buzg5cpx3d6eryni73eognu2wq4ksembp4e4auxkiu6bbtvygcyult/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkhsud4sopec","name":"clitest-vaultkhsud4sopec","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:15.9408736Z","changedTime":"2020-11-20T09:06:17.2358945Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus2","createdTime":"2021-04-19T09:25:25.8185965Z","changedTime":"2021-04-19T09:26:14.9480028Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/databases/master","name":"clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghhf5botmv35el75vjyqbgsro73jpgublhoixobsubf55ghactmlgzsmjniywwaaul/providers/Microsoft.Sql/servers/clitestserver6phhprfxtq2er6s32uw2lzvxev2pe6cryb2oxni546djpvaqi","location":"eastus2","createdTime":"2021-04-19T09:26:43.8648688Z","changedTime":"2021-04-19T09:26:43.9293152Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGHWJQTOOPOZBFXFQ4HDCEY3UNPGOY5OYHQMJISBQOTBA25KNZUCO4C34GZ4ZVMFL4E/providers/Microsoft.Compute/disks/clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","name":"clitest-vmapciw_disk1_4a323cb35aad425db5bbe637889b2e6a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","location":"southeastasia","createdTime":"2021-04-16T09:03:56.5691534Z","changedTime":"2021-04-16T09:13:58.921169Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Compute/virtualMachines/clitest-vmapciw","name":"clitest-vmapciw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.5027178Z","changedTime":"2021-04-16T09:14:21.6793003Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkInterfaces/clitest-vmapciwVMNic","name":"clitest-vmapciwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:55.1089181Z","changedTime":"2021-04-16T09:13:56.3385997Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/networkSecurityGroups/clitest-vmapciwNSG","name":"clitest-vmapciwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:49.8438874Z","changedTime":"2021-04-16T09:15:54.3167924Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/publicIPAddresses/clitest-vmapciwPublicIP","name":"clitest-vmapciwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:49.8752582Z","changedTime":"2021-04-16T09:15:55.253218Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.Network/virtualNetworks/clitest-vmapciwVNET","name":"clitest-vmapciwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:49.9424234Z","changedTime":"2021-04-16T09:13:54.8250426Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwjqtoopozbfxfq4hdcey3unpgoy5oyhqmjisbqotba25knzuco4c34gz4zvmfl4e/providers/Microsoft.RecoveryServices/vaults/clitest-vaultyhh4qtwrkvr","name":"clitest-vaultyhh4qtwrkvr","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6645838Z","changedTime":"2021-04-16T09:13:43.8763025Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rghwyazclyv2qc7in6p7v73fieuy2snwo5smcepswlsuplkl25idtrjbdav4l4afyxj/providers/Microsoft.RecoveryServices/vaults/clitest-vaulteubxds4e7dj","name":"clitest-vaulteubxds4e7dj","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.6705832Z","changedTime":"2021-04-16T13:18:10.7190838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T08:08:26.4794627Z","changedTime":"2021-04-19T08:50:49.5208577Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-7ho446gaojjt","name":"sfrp-cli-kv-7ho446gaojjt","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T08:06:48.4089367Z","changedTime":"2021-04-19T08:16:50.6104903Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","name":"LB-sfrp-cli-7arauzr5fjimrmm-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:06.9038901Z","changedTime":"2021-04-19T08:18:08.9868829Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T08:08:02.8646322Z","changedTime":"2021-04-19T08:18:09.5252072Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T08:08:02.9381415Z","changedTime":"2021-04-19T08:18:08.2939637Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-7arauzr5fjimrmm","name":"sfrp-cli-7arauzr5fjimrmm","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T08:08:24.0416139Z","changedTime":"2021-04-19T08:18:25.1154695Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/rye7le6arfuf23","name":"rye7le6arfuf23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8544492Z","changedTime":"2021-04-19T08:18:25.585202Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi5z655ddi7dbxpse4om5pg4yxmllq6iivscn3unevs3xz2fxecnkvj56hydjkhyvl/providers/Microsoft.Storage/storageAccounts/sflogsrye7le6arfuf22","name":"sflogsrye7le6arfuf22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T08:08:02.8499227Z","changedTime":"2021-04-19T08:18:23.6224346Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-7arauzr5fjimrmm"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgi65abrsvcpdjd3awsszhim2la7yd4vfetsvaacixtc5pfn4wfxhfiuee6wtbby57n/providers/Microsoft.RecoveryServices/vaults/clitest-vaultpksfxeixrvo","name":"clitest-vaultpksfxeixrvo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T08:57:30.3552375Z","changedTime":"2021-03-26T14:40:41.5578339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgib3viqdhrawwnaopavpcsc2u3psfod7wlami5tg57borlex2io2b7nolpz4qxhm5p/providers/Microsoft.RecoveryServices/vaults/clitest-vaulte5qqz3zjihv","name":"clitest-vaulte5qqz3zjihv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:42:53.8977902Z","changedTime":"2019-10-17T15:52:56.4032737Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjc7odeq6u336o3xg2ihjab35fqet372a2tdatkol255jryquhnetbf2carjvc2v6o/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizzj3mkbulq","name":"clitest-vaultizzj3mkbulq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1482695Z","changedTime":"2021-04-16T07:15:33.0237444Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjfczrypeqdy6zjxohpe5d4k5d6nkt2arzlbiqekvuyl5fqino3cbj3byd7d2fiwwy/providers/Microsoft.Storage/storageAccounts/clitestv7f4khn2m2sbya3e7","name":"clitestv7f4khn2m2sbya3e7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.7391843Z","changedTime":"2021-04-14T06:53:02.3874582Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Microsoft"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T04:23:45.3378587Z","changedTime":"2021-04-19T04:34:02.6718194Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjiympamq6kyxhzoq5uuidnqy5ieqxt4e3h5ejfn54ofjkvemcfn7p264i7xkf5zrb/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-5","name":"profile123/cdn-cli-test-5","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:23:58.6353981Z","changedTime":"2021-04-19T04:34:46.3730465Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjjzlwchml4rqpgltu4xetvrkbckw24tqgnh6lyh4nmri2jlx43q34o27ojb4itvf2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultizns75enlc7","name":"clitest-vaultizns75enlc7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.6054519Z","changedTime":"2021-04-19T08:50:03.1189501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjnlzofcha2744qc7yx6rq5yoxlecft32iawnuxa65bvu44mve3abve6bqu7cyplzn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultmbwvg7gszse","name":"clitest-vaultmbwvg7gszse","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1921219Z","changedTime":"2021-04-16T11:20:27.3851127Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGJSMTN6SPFH6TUZ4JYMOUQR33XUEB3LKBBV7BVFOOROY5IO7CD6OE3ZAYN56STPJYN/providers/Microsoft.Compute/disks/clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","name":"clitest-vm35jy3_disk1_3bc54046237a40caa185547b83edbe78","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","location":"southeastasia","createdTime":"2021-04-19T02:47:06.3464877Z","changedTime":"2021-04-19T02:57:06.5849826Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Compute/virtualMachines/clitest-vm35jy3","name":"clitest-vm35jy3","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:04.5675946Z","changedTime":"2021-04-19T02:57:33.6343604Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkInterfaces/clitest-vm35jy3VMNic","name":"clitest-vm35jy3VMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:04.2253727Z","changedTime":"2021-04-19T02:57:04.7303352Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/networkSecurityGroups/clitest-vm35jy3NSG","name":"clitest-vm35jy3NSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9381108Z","changedTime":"2021-04-19T02:57:04.9901724Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/publicIPAddresses/clitest-vm35jy3PublicIP","name":"clitest-vm35jy3PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.9355374Z","changedTime":"2021-04-19T02:57:04.660964Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Network/virtualNetworks/clitest-vm35jy3VNET","name":"clitest-vm35jy3VNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.9402505Z","changedTime":"2021-04-19T02:57:03.600596Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultedt62k7zvhu","name":"clitest-vaultedt62k7zvhu","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6148012Z","changedTime":"2021-04-19T02:56:56.0632835Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjsmtn6spfh6tuz4jymouqr33xueb3lkbbv7bvfooroy5io7cd6oe3zayn56stpjyn/providers/Microsoft.Storage/storageAccounts/clitesteq7n3hhs7fyymzakn","name":"clitesteq7n3hhs7fyymzakn","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2021-04-19T02:48:02.3208104Z","changedTime":"2021-04-19T02:58:25.5376162Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjtzmpwo4gdziuw757oz5fiwyrofvggrl2dmsgqzuutg3d4mvlzorevvdyxwi2p6kj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnu3dtzn45wx","name":"clitest-vaultnu3dtzn45wx","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:11:25.3503451Z","changedTime":"2021-03-26T11:26:54.334371Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgjxtwf5stm5umtm5rckttyaegg5io6pununyfagprqp7lnju2gqge6tswaankwnhni/providers/Microsoft.RecoveryServices/vaults/clitest-vault7gyxblvcxyl","name":"clitest-vault7gyxblvcxyl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-29T20:08:43.1008168Z","changedTime":"2020-10-29T20:18:54.1995396Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgk32ngz6rpt/providers/Microsoft.BotService/botServices/cli3twndx3klwuc","name":"cli3twndx3klwuc","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2021-04-19T04:19:08.9903602Z","changedTime":"2021-04-19T04:19:09.0445736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11oyimlli4vyznz","name":"iot-hub-for-test-11oyimlli4vyznz","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-13T03:30:43.7508258Z","changedTime":"2021-04-13T07:40:42.9186039Z","provisioningState":"Succeeded","tags":{"e":"f","g":"h"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1seh6chk","name":"ehNamespaceiothubfortest1seh6chk","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-13T03:27:01.3472327Z","changedTime":"2021-04-13T03:37:06.9062704Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkml665q5cacvdpt3xnqvtxlf6tnizaecikm3p6b3sjztp3xdmho4xfjertdheykac/providers/Microsoft.Storage/storageAccounts/clitest4y7fofzs3ujuabfp7","name":"clitest4y7fofzs3ujuabfp7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-13T03:26:34.1603108Z","changedTime":"2021-04-13T03:37:01.2609649Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-zndeyenhxuzm","name":"sfrp-cli-kv-zndeyenhxuzm","type":"Microsoft.KeyVault/vaults","location":"eastasia","createdTime":"2021-04-19T09:02:45.2710341Z","changedTime":"2021-04-19T09:12:54.5018133Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgksyn3pomdc5xrqrmsrbekyo3qmk2dy4cvd6hdy4mofstj2wnweveeqjgovwct3d4j/providers/Microsoft.ServiceFabric/managedclusters/sfrp-cli-hqvjk4ymjsct2m2","name":"sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.ServiceFabric/managedclusters","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:42:19.0449005Z","changedTime":"2021-04-19T08:56:12.1367512Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgktqdge5ejbfsqxmn5ndvxksssyoaiim54yoqytc6zbl6pvkwbo345srev7wzwlosl/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbnqnifjnwmm","name":"clitest-vaultbnqnifjnwmm","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-09-21T10:26:10.1850998Z","changedTime":"2020-09-21T10:36:11.7437109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgkxfhzfdpfi7fwsegigabb6s6nk4vy5y6rfsemeycinzwihgr26aij6xbuszvt3u36/providers/Microsoft.Storage/storageAccounts/clitestbilzhmvshjpgny4qh","name":"clitestbilzhmvshjpgny4qh","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:33.4266866Z","changedTime":"2021-04-14T06:53:06.2600175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl5a4dnxb3jwo35ml34mcdhy7g6i2jgxla7hhhd26b6ccbfk7vbpjicpfskkslmacy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultu7ux47n24lg","name":"clitest-vaultu7ux47n24lg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.7193822Z","changedTime":"2021-04-09T01:43:30.3508832Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgl6kzjmeryiey3qq6r3t2fpgbpghqhjxjs53hyzljt5ht53gn6dzdhduqzthm5g5ck/providers/Microsoft.Network/virtualNetworks/clitestvnet1","name":"clitestvnet1","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:15:09.2741697Z","changedTime":"2021-03-12T00:25:13.2222521Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglgenen7mtojyrxvuqqt7sbaqglgfciptzv43nomu2xrxqjdw335kzhefcm6kzypne/providers/Microsoft.RecoveryServices/vaults/clitest-vault56jeqjmgvrc","name":"clitest-vault56jeqjmgvrc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7910448Z","changedTime":"2021-03-26T01:20:36.4403487Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:24:40.5167652Z","changedTime":"2021-04-19T09:25:53.427644Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/databases/master","name":"clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rglyzymah2epeeqqeurf6ratiq4d5veitsru35bxeo7fhiapwpumyvflxwpii5ihzru/providers/Microsoft.Sql/servers/clitestserverax2eqk527wzgdwfuiebhytd2bf2qyvrs4duo5kltbbv35l5ce","location":"westeurope","createdTime":"2021-04-19T09:26:10.3316555Z","changedTime":"2021-04-19T09:26:10.3982145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm2qn6vwwfmea2fe3z3lhmsc37z4eaffax36w5sdka7hf4om6gm4iokxd6hstcl5ph/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvs6ueenx6o3","name":"clitest-vaultvs6ueenx6o3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:37:59.1912719Z","changedTime":"2020-12-18T04:48:08.1051582Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGM36DC7BUAFAB42CIT7NLLSKTFXBC5WWFMMG3NJVH6SWZ4VDE6QXNPOBG5QNUDBA7V/providers/Microsoft.Compute/disks/clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","name":"clitest-vmz7nxh_OsDisk_1_185c15f05abc40dfb58f1f0c9216b615","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","location":"southeastasia","createdTime":"2021-04-19T02:47:12.0297618Z","changedTime":"2021-04-19T02:57:13.8889984Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Compute/virtualMachines/clitest-vmz7nxh","name":"clitest-vmz7nxh","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:10.0372248Z","changedTime":"2021-04-19T02:58:26.6025482Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkInterfaces/clitest-vmz7nxhVMNic","name":"clitest-vmz7nxhVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:06.7445998Z","changedTime":"2021-04-19T02:57:08.3541333Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/networkSecurityGroups/clitest-vmz7nxhNSG","name":"clitest-vmz7nxhNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:01.0281072Z","changedTime":"2021-04-19T02:57:05.3099185Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/publicIPAddresses/clitest-vmz7nxhPublicIP","name":"clitest-vmz7nxhPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:01.0137311Z","changedTime":"2021-04-19T02:57:02.5666554Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.Network/virtualNetworks/clitest-vmz7nxhVNET","name":"clitest-vmz7nxhVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:01.1167585Z","changedTime":"2021-04-19T02:57:04.5860938Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm36dc7buafab42cit7nllsktfxbc5wwfmmg3njvh6swz4vde6qxnpobg5qnudba7v/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnieezg6dop3","name":"clitest-vaultnieezg6dop3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1615158Z","changedTime":"2021-04-19T02:56:56.4131062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.KeyVault/vaults/clitestgbgy4a3th5o2focmv","name":"clitestgbgy4a3th5o2focmv","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:04:18.3998988Z","changedTime":"2021-04-19T03:14:24.9638051Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh","name":"ido7edflxxrxtgkhcdzpmqsh","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:04:07.0287001Z","changedTime":"2021-04-19T03:14:17.0254027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7","name":"sa1oygtk3f2rgngyl7ednxd7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa1oygtk3f2rgngyl7ednxd7/credentials/v2/userassigned?arpid=39fbab7e-51f0-482a-aaba-b4715d32b95a&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:05:13.9390184Z","changedTime":"2021-04-19T03:16:00.0850879Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa24bq36e62ve4t6qsd5pa4m","name":"sa24bq36e62ve4t6qsd5pa4m","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"32411212-1bfc-4377-a464-81139b97956a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:06:04.9375638Z","changedTime":"2021-04-19T03:19:17.777573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit","name":"sa3cmoyiicyb2rp2chp6qgit","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"e5ecc2d8-70c9-4e4f-a6ac-d887bb79c310","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ido7edflxxrxtgkhcdzpmqsh":{"principalId":"602c02f1-d703-4eb0-b64f-7e53bcb49a74","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"38ce871c-7bcb-4602-be57-e55737e17c62","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgm3o5x3fhvaqsz5msmucatldi6jc2drax7xp7hs7lzjphheodie7cgd5yezpahbr3p/providers/Microsoft.Storage/storageAccounts/sa3cmoyiicyb2rp2chp6qgit/credentials/v2/userassigned?arpid=f08cb05b-c19e-4d5e-845a-d7103205d9ed&uaid=38ce871c-7bcb-4602-be57-e55737e17c62","certRenewAfter":"2021-06-04T02:59:00Z"}}},"createdTime":"2021-04-19T03:06:30.8695107Z","changedTime":"2021-04-19T03:17:06.6255553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmawiihzv2ztze7gjjesuy2a2de22wkvhmqbqypkyx657qcaqlupqfcauektqibx2t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultorv5ijqllyq","name":"clitest-vaultorv5ijqllyq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:55.6211066Z","changedTime":"2021-04-19T07:02:11.4530709Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmciomabfvjltjz2iizdgus6m3jx3rg7xtksqokt3fgg3j6nmp4krbwovsw3qsa5w4/providers/Microsoft.Sql/servers/clitestserverhuga3c7dnew3yhkh5sxvvcaitydlavifaehsmbku6uw534la3","name":"clitestserverhuga3c7dnew3yhkh5sxvvcaitydlavifaehsmbku6uw534la3","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:28:18.6188508Z","changedTime":"2021-04-19T09:29:26.7313268Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmciomabfvjltjz2iizdgus6m3jx3rg7xtksqokt3fgg3j6nmp4krbwovsw3qsa5w4/providers/Microsoft.Sql/servers/clitestserverhuga3c7dnew3yhkh5sxvvcaitydlavifaehsmbku6uw534la3/elasticpools/createUnzonedUpdateToZonedPool","name":"clitestserverhuga3c7dnew3yhkh5sxvvcaitydlavifaehsmbku6uw534la3/createUnzonedUpdateToZonedPool","type":"Microsoft.Sql/servers/elasticpools","sku":{"name":"PremiumPool","tier":"Premium","capacity":125},"kind":"pool","location":"eastus","createdTime":"2021-04-19T09:29:27.1079213Z","changedTime":"2021-04-19T09:31:32.0363473Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmijrf6lxqrppiiavxua4ij55yswz2zkjtovuxmmkjjr4p6v3up524pvnbsnkz4tze/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuxa7diukawk","name":"clitest-vaultuxa7diukawk","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:10:54.8666061Z","changedTime":"2021-04-19T08:55:34.2659906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmjjmywipmiqslgzl7tzax3aje4fcv3q5xr2h7hulg63ehpwno2mu7ij7dokxqbh5x/providers/Microsoft.RecoveryServices/vaults/clitest-vaultqofbmffwsre","name":"clitest-vaultqofbmffwsre","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-18T00:59:21.2852368Z","changedTime":"2019-10-18T12:55:44.8491616Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmujhiwhucmdgk7mji2xq73quqojqhwd4u5unnogomha7i7kkmmplkj47gp5bviltf/providers/Microsoft.RecoveryServices/vaults/clitest-vaultomhicstet4v","name":"clitest-vaultomhicstet4v","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T02:27:24.9408597Z","changedTime":"2021-04-16T02:37:27.5281178Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-16T09:10:51.1250727Z","changedTime":"2021-04-16T10:33:09.8070652Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-yrih5c4vcy5r","name":"sfrp-cli-kv-yrih5c4vcy5r","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-16T09:08:44.4632337Z","changedTime":"2021-04-16T09:18:51.3408949Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-i2kidudndpc746u-nt1vm","name":"LB-sfrp-cli-i2kidudndpc746u-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:28.119894Z","changedTime":"2021-04-16T09:20:31.4401274Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T09:10:17.8056896Z","changedTime":"2021-04-16T09:20:33.3981351Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T09:10:17.9871721Z","changedTime":"2021-04-16T09:20:34.0384846Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-i2kidudndpc746u","name":"sfrp-cli-i2kidudndpc746u","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-16T09:10:45.7770222Z","changedTime":"2021-04-16T09:20:50.0583514Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/sflogsyuncspwpmbsmk2","name":"sflogsyuncspwpmbsmk2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.7933801Z","changedTime":"2021-04-16T09:20:45.9472008Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgmwd62kp7ggrnjjv5sh4mhiorz7lzuvtnfrchodr24tgxta3noucz7jkceffikusa3/providers/Microsoft.Storage/storageAccounts/yuncspwpmbsmk3","name":"yuncspwpmbsmk3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-16T09:10:17.8167741Z","changedTime":"2021-04-16T09:20:46.2126509Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-i2kidudndpc746u"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfq5jbtcrfu7ap7hb3wgss7p6sndk3ggf7zidp222u4zmzftbyfu3l3qjs7hquxaj/providers/Microsoft.RecoveryServices/vaults/clitest-vaultd2orcsqjviv","name":"clitest-vaultd2orcsqjviv","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.9100002Z","changedTime":"2021-04-19T04:44:58.1569906Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123","name":"profile123","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Verizon"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:59:46.8684475Z","changedTime":"2021-04-19T04:11:04.6163453Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnfspzs2rrkyvc5ru7s2hdl2hqzvfdiu4iwx2bp6kfhl5qudu2ok3bbp2x4pouty7v/providers/Microsoft.Cdn/profiles/profile123/endpoints/cdn-cli-test-3","name":"profile123/cdn-cli-test-3","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T04:01:00.0469653Z","changedTime":"2021-04-19T04:11:29.6987683Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqth46sft7puyvrtnti6gghtzqhbajv3awlqrw63pthciz4gwbsbdlvf752nd2gau/providers/Microsoft.RecoveryServices/vaults/clitest-vaultw3jhdr7xsms","name":"clitest-vaultw3jhdr7xsms","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.7886784Z","changedTime":"2021-02-24T03:54:50.4149633Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgnqxr5jrejcigqiu6ydylw2q67f7mbndkgy5lzj7whswg5ir7gqkt42f5xrqdhlokw/providers/Microsoft.RecoveryServices/vaults/clitest-vault6rb74dse5uc","name":"clitest-vault6rb74dse5uc","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:50.9980568Z","changedTime":"2021-04-19T07:21:54.4055143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgntkof6zosuvmkvuuj2hdicjvuwqftziht2smack7wivvp4utswslf3p2hbpep7ogs/providers/Microsoft.Solutions/applicationDefinitions/testappdefnamerth3xh","name":"testappdefnamerth3xh","type":"Microsoft.Solutions/applicationDefinitions","location":"eastus","createdTime":"2021-04-13T09:35:36.7144845Z","changedTime":"2021-04-13T09:45:42.7779721Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:26:51.918381Z","changedTime":"2021-04-19T09:28:02.1327584Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/db1","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/db1","type":"Microsoft.Sql/servers/databases","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":2},"kind":"v12.0,user,vcore","location":"eastus","createdTime":"2021-04-19T09:32:18.1908253Z","changedTime":"2021-04-19T09:32:19.7524674Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/databases/master","name":"clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgolsborchsuioqd7qbdvr645q2mx6s6f64mv4byqo6lr4jueivibudapfzr2bd6gkc/providers/Microsoft.Sql/servers/clitestserverh6eadtla5mzsxkaawggvdksr73cc6jbdbeixjuds2vhbiqgip","location":"eastus","createdTime":"2021-04-19T09:28:15.2026127Z","changedTime":"2021-04-19T09:28:15.3011239Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgoy4whi553iwa7kmtmjqz26xctkpza4kkhgaepo6a2a6gcd6tl66pip3dqyp2ijlp5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultszrwsgnwemz","name":"clitest-vaultszrwsgnwemz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T04:34:57.91819Z","changedTime":"2021-04-19T04:44:59.0494619Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgp535jz2dxemblsqlvzwsk4ehth7eprd5yny22fi5rppnick62nncsonvlutvmvbje/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsqo77eexzn","name":"clitest-vaulttsqo77eexzn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-17T15:44:57.6589233Z","changedTime":"2019-10-17T15:55:01.3454508Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgpkodvjufgz3njs6nmlsbm4ji37eo3rvjk72ljemvkfyxlmvv6xhnxt3o6hdhalp7n/providers/Microsoft.RecoveryServices/vaults/clitest-vault6ze7sv5nfpg","name":"clitest-vault6ze7sv5nfpg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:52.2202728Z","changedTime":"2021-04-19T08:22:07.3494606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgplue5za447x74aoefbqd4gh7q7lfjwht3lkhs2x3o2ltju6n6otdfcq2kswadnumh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultxy47pqbaqib","name":"clitest-vaultxy47pqbaqib","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:49.8084276Z","changedTime":"2021-04-02T00:10:07.6132034Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgps5zfcfz2nl33apwcfwfqvleyp5stuvgrremfe5gkhkynlfolbjgohnliml4ph7cx/providers/Microsoft.RecoveryServices/vaults/clitest-vaultskc7zljbi3o","name":"clitest-vaultskc7zljbi3o","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T20:01:06.2614186Z","changedTime":"2021-04-02T01:53:20.8747093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.KeyVault/vaults/clitestqykmnvpfrwg7fhc72","name":"clitestqykmnvpfrwg7fhc72","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T03:13:25.5283916Z","changedTime":"2021-04-19T03:23:34.5047324Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk","name":"idlf7yzvyjcim6vktmqf2mmk","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T03:13:12.1648816Z","changedTime":"2021-04-19T03:23:20.0881312Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri","name":"sa1eyzdihtcwdmy3zmgrkcri","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa1eyzdihtcwdmy3zmgrkcri/credentials/v2/userassigned?arpid=2620b059-cae9-4a14-8775-b5a2617e2ef5&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:14:23.0842735Z","changedTime":"2021-04-19T03:25:13.8510121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa2pmu4mhob343wjblprsgew","name":"sa2pmu4mhob343wjblprsgew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"50115edd-2717-4a63-9d1d-5e01bb651fff","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-19T03:15:16.3686372Z","changedTime":"2021-04-19T03:29:48.3260417Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx","name":"sa373fu4ogh4gfwbtfxe2xtx","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"principalId":"b0d1b1c2-edec-44ff-aa6d-b889a4527690","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idlf7yzvyjcim6vktmqf2mmk":{"principalId":"6c7f37af-dbf9-4bac-aa81-0f234714c335","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"5fe2ff3a-6059-484a-80f8-aed37d60314c","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgptljcs6eg2jrfsljt26wwsl7txkkyh74csjmn47wkbydhefagsc7gabv5mufixvy5/providers/Microsoft.Storage/storageAccounts/sa373fu4ogh4gfwbtfxe2xtx/credentials/v2/userassigned?arpid=8147c02e-ea54-475e-ba84-8f97c8dafe90&uaid=5fe2ff3a-6059-484a-80f8-aed37d60314c","certRenewAfter":"2021-06-04T03:08:00Z"}}},"createdTime":"2021-04-19T03:15:42.8388136Z","changedTime":"2021-04-19T03:26:25.5232679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqbb7oohiug623ibi4qy72xadbg37nvevzblxaea7ez3mait4fp4lfbgv5e5mlrs2z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultoos26bx55dw","name":"clitest-vaultoos26bx55dw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:51.8995754Z","changedTime":"2020-10-23T16:42:01.9283786Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqkx77vweoebebb3r4z3uulo44anfyofua6sk46hum3euxjfes2ictcxdydw5h365z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultn4bxuh5m2qb","name":"clitest-vaultn4bxuh5m2qb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-01T19:52:51.2678265Z","changedTime":"2021-04-02T00:09:36.3906756Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Compute/virtualMachineScaleSets/nt1vm","name":"nt1vm","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2_V2","tier":"Standard","capacity":3},"location":"westus","createdTime":"2021-04-19T02:53:49.7088714Z","changedTime":"2021-04-19T04:16:57.0475633Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.KeyVault/vaults/sfrp-cli-kv-wwvqsei4kinc","name":"sfrp-cli-kv-wwvqsei4kinc","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-19T02:51:38.3128082Z","changedTime":"2021-04-19T03:01:46.1391553Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-shrtab4dbwc6332-nt1vm","name":"LB-sfrp-cli-shrtab4dbwc6332-nt1vm","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:26.7662217Z","changedTime":"2021-04-19T03:03:32.5438524Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/publicIPAddresses/PublicIP-LB-FE-0","name":"PublicIP-LB-FE-0","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-19T02:53:13.3390964Z","changedTime":"2021-04-19T03:03:26.2455166Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Network/virtualNetworks/VNet","name":"VNet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:53:13.5865855Z","changedTime":"2021-04-19T03:03:27.0112693Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.ServiceFabric/clusters/sfrp-cli-shrtab4dbwc6332","name":"sfrp-cli-shrtab4dbwc6332","type":"Microsoft.ServiceFabric/clusters","location":"westus","createdTime":"2021-04-19T02:53:44.8954233Z","changedTime":"2021-04-19T03:03:51.340017Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/fqgisep4xxtru3","name":"fqgisep4xxtru3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:13.8624481Z","changedTime":"2021-04-19T03:03:41.4770985Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqs4z46r3nwjogtg3tbmubrfnlfembj6zgiq7i3twa3kl44ybscywcsafaf7ttjxwt/providers/Microsoft.Storage/storageAccounts/sflogsfqgisep4xxtru2","name":"sflogsfqgisep4xxtru2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T02:53:16.3387857Z","changedTime":"2021-04-19T03:03:42.5798168Z","provisioningState":"Succeeded","tags":{"resourceType":"Service - Fabric","clusterName":"sfrp-cli-shrtab4dbwc6332"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.KeyVault/vaults/clitestzgylz5j4vixpbtlmg","name":"clitestzgylz5j4vixpbtlmg","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T01:54:23.1601375Z","changedTime":"2021-04-19T02:04:34.4452362Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idfltrijgz5jszpkryowtap3","name":"idfltrijgz5jszpkryowtap3","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T01:54:10.6572589Z","changedTime":"2021-04-19T02:04:19.013835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa1zxgyytiatwal3o2mugst4","name":"sa1zxgyytiatwal3o2mugst4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"None"},"createdTime":"2021-04-19T01:55:22.5505579Z","changedTime":"2021-04-19T02:06:59.3455191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgqwluvwfzfrhjprs6aprehbhdpmrsqiwlh6nnkufcfk4ttix4usqsrm22fll7ffrwr/providers/Microsoft.Storage/storageAccounts/sa25exzssxlnzfljlreu2m42","name":"sa25exzssxlnzfljlreu2m42","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T02:08:32.9460929Z","changedTime":"2021-04-19T02:19:07.883237Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr2vni5wieelvnlmaav6bphoqa77svqbi6wqxtly6mmvrga2zdpq7swbxhtwdbmhq4/providers/Microsoft.RecoveryServices/vaults/clitest-vaulth2lqfalcza3","name":"clitest-vaulth2lqfalcza3","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.6437281Z","changedTime":"2021-02-24T03:54:47.6000847Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgr5sog7j3q3a5o2vy3r4gpl3ylcovxfcbkttkotqe653iz4mlsrbjns76tv4v4lbqq/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfe6e244jgwn","name":"clitest-vaultfe6e244jgwn","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:55:23.6116381Z","changedTime":"2019-10-15T17:05:26.9186988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrckmw2yw7amgup3nl5boy37ddbla6u2d6oyv5hkesphzmm66tautjt6ttyoslwo4t/providers/Microsoft.RecoveryServices/vaults/clitest-vaultx4qu6bgndxh","name":"clitest-vaultx4qu6bgndxh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.1839227Z","changedTime":"2021-04-16T07:15:33.1071149Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrdbh7rzwz26bty5bjw6z3gclagbkvlbvk4hd6nto3s34uumdhdrhpba3cyx3yidu6/providers/Microsoft.RecoveryServices/vaults/clitest-vaultkckuhuzf5qt","name":"clitest-vaultkckuhuzf5qt","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:42.1656482Z","changedTime":"2021-02-24T03:54:50.4610643Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrr7e5yu4cto6fkllatxyyydgiwjjwfcm4l6cpgkgd4des3xmwtjr4lcucgztueqbv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnrrwo6le6j7","name":"clitest-vaultnrrwo6le6j7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.5980694Z","changedTime":"2021-04-16T07:00:44.2369271Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","type":"Microsoft.Sql/servers","kind":"v12.0","location":"southeastasia","createdTime":"2021-04-19T09:17:12.9221681Z","changedTime":"2021-04-19T09:27:20.5738924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/cliautomationhs03","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/cliautomationhs03","type":"Microsoft.Sql/servers/databases","sku":{"name":"HS_Gen5","tier":"Hyperscale","family":"Gen5","capacity":8},"kind":"v12.0,user,vcore,hyperscale","location":"southeastasia","createdTime":"2021-04-19T09:21:34.4735873Z","changedTime":"2021-04-19T09:23:55.343175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/databases/master","name":"clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrrxjdlgdmjllscachbiwdjuuvjhseztilbpse3czhjl6wdqp3bcolaoulgm6lyfjy/providers/Microsoft.Sql/servers/clitestserverb4eurrjdtzzsr676kizvg3346vxz6xxc6d3g6nfrxdq7gpoaa","location":"southeastasia","createdTime":"2021-04-19T09:18:40.9969244Z","changedTime":"2021-04-19T09:18:41.0482447Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgrtzybz26h2d2f54vpdsxetvaqh5xqlwqf7djuurxw2cshgkwrmytaplddsvwo7jql/providers/Microsoft.RecoveryServices/vaults/clitest-vaultwigajwrefb6","name":"clitest-vaultwigajwrefb6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.0604904Z","changedTime":"2021-04-16T09:13:45.5142525Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks","name":"profilebuz7my4tdavvwwgks","type":"Microsoft.Cdn/profiles","sku":{"name":"Standard_Akamai"},"kind":"cdn","location":"westus","createdTime":"2021-04-19T03:58:50.5277307Z","changedTime":"2021-04-19T04:09:06.5466804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgsxsbftpq3zkbq5x63b4c4g7tedc5nuy4mzoelqyznxmlt6fjf73rsv2m2lhjmnqey/providers/Microsoft.Cdn/profiles/profilebuz7my4tdavvwwgks/endpoints/cdn-cli-test","name":"profilebuz7my4tdavvwwgks/cdn-cli-test","type":"Microsoft.Cdn/profiles/endpoints","location":"westus","createdTime":"2021-04-19T03:59:03.5176751Z","changedTime":"2021-04-19T04:09:21.6903446Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtgjef77rrkyciukhkwgo7vw7fdvvzeb7jcos2hiv3avuwqvxdzr5itcmt7fiskvgf/providers/Microsoft.RecoveryServices/vaults/clitest-vaulty7b3wxrlvid","name":"clitest-vaulty7b3wxrlvid","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-11-20T08:56:16.4761176Z","changedTime":"2020-11-20T09:06:17.424177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgthqc3brxvjgz4cvoxzr3rjyq5mepbz4sgf4ujpjqkwp4zdvjeivnqwjhhpoyhxlzz/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrh7oicgxujl","name":"clitest-vaultrh7oicgxujl","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.2071695Z","changedTime":"2021-04-09T00:03:08.9459465Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtiatra4fev6wyhaqqebw4g4i64hoi5ncmv5rg77ff3cqs7c7jm37mbixepek2oef3/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnq2rj7lugpp","name":"clitest-vaultnq2rj7lugpp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-02-24T03:44:39.8504761Z","changedTime":"2021-02-24T03:54:50.7025216Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.KeyVault/vaults/clitestzmkdc2g7bdwvndxd5","name":"clitestzmkdc2g7bdwvndxd5","type":"Microsoft.KeyVault/vaults","location":"eastus2euap","createdTime":"2021-04-19T02:19:22.3693562Z","changedTime":"2021-04-19T02:29:29.7793464Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k","name":"idm26ifc6yghif3dkebx2m5k","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus2euap","createdTime":"2021-04-19T02:19:11.123184Z","changedTime":"2021-04-19T02:29:21.1285953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle","name":"sa1bwis4hxlzb4i7htnd4rle","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.ManagedIdentity/userAssignedIdentities/idm26ifc6yghif3dkebx2m5k":{"principalId":"6d54df4c-e57b-47b9-91ad-f0ef77e64478","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","clientId":"34ad0627-5891-4909-84aa-d8b0a56b32bb","identityUrl":"https://control-eastus2euap.identity.azure.net/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/clitest.rgtpizwelo42wuxnpmtgb6utbo5qbhvqmdvbxkufstm2l26uswiqacth7nrd7pn3gor/providers/Microsoft.Storage/storageAccounts/sa1bwis4hxlzb4i7htnd4rle/credentials/v2/userassigned?arpid=281e64c3-8e80-4aee-92ce-8ee9450ce46d&uaid=34ad0627-5891-4909-84aa-d8b0a56b32bb","certRenewAfter":"2021-06-04T02:14:00Z"}}},"createdTime":"2021-04-19T02:20:17.7238703Z","changedTime":"2021-04-19T02:32:11.3193942Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgtsw2ukakywa3q7wujjy5joyqwqaep4ylpsdrpo6ujad25ax4bnpsxg3tvpdvv7nec/providers/Microsoft.RecoveryServices/vaults/clitest-vault22ugzkb5r32","name":"clitest-vault22ugzkb5r32","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.5663633Z","changedTime":"2021-04-16T07:00:45.1781946Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguk5hr7imq2zbvjzaogkt7gke2onbbn6sr3ux5rfdiqufofpfrmblbmbzrtd663lkn/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfiskwqfysgb","name":"clitest-vaultfiskwqfysgb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:56:19.0455443Z","changedTime":"2019-10-22T10:24:28.0894288Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgupzb4e5lqbyi7qr522am2is2labcqggraedd5ofavmgfqbiejbehtgmcdnifzeat5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultvm7sxp5ad4e","name":"clitest-vaultvm7sxp5ad4e","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.6220958Z","changedTime":"2021-04-16T07:15:34.2466352Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Devices/IotHubs/iot-hub-for-test-11e57jn26amvg7l","name":"iot-hub-for-test-11e57jn26amvg7l","type":"Microsoft.Devices/IotHubs","sku":{"name":"F1","tier":"Free","capacity":1},"location":"westus2","identity":{"type":"None"},"createdTime":"2021-04-14T08:41:33.8239765Z","changedTime":"2021-04-14T08:53:08.3664983Z","provisioningState":"Succeeded","tags":{"a":"b","c":"d"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.EventHub/namespaces/ehNamespaceiothubfortest1s5d4zk7","name":"ehNamespaceiothubfortest1s5d4zk7","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus2","createdTime":"2021-04-14T08:39:58.9273533Z","changedTime":"2021-04-14T08:50:04.0069182Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguq2mdec4p2qmpeq7dstxgbizeznapfh5cyylo2bi2euyvyokiqnggvqhl3eo5qim2/providers/Microsoft.Storage/storageAccounts/clitestogtknxlag5bb2whvf","name":"clitestogtknxlag5bb2whvf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:30.8234899Z","changedTime":"2021-04-14T08:50:00.5789344Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguwz3fl6ckl3ubtynwzsmm5w62w6e7c6dqsscad6nw4mgvehtnl7jsx3utkvoliwgc/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnmbolbfj3qw","name":"clitest-vaultnmbolbfj3qw","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:43.6244934Z","changedTime":"2021-04-16T07:00:46.1883188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rguykrnrlr6rtin7kqpmxcmlo7fgqrxggjmo2r3jrjjeke7zkbwkw3qsx7lkhi76qxo/providers/Microsoft.RecoveryServices/vaults/clitest-vaultears6ywfcgo","name":"clitest-vaultears6ywfcgo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:30.4789365Z","changedTime":"2021-04-09T01:45:58.610054Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjavixfqwz6cxvpkn6u54ajk3fa6jjz4ruxuohjeynusnabiadcmmropup73v5lqw/providers/Microsoft.RecoveryServices/vaults/clitest-vaultubxs2tf7fa7","name":"clitest-vaultubxs2tf7fa7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1329828Z","changedTime":"2021-04-19T02:56:57.9006269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvjo3k2nafi2l6bzlrchsnxwaf27h3bxahipmj2n4uslifbcrogipfny66bcuyel6z/providers/Microsoft.Storage/storageAccounts/clitestlrjctts36gudiaq4a","name":"clitestlrjctts36gudiaq4a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-19T09:17:55.8896552Z","changedTime":"2021-04-19T09:28:22.2414901Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvproscgkhupyyrpzzmwyxdhaqqym7fjyj52ps3anzusy3goveigck7enpd36av6rk/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsuedfxc436s","name":"clitest-vaultsuedfxc436s","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:43.05224Z","changedTime":"2021-04-16T09:13:43.8501023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVPS3SF22MUKYRZD7X6W4AJS5DK7VYINVDNFFR2VZTO7VSEWLDKAF4YTQ3YFLABWRC/providers/Microsoft.Compute/disks/clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","name":"clitest-vmb7duk_OsDisk_1_b5d81b38563b40d08d446e0f41c54597","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","location":"southeastasia","createdTime":"2021-04-16T09:03:58.0366389Z","changedTime":"2021-04-16T09:14:01.0311978Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Compute/virtualMachines/clitest-vmb7duk","name":"clitest-vmb7duk","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-16T09:03:55.8945379Z","changedTime":"2021-04-16T09:14:45.4494013Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkInterfaces/clitest-vmb7dukVMNic","name":"clitest-vmb7dukVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-16T09:03:52.9857642Z","changedTime":"2021-04-16T09:13:54.3182297Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/networkSecurityGroups/clitest-vmb7dukNSG","name":"clitest-vmb7dukNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0002004Z","changedTime":"2021-04-16T09:13:52.2109451Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/publicIPAddresses/clitest-vmb7dukPublicIP","name":"clitest-vmb7dukPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-16T09:03:48.0542928Z","changedTime":"2021-04-16T09:13:51.7128448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.Network/virtualNetworks/clitest-vmb7dukVNET","name":"clitest-vmb7dukVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-16T09:03:48.0912896Z","changedTime":"2021-04-16T09:13:54.3222293Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvps3sf22mukyrzd7x6w4ajs5dk7vyinvdnffr2vzto7vsewldkaf4ytq3yflabwrc/providers/Microsoft.RecoveryServices/vaults/clitest-vault6hmnpzruvsg","name":"clitest-vault6hmnpzruvsg","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T09:03:42.5286583Z","changedTime":"2021-04-16T09:13:44.7220246Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvsrrci2gv23pas67rbcxkq3wi3mlj5wohqb6capbzzu6mnlijgtvkrydqtmes4xth/providers/Microsoft.Network/virtualNetworks/clitestvnet3","name":"clitestvnet3","type":"Microsoft.Network/virtualNetworks","location":"eastus2euap","createdTime":"2021-03-12T00:16:58.7027902Z","changedTime":"2021-03-12T00:27:02.8707485Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGVT3XX3E4UWHBUQ3PMTKF72FL674USGXLHEZWREH6VDF4JBSVNF4PWOHLB7HYYJ6QY/providers/Microsoft.Compute/disks/clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","name":"clitest-vmkukxw_disk1_0b7c67aaa9f14c998fd023173f60062b","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","location":"southeastasia","createdTime":"2021-04-19T02:47:07.5473352Z","changedTime":"2021-04-19T02:57:10.5017448Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Compute/virtualMachines/clitest-vmkukxw","name":"clitest-vmkukxw","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.1104707Z","changedTime":"2021-04-19T02:57:34.4453118Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkInterfaces/clitest-vmkukxwVMNic","name":"clitest-vmkukxwVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.3593831Z","changedTime":"2021-04-19T02:57:03.9145176Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/networkSecurityGroups/clitest-vmkukxwNSG","name":"clitest-vmkukxwNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2141878Z","changedTime":"2021-04-19T02:57:04.5773591Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/publicIPAddresses/clitest-vmkukxwPublicIP","name":"clitest-vmkukxwPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.1999328Z","changedTime":"2021-04-19T02:57:03.1615589Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.Network/virtualNetworks/clitest-vmkukxwVNET","name":"clitest-vmkukxwVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2118732Z","changedTime":"2021-04-19T02:57:03.1688631Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgvt3xx3e4uwhbuq3pmtkf72fl674usgxlhezwreh6vdf4jbsvnf4pwohlb7hyyj6qy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultj24sii3xnu7","name":"clitest-vaultj24sii3xnu7","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.2886417Z","changedTime":"2021-04-19T02:56:56.6193875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwc7ts3azg6bdqihggw5qdd5ehoxtv7aeg2nhceusvpkck6k4rdp7iscgxfbzlj7c2/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdpir4zvghxs","name":"clitest-vaultdpir4zvghxs","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T06:50:44.9876569Z","changedTime":"2021-04-16T07:00:46.7543889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Devices/IotHubs/identitytesthubcc7ux3ciyuzizv6ss","name":"identitytesthubcc7ux3ciyuzizv6ss","type":"Microsoft.Devices/IotHubs","sku":{"name":"S1","tier":"Standard","capacity":1},"location":"westus2","identity":{"principalId":"c052f83a-ed6b-4aa0-88d4-3a9ec96f4ab3","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-14T08:40:10.8889434Z","changedTime":"2021-04-14T08:52:41.0006991Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwd3hzs2m3p7fuwb7oe2u4bqwmoe5gb7hsaeut4fb5hpiic3b2dmqcv2yspe3xhalw/providers/Microsoft.Storage/storageAccounts/clitestfnjbadoveut3mvvpf","name":"clitestfnjbadoveut3mvvpf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T08:39:31.1633865Z","changedTime":"2021-04-14T08:49:59.5648143Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwnl3etfqek5hz57vr6ebe2eeceudxhfe7jmdcil4jjvyaidrfspeg44tyzveerzvh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultgwvvhswxtqh","name":"clitest-vaultgwvvhswxtqh","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.1181264Z","changedTime":"2021-03-26T00:20:39.973403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.BatchAI/workspaces/workspace","name":"workspace","type":"Microsoft.BatchAI/workspaces","location":"eastus","createdTime":"2021-04-13T07:08:45.5447667Z","changedTime":"2021-04-13T07:18:46.0312335Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwufp5tbusewuzx4ai5w3hswshznjqdnj5gfaxtcmvlsnqukjool4eav3sbh7vvbbw/providers/Microsoft.Storage/storageAccounts/clitest6r2rsw7xdj4unms6t","name":"clitest6r2rsw7xdj4unms6t","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-13T07:08:25.0755873Z","changedTime":"2021-04-13T07:18:44.074972Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgwxnlk74w37atln44k5tuuawxniygzhcz4xfr5esu5jwichj44peb5hrsbsfkwhwiv/providers/Microsoft.RecoveryServices/vaults/clitest-vaultcssurwfp3so","name":"clitest-vaultcssurwfp3so","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:10:46.5386328Z","changedTime":"2021-03-26T01:49:02.184962Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgx5q5tlhzhmzjohgbdiertrx6aadgxfysdpwyjzwpxq4sad2kxk7cm3cr2kekspbx5/providers/Microsoft.RecoveryServices/vaults/clitest-vaultfsz5lh4xdzb","name":"clitest-vaultfsz5lh4xdzb","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-16T07:05:32.7243448Z","changedTime":"2021-04-16T07:15:33.754176Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxagbhj6rvluqjj4gowvxygntfp7jr5523gws2echnpzx7nzftezfbael4roce5776/providers/Microsoft.Storage/storageAccounts/clitestddcgzpyoportuvlfg","name":"clitestddcgzpyoportuvlfg","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-14T06:42:32.9431009Z","changedTime":"2021-04-14T06:53:03.0432691Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t","name":"clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t","type":"Microsoft.Sql/servers","kind":"v12.0","location":"eastus","createdTime":"2021-04-19T09:28:36.3681558Z","changedTime":"2021-04-19T09:29:44.4305043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/databases/master","name":"clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Sql/servers/clitestserverervyapiltg55tbsisr3irbblg5jipmxook2o4djlzyjhf276t","location":"eastus","createdTime":"2021-04-19T09:29:57.0385044Z","changedTime":"2021-04-19T09:29:57.2182109Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxjscdgz673aqcu7kk2kh45yz7bsmo5ivqep4pz7jmdg36d35bycbqlzdw2qj6h33c/providers/Microsoft.Storage/storageAccounts/clitestynhwbmogg62gvq4xj","name":"clitestynhwbmogg62gvq4xj","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus","createdTime":"2021-04-19T09:29:43.6023634Z","changedTime":"2021-04-19T09:30:03.5291658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgxw77bdyildovsud4sldndxeoedy4vz34tkxmnt7oicnfeh4oxrq7dkj5ye6zlb3go/providers/Microsoft.RecoveryServices/vaults/clitest-vaultrtycey4eaug","name":"clitest-vaultrtycey4eaug","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:06.7448717Z","changedTime":"2021-03-26T00:18:01.3980696Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2vkoxuqrkflvumtf2cs42vd4huiiv4pk4o4xmhpyce6ug23j46daynwtwkjn2gs5/providers/Microsoft.RecoveryServices/vaults/clitest-vault4rni35bv7np","name":"clitest-vault4rni35bv7np","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-12-18T04:38:08.1158513Z","changedTime":"2020-12-18T04:48:15.5934369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy2w3elzylgawrql4yv45hh2agf3o7ph3rqcuuob6utqgoxsbxzi56k7rhtku6va4z/providers/Microsoft.RecoveryServices/vaults/clitest-vaultt5r2szbiett","name":"clitest-vaultt5r2szbiett","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:46:27.8823858Z","changedTime":"2021-04-09T01:03:57.5817269Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgy3q3ulbaj3z3ml7gwrdw5kup4pnv44dlvjgvgepfmwjb4fwm4ag3246tqogf3froh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultnkj6x3zkvn6","name":"clitest-vaultnkj6x3zkvn6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:39:46.5213323Z","changedTime":"2021-03-26T12:01:12.6399073Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgycv2jxbfj6qifbexp7bdrd6dm2aevbj2p35klmxomh5h5z4243z67psnbkgllqeab/providers/Microsoft.RecoveryServices/vaults/clitest-vaultdvn7euhxrai","name":"clitest-vaultdvn7euhxrai","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T03:04:53.9990328Z","changedTime":"2021-04-19T08:52:53.7982976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyksjublkotsw5kfgvrderyuhnmspevevubicqbxl46c4tkqipkp6cbnd3lsnqjt2k/providers/Microsoft.RecoveryServices/vaults/clitest-vaultudbsjx6tcr2","name":"clitest-vaultudbsjx6tcr2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T06:24:41.4289924Z","changedTime":"2021-03-26T10:40:19.7947151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgyreu2qkpgqyrm56i4cocrrcf5xb2uzmvlm2lau226cqk6zetyu5olii7figpx2mix/providers/Microsoft.RecoveryServices/vaults/clitest-vaulttsindhzqq4y","name":"clitest-vaulttsindhzqq4y","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-10-15T16:54:55.4534288Z","changedTime":"2019-10-15T17:04:59.4581145Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzj3xc6lmggzuorcimokxvkq7lrrxtcty3dilmrxzwdjcq35dqahmc7e7snha4milh/providers/Microsoft.RecoveryServices/vaults/clitest-vaultjlixfyp46tq","name":"clitest-vaultjlixfyp46tq","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"westus","createdTime":"2019-11-11T08:59:45.5509377Z","changedTime":"2019-11-21T18:00:54.9660961Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzlufohvdb4pxmlh3u5pnixw4kzxpdc5fhu6d3gaxhc5pnfhes2kdq2iouxlu23ota/providers/Microsoft.RecoveryServices/vaults/clitest-vaultbn3lzwepxg6","name":"clitest-vaultbn3lzwepxg6","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-25T20:03:08.9526005Z","changedTime":"2021-03-26T01:52:42.2661448Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westeurope","createdTime":"2021-04-19T09:25:43.1368905Z","changedTime":"2021-04-19T09:26:54.3358968Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/databases/db1","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/db1","type":"Microsoft.Sql/servers/databases","sku":{"name":"GP_Gen5","tier":"GeneralPurpose","family":"Gen5","capacity":2},"kind":"v12.0,user,vcore","location":"westeurope","createdTime":"2021-04-19T09:28:00.7777257Z","changedTime":"2021-04-19T09:28:50.8483733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/databases/master","name":"clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzrrbdx4gijejt4v6mndexiozmx67rn2v7l23qeipf6rlt2uj47qqpevdva5zmpflz/providers/Microsoft.Sql/servers/clitestserverjvitil26jefjwcjg7jlulifjv6eroofqo4bzzdg463vrgtnzx","location":"westeurope","createdTime":"2021-04-19T09:27:11.9381343Z","changedTime":"2021-04-19T09:27:12.1580988Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzsai22e4b7q3pbk4hhx4hbhiokeabqtofwd6ld2vh2hhudwoyj735gv43qryfyp2h/providers/Microsoft.RecoveryServices/vaults/clitest-vault34hbzvj7nfz","name":"clitest-vault34hbzvj7nfz","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-03-26T07:15:57.2530749Z","changedTime":"2021-03-26T13:07:28.4923724Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgzthftwfrpdbxax2lf6t46i5z5ysctimeibrre6n3qkv5w3j267kkecso53uhb2qzy/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuni7fiqdddp","name":"clitest-vaultuni7fiqdddp","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-08T19:55:36.329925Z","changedTime":"2021-04-09T01:44:56.0410458Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztlr5u55tyzz2zje2tgl6tahkxxyrunwxdg7vkdludpwn5x3fd3z2ytjyc5lwc4vb/providers/Microsoft.RecoveryServices/vaults/clitest-vaultuhlswznr3i2","name":"clitest-vaultuhlswznr3i2","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2020-10-23T16:31:49.6844573Z","changedTime":"2020-10-23T16:41:58.3486887Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CLITEST.RGZTYT5OGTTZ2MMNFAXYQCCDIPXXLIEJFHINF2FFGLJNLHYWAXXMZZIS5HYGY3Y5YP4/providers/Microsoft.Compute/disks/clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","name":"clitest-vmw76iz_OsDisk_1_2389225d274b4ad0a7431a347f81597a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","location":"southeastasia","createdTime":"2021-04-19T02:47:08.7686258Z","changedTime":"2021-04-19T02:57:08.9533791Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Compute/virtualMachines/clitest-vmw76iz","name":"clitest-vmw76iz","type":"Microsoft.Compute/virtualMachines","location":"southeastasia","createdTime":"2021-04-19T02:47:06.4885903Z","changedTime":"2021-04-19T02:58:24.5889947Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkInterfaces/clitest-vmw76izVMNic","name":"clitest-vmw76izVMNic","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2021-04-19T02:47:03.4458714Z","changedTime":"2021-04-19T02:57:03.6078042Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/networkSecurityGroups/clitest-vmw76izNSG","name":"clitest-vmw76izNSG","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2374084Z","changedTime":"2021-04-19T02:57:03.5011187Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/publicIPAddresses/clitest-vmw76izPublicIP","name":"clitest-vmw76izPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2021-04-19T02:47:00.2606346Z","changedTime":"2021-04-19T02:57:04.4353904Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.Network/virtualNetworks/clitest-vmw76izVNET","name":"clitest-vmw76izVNET","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2021-04-19T02:47:00.2466786Z","changedTime":"2021-04-19T02:57:04.719598Z","provisioningState":"Succeeded","tags":{"MabUsed":"Yes","Owner":"sisi","Purpose":"CLITest","DeleteBy":"12-2099","AutoShutdown":"No"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitest.rgztyt5ogttz2mmnfaxyqccdipxxliejfhinf2ffgljnlhywaxxmzzis5hygy3y5yp4/providers/Microsoft.RecoveryServices/vaults/clitest-vaultsn5dn6zaabo","name":"clitest-vaultsn5dn6zaabo","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"southeastasia","createdTime":"2021-04-19T02:46:56.1845444Z","changedTime":"2021-04-19T02:56:57.8095873Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestaaylinu2ot/providers/Microsoft.ContainerService/managedClusters/cliakstestod2mor","name":"cliakstestod2mor","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"fd65054f-4fd7-41ce-a190-a68fafe9e1b9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:44:15.2465374Z","changedTime":"2021-04-13T08:59:30.913175Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/networkSecurityGroups/stgCliTestNsg","name":"stgCliTestNsg","type":"Microsoft.Network/networkSecurityGroups","location":"westeurope","createdTime":"2021-04-09T01:42:44.0351644Z","changedTime":"2021-04-09T01:52:52.7992859Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/routeTables/stgCliTestRouteTable","name":"stgCliTestRouteTable","type":"Microsoft.Network/routeTables","location":"westeurope","createdTime":"2021-04-09T01:44:01.3343852Z","changedTime":"2021-04-09T01:54:13.136108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestcqbvknmyk7dy3pdwyndd7bhxjeign4xfa4wb2he3lsl6rpjm7ceiim6kjsuk2zmt2di7/providers/Microsoft.Network/virtualNetworks/stgCliTestVname","name":"stgCliTestVname","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-09T01:43:47.8768371Z","changedTime":"2021-04-09T01:54:09.3443269Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestmn4gzfekdw/providers/Microsoft.ContainerService/managedClusters/cliakstests7jj4s","name":"cliakstests7jj4s","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"1a99039d-f7d3-43d3-b08a-e96a5ad2d902","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.834353Z","changedTime":"2021-04-13T09:01:19.0922505Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.DBforMySQL/servers/clisqldbserver","name":"clisqldbserver","type":"Microsoft.DBforMySQL/servers","sku":{"name":"B_Gen5_2","tier":"Basic","family":"Gen5","capacity":2},"location":"eastus","createdTime":"2020-08-17T07:30:10.8667453Z","changedTime":"2020-08-17T07:42:24.8109732Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestresult/providers/Microsoft.Storage/storageAccounts/clitestresultstac","name":"clitestresultstac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-07-15T06:20:51.2344384Z","changedTime":"2020-07-15T06:31:16.6369056Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitests6ojzbpknr/providers/Microsoft.ContainerService/managedClusters/cliakstestnigqau","name":"cliakstestnigqau","type":"Microsoft.ContainerService/managedClusters","location":"southcentralus","identity":{"principalId":"5a7f653a-a754-4a91-a8e6-e7006d0ac261","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:47:56.723679Z","changedTime":"2021-04-13T09:02:14.9165606Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ContainerService/managedClusters/cliakstestjtfenr","name":"cliakstestjtfenr","type":"Microsoft.ContainerService/managedClusters","location":"eastus","identity":{"principalId":"5c6127bd-9433-4cc8-b727-abc859bed899","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"UserAssigned"},"createdTime":"2021-04-13T08:46:09.5603591Z","changedTime":"2021-04-13T08:59:32.2133638Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliqrzlgszjih4rd","name":"cliqrzlgszjih4rd","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:43:41.7791712Z","changedTime":"2021-04-13T08:53:49.7787586Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu2sf5uuu4n/providers/Microsoft.Network/virtualNetworks/clivnetrp5qymtjj","name":"clivnetrp5qymtjj","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-13T08:43:51.3657149Z","changedTime":"2021-04-13T08:54:07.388548Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/clitestu54uy6hm2p/providers/Microsoft.ContainerService/managedClusters/cliakstest4rjci2","name":"cliakstest4rjci2","type":"Microsoft.ContainerService/managedClusters","location":"westus2","identity":{"principalId":"8751d31e-9542-4190-9b0c-5c7d0b98bc35","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-13T08:41:06.3215024Z","changedTime":"2021-04-13T08:58:51.4195329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320004dd89524","name":"cs1100320004dd89524","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-26T05:48:15.5269182Z","changedTime":"2021-03-26T05:58:35.0764529Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320008debd5bc","name":"cs1100320008debd5bc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-17T07:12:43.9245485Z","changedTime":"2021-03-17T07:23:04.512157Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200092fe0771","name":"cs11003200092fe0771","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-23T07:08:50.9205983Z","changedTime":"2021-03-23T07:19:13.2073977Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs110032000c31bae71","name":"cs110032000c31bae71","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-15T06:39:35.2687726Z","changedTime":"2021-04-15T06:50:05.19855Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs11003200127365c47","name":"cs11003200127365c47","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-03-25T03:10:52.3813509Z","changedTime":"2021-03-25T03:21:16.4949485Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/cloud-shell-storage-southeastasia/providers/Microsoft.Storage/storageAccounts/cs1100320012c36c452","name":"cs1100320012c36c452","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2021-04-09T08:04:25.3634558Z","changedTime":"2021-04-09T08:14:46.8892551Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/CollectionRG/providers/Microsoft.Migrate/moveCollections/MyMoveCollection","name":"MyMoveCollection","type":"Microsoft.Migrate/moveCollections","location":"eastus2","identity":{"principalId":"e6774267-70be-4198-ad00-c9e65954c1d5","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-02-25T06:47:44.0125759Z","changedTime":"2021-02-25T06:57:54.5800298Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default-Networking/providers/Microsoft.ClassicNetwork/virtualNetworks/CliGtTestVnet6623","name":"CliGtTestVnet6623","type":"Microsoft.ClassicNetwork/virtualNetworks","location":"westus","createdTime":"2016-01-09T00:05:52.1586425Z","changedTime":"2021-04-09T11:12:53.5367131Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-EUS/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-EUS","type":"Microsoft.OperationalInsights/workspaces","location":"eastus","createdTime":"2021-04-19T07:48:50.6373195Z","changedTime":"2021-04-19T07:58:50.909066Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/DefaultResourceGroup-WUS2/providers/Microsoft.OperationalInsights/workspaces/DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","name":"DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2","type":"Microsoft.OperationalInsights/workspaces","location":"westus2","createdTime":"2021-04-19T02:28:41.9904009Z","changedTime":"2021-04-19T02:38:43.7625917Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"ContainerInsights(defaultworkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-wus2)","promotionCode":"","product":"OMSGallery/ContainerInsights","publisher":"Microsoft"},"createdTime":"2021-04-19T02:28:49.8876091Z","changedTime":"2021-04-19T02:38:51.6570957Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/defaultresourcegroup-wus2/providers/Microsoft.OperationsManagement/solutions/SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","type":"Microsoft.OperationsManagement/solutions","location":"westus2","plan":{"name":"SecurityCenterFree(DefaultWorkspace-0b1f6471-1bf0-4dda-aec3-cb9272f09590-WUS2)","promotionCode":"","product":"OMSGallery/SecurityCenterFree","publisher":"Microsoft"},"createdTime":"2021-04-19T07:39:35.7546785Z","changedTime":"2021-04-19T07:49:37.1903666Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-city-bookstore","name":"Failure Anomalies - emerald-city-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-18T05:06:33.6986117Z","changedTime":"2020-02-18T05:16:52.7859969Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/microsoft.insights/components/emerald-city-bookstore","name":"emerald-city-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-02-18T04:56:24.4741755Z","changedTime":"2020-02-18T05:06:28.4274952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/serverFarms/emerald-city-bookstore-app-service-plan","name":"emerald-city-bookstore-app-service-plan","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2020-02-18T04:52:41.1370668Z","changedTime":"2020-02-18T05:02:42.0698003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/emerald-city-bookstore/providers/Microsoft.Web/sites/emerald-city-bookstore","name":"emerald-city-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2020-02-18T04:52:59.5219747Z","changedTime":"2020-02-18T05:03:00.5662209Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/networkInterfaces/sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","name":"sdfsdfsdf.nic.483f3d12-3ba8-4789-92dd-b7ed9c4d43db","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2019-07-31T07:55:43.8900727Z","changedTime":"2020-12-14T08:49:58.6049879Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/privateLinkServices/sdfsdfsdf","name":"sdfsdfsdf","type":"Microsoft.Network/privateLinkServices","location":"centralus","createdTime":"2019-07-31T07:55:40.9304275Z","changedTime":"2020-12-14T08:50:29.4945972Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fanqiu-test/providers/Microsoft.Network/virtualNetworks/vnettest","name":"vnettest","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2019-07-30T08:37:29.7117585Z","changedTime":"2020-12-14T08:48:17.19604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengapp","name":"Failure Anomalies - fengapp","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-28T13:53:40.1731012Z","changedTime":"2020-08-28T14:03:41.3790125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengws1insights7a4e010ab","name":"Failure Anomalies - fengws1insights7a4e010ab","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-14T14:51:16.2423502Z","changedTime":"2020-02-14T15:02:07.0418755Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsdf7b6c1047","name":"Failure Anomalies - fengwsinsightsdf7b6c1047","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2021-03-23T02:31:59.9356117Z","changedTime":"2021-03-23T02:42:00.8303193Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - fengwsinsightsf6615a96b9","name":"Failure Anomalies - fengwsinsightsf6615a96b9","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-07T04:22:08.7078632Z","changedTime":"2020-02-07T04:32:28.7888353Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/microsoft.insights/actiongroups/Application - Insights Smart Detection","name":"Application Insights Smart Detection","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-02-07T04:21:49.6402353Z","changedTime":"2020-02-07T04:31:59.93976Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/feng-mi","name":"feng-mi","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-03-17T06:52:46.5714456Z","changedTime":"2021-03-17T07:02:53.36947Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid","name":"fengid","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-10-23T05:16:00.8605399Z","changedTime":"2020-10-23T05:26:08.3954359Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid8","name":"fengid8","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T15:54:28.2857852Z","changedTime":"2021-01-27T16:04:39.3201124Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.ManagedIdentity/userAssignedIdentities/fengid9","name":"fengid9","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2021-01-27T16:01:12.3501668Z","changedTime":"2021-01-27T16:11:21.2442848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-4c8dea668d04d6e921b19d49","name":"adb-eastus2euap-4c8dea668d04d6e921b19d49","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:49:05.0003645Z","changedTime":"2020-10-27T09:44:41.9434973Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/networkIntentPolicies/adb-eastus2euap-839f97296c8a350c01ed9d91","name":"adb-eastus2euap-839f97296c8a350c01ed9d91","type":"Microsoft.Network/networkIntentPolicies","location":"eastus2euap","createdTime":"2020-06-16T14:48:54.7253477Z","changedTime":"2020-10-27T09:43:54.5877289Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengnet","name":"fengnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-27T14:13:54.3684425Z","changedTime":"2020-10-27T14:24:13.9146564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Network/virtualNetworks/fengtestvnet","name":"fengtestvnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-10-28T06:55:29.8744765Z","changedTime":"2020-10-28T07:08:52.3951058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/extmigrate","name":"extmigrate","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"centralus","createdTime":"2020-03-16T08:26:06.6409154Z","changedTime":"2020-03-16T08:36:37.5764042Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengsa","name":"fengsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-01-06T04:33:21.5782421Z","changedTime":"2020-01-06T04:43:49.6076971Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/feng-cli-rg/providers/Microsoft.Storage/storageAccounts/fengtestsa","name":"fengtestsa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2020-10-29T03:10:23.6429442Z","changedTime":"2020-10-29T03:20:55.4746943Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d1","name":"d1","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:05:47.283833Z","changedTime":"2021-04-19T06:16:11.8916737Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy/providers/Microsoft.Compute/disks/d2","name":"d2","type":"Microsoft.Compute/disks","location":"eastus2euap","createdTime":"2021-04-19T06:12:05.9492262Z","changedTime":"2021-04-19T06:22:31.3901315Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k1","name":"k1","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:06:23.8921344Z","changedTime":"2021-04-19T02:16:28.7769194Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fy4/providers/Microsoft.Compute/sshPublicKeys/k2","name":"k2","type":"Microsoft.Compute/sshPublicKeys","location":"westus","createdTime":"2021-04-19T02:09:29.3233599Z","changedTime":"2021-04-19T02:19:35.0586728Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - EchoBot20200728133948","name":"Failure Anomalies - EchoBot20200728133948","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-07T01:03:09.5643874Z","changedTime":"2020-08-07T01:13:10.9353756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.BotService/botServices/fybot-handle","name":"fybot-handle","type":"Microsoft.BotService/botServices","sku":{"name":"F0"},"kind":"bot","location":"global","createdTime":"2020-07-28T05:55:06.2471718Z","changedTime":"2020-07-28T06:14:34.1354804Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-cognitive","name":"fybot-cognitive","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"F0"},"kind":"LUIS.Authoring","location":"westus","createdTime":"2020-07-28T07:40:25.7238223Z","changedTime":"2020-07-28T07:50:26.0487908Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.CognitiveServices/accounts/fybot-speech","name":"fybot-speech","type":"Microsoft.CognitiveServices/accounts","sku":{"name":"S0"},"kind":"SpeechServices","location":"westus","createdTime":"2020-07-28T04:37:46.4162179Z","changedTime":"2020-07-28T04:47:50.8258056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/microsoft.insights/components/EchoBot20200728133948","name":"EchoBot20200728133948","type":"microsoft.insights/components","kind":"web","location":"westus","createdTime":"2020-08-07T00:52:48.5841924Z","changedTime":"2020-08-07T01:03:03.0685751Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverFarms/fybot-appserviceplan","name":"fybot-appserviceplan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-07-28T05:01:52.8958537Z","changedTime":"2020-07-28T05:12:01.9899603Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/sites/EchoBot20200728133948","name":"EchoBot20200728133948","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"9232bfb1-9b35-4213-b873-3ec6413971fb","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-07-28T05:40:23.57223Z","changedTime":"2020-07-28T05:55:39.6234536Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fybot/providers/Microsoft.Web/serverfarms/fybot-appserviceplan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule1","name":"rule1","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:21:52.5886867Z","changedTime":"2020-03-13T06:32:02.5442328Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule2","name":"rule2","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:29:03.649111Z","changedTime":"2020-03-13T06:39:15.2823649Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule3","name":"rule3","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:34:16.9950517Z","changedTime":"2020-03-13T06:44:27.4049188Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule4","name":"rule4","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:49:17.6274016Z","changedTime":"2020-03-13T06:59:26.3793939Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule5","name":"rule5","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:51:48.6731847Z","changedTime":"2020-03-13T07:01:58.3315621Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.AlertsManagement/actionRules/rule6","name":"rule6","type":"Microsoft.AlertsManagement/actionRules","location":"global","createdTime":"2020-03-13T06:55:43.2435551Z","changedTime":"2020-03-13T07:05:52.8048369Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/diskEncryptionSets/des1569","name":"des1569","type":"Microsoft.Compute/diskEncryptionSets","location":"centraluseuap","identity":{"principalId":"ad27285a-4305-4ba5-b8e8-54367509b9d2","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-04-09T05:20:46.8825052Z","changedTime":"2020-04-09T05:31:23.2970476Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/disks/disk1","name":"disk1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"centraluseuap","createdTime":"2019-12-04T07:34:08.0129446Z","changedTime":"2019-12-04T07:44:35.5952816Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1","name":"gallery1","type":"Microsoft.Compute/galleries","location":"centraluseuap","createdTime":"2020-04-07T06:50:14.8683782Z","changedTime":"2020-04-07T07:00:51.3912338Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1","name":"gallery1/image1","type":"Microsoft.Compute/galleries/images","location":"centraluseuap","createdTime":"2020-04-07T06:51:26.9363856Z","changedTime":"2020-04-07T07:02:02.0847459Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.0","name":"gallery1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T05:44:55.7207281Z","changedTime":"2020-04-08T06:08:02.5550476Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.1","name":"gallery1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:03:34.3871809Z","changedTime":"2020-04-08T06:15:42.6081612Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.2","name":"gallery1/image1/1.0.2","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:20:41.0741832Z","changedTime":"2020-04-08T06:32:51.915001Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.3","name":"gallery1/image1/1.0.3","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:27:11.4294127Z","changedTime":"2020-04-08T06:45:21.6683215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.4","name":"gallery1/image1/1.0.4","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T06:35:57.6616724Z","changedTime":"2020-04-08T06:48:04.4754066Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.5","name":"gallery1/image1/1.0.5","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-08T07:20:40.3587355Z","changedTime":"2020-04-08T07:38:03.4825045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/galleries/gallery1/images/image1/versions/1.0.6","name":"gallery1/image1/1.0.6","type":"Microsoft.Compute/galleries/images/versions","location":"centraluseuap","createdTime":"2020-04-09T05:23:05.0968515Z","changedTime":"2020-04-09T05:41:13.7429134Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/images/img1","name":"img1","type":"Microsoft.Compute/images","location":"centraluseuap","createdTime":"2020-04-07T06:44:43.2402072Z","changedTime":"2020-04-07T06:55:09.7749413Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"centraluseuap","createdTime":"2020-01-10T07:29:22.2792566Z","changedTime":"2020-01-10T07:41:20.1063309Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.KeyVault/vaults/vault1569","name":"vault1569","type":"Microsoft.KeyVault/vaults","location":"centraluseuap","createdTime":"2020-04-09T05:19:45.9527441Z","changedTime":"2020-04-09T05:29:56.4133501Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"centraluseuap","createdTime":"2020-04-16T03:42:38.4107528Z","changedTime":"2020-10-27T09:40:15.8628054Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001431Z","changedTime":"2020-10-27T09:41:12.9408518Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centraluseuap","createdTime":"2020-04-16T03:42:19.6980976Z","changedTime":"2020-10-27T09:38:33.5962395Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-04-16T03:42:19.7001119Z","changedTime":"2020-10-27T09:38:00.4849907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/fystac","name":"fystac","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-08T03:10:11.3909582Z","changedTime":"2020-04-08T03:20:47.06003Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.Storage/storageAccounts/sharedvmextension","name":"sharedvmextension","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-07-06T03:37:02.6507039Z","changedTime":"2020-07-06T03:47:36.004045Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp1","name":"tmp1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:26:32.1207009Z","changedTime":"2020-03-05T16:37:39.8271343Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp2","name":"tmp2","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:40:26.5973667Z","changedTime":"2020-03-05T16:51:33.4715896Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest/providers/Microsoft.VirtualMachineImages/imageTemplates/tmp3","name":"tmp3","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","createdTime":"2020-03-05T16:42:50.6148179Z","changedTime":"2020-03-05T16:53:59.0863015Z","provisioningState":"Succeeded","tags":{"imagebuilderTemplate":"ubuntu1804"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST2/providers/Microsoft.Compute/disks/vm1_disk1_acf86aae49414fe8b70f669510e33728","name":"vm1_disk1_acf86aae49414fe8b70f669510e33728","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-13T09:30:16.7957284Z","changedTime":"2020-04-13T09:40:17.8675638Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1","name":"g1","type":"Microsoft.Compute/galleries","location":"westus","createdTime":"2020-04-13T09:26:53.6802587Z","changedTime":"2020-04-13T09:37:20.8944229Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1","name":"g1/image1","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-13T10:14:35.7437811Z","changedTime":"2020-04-13T14:21:06.7356716Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.0","name":"g1/image1/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-13T10:19:29.9703185Z","changedTime":"2020-04-13T10:37:30.4396192Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image1/versions/1.0.1","name":"g1/image1/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"westus","createdTime":"2020-04-14T07:46:00.6971986Z","changedTime":"2020-04-14T08:04:11.4576093Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/galleries/g1/images/image2","name":"g1/image2","type":"Microsoft.Compute/galleries/images","location":"westus","createdTime":"2020-04-14T08:21:49.0108107Z","changedTime":"2020-04-14T08:32:16.9448952Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/snapshots/s1","name":"s1","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-04-13T10:02:48.1811874Z","changedTime":"2020-04-13T10:13:05.9433191Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2020-04-13T09:30:15.2154008Z","changedTime":"2021-01-20T08:58:15.761213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.DevTestLab/schedules/shutdown-computevm-vm1","name":"shutdown-computevm-vm1","type":"Microsoft.DevTestLab/schedules","location":"westus","createdTime":"2020-04-30T03:31:54.4174404Z","changedTime":"2020-04-30T03:41:59.456959Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-13T09:30:12.2518347Z","changedTime":"2020-10-27T09:55:33.1433508Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-13T09:29:48.8429151Z","changedTime":"2020-10-27T09:56:11.0460215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-13T09:29:48.841172Z","changedTime":"2020-10-27T09:56:04.5463053Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest2/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-13T09:29:48.8397857Z","changedTime":"2020-10-27T09:51:37.7092714Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/disks/vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","name":"vm1_OsDisk_1_3eb858856d5643d0a15aca7514d2eecd","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/virtualMachines/vm1","location":"westus","createdTime":"2020-04-17T06:43:55.422668Z","changedTime":"2020-04-17T06:53:57.6939736Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYTEST3/providers/Microsoft.Compute/images/image","name":"image","type":"Microsoft.Compute/images","location":"westus","createdTime":"2020-04-17T07:09:23.6388972Z","changedTime":"2020-05-13T06:33:45.9245832Z","provisioningState":"Succeeded","tags":{"key4":"val4","key5":"val5","key6":"val6","key9":"val9","key10":"val10"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Compute/snapshots/image_os_disk_snapshot","name":"image_os_disk_snapshot","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2020-06-15T07:54:04.4999169Z","changedTime":"2020-06-15T16:20:44.5392715Z","provisioningState":"Succeeded","tags":{"created_by":"image-copy-extension"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-04-17T06:43:50.6453839Z","changedTime":"2020-10-27T09:59:17.4445368Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-04-17T06:43:26.0747372Z","changedTime":"2020-10-27T09:59:37.8855869Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-04-17T06:43:26.0712315Z","changedTime":"2020-10-27T09:55:37.1426729Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fytest3/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-04-17T06:43:26.2965471Z","changedTime":"2020-10-27T10:58:03.1849497Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/FYVM/providers/Microsoft.Compute/disks/vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","name":"vm1_OsDisk_1_53a437614cfa458fa68ab0c7b28f5765","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","location":"eastasia","createdTime":"2020-08-07T01:40:44.2835299Z","changedTime":"2020-08-07T01:50:45.2836748Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery","name":"myGallery","type":"Microsoft.Compute/galleries","location":"eastasia","createdTime":"2021-01-26T03:49:25.6008315Z","changedTime":"2021-01-26T03:59:44.8743885Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa","name":"myGallery/aaa","type":"Microsoft.Compute/galleries/images","location":"eastasia","createdTime":"2021-01-26T03:49:43.9862159Z","changedTime":"2021-01-26T04:00:02.3530909Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.0","name":"myGallery/aaa/1.0.0","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-01-26T03:50:01.2475446Z","changedTime":"2021-01-26T05:00:01.9224121Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/galleries/myGallery/images/aaa/versions/1.0.1","name":"myGallery/aaa/1.0.1","type":"Microsoft.Compute/galleries/images/versions","location":"eastasia","createdTime":"2021-02-19T07:27:51.9770015Z","changedTime":"2021-02-19T07:50:07.7456499Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/images/vm1-image-20210126113938","name":"vm1-image-20210126113938","type":"Microsoft.Compute/images","location":"eastasia","createdTime":"2021-01-26T03:44:11.6868069Z","changedTime":"2021-01-26T03:54:21.7490693Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1","name":"vm1","type":"Microsoft.Compute/virtualMachines","location":"eastasia","createdTime":"2020-08-07T01:40:41.4876277Z","changedTime":"2020-08-07T01:51:47.4854945Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Compute/virtualMachines/vm1/extensions/AzureNetworkWatcherExtension","name":"vm1/AzureNetworkWatcherExtension","type":"Microsoft.Compute/virtualMachines/extensions","location":"eastasia","createdTime":"2020-08-07T02:14:21.0199137Z","changedTime":"2020-08-07T02:24:49.995986Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkInterfaces/vm1VMNic","name":"vm1VMNic","type":"Microsoft.Network/networkInterfaces","location":"eastasia","createdTime":"2020-08-07T01:40:40.0724629Z","changedTime":"2020-10-27T14:56:46.9519474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/networkSecurityGroups/vm1NSG","name":"vm1NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2020-08-07T01:40:34.8039303Z","changedTime":"2020-10-28T03:16:39.1157948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/publicIPAddresses/vm1PublicIP","name":"vm1PublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2020-08-07T01:40:34.8023375Z","changedTime":"2020-08-26T05:58:50.0469307Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/fyvm/providers/Microsoft.Network/virtualNetworks/vm1VNET","name":"vm1VNET","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2020-08-07T01:40:34.8052803Z","changedTime":"2020-10-27T09:57:28.4078633Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-3n75y/providers/Microsoft.HDInsight/clusters/hdicli-n7247mo52","name":"hdicli-n7247mo52","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:24:48.9810882Z","changedTime":"2021-04-19T08:25:02.3935153Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.HDInsight/clusters/hdicli-2twawkofk","name":"hdicli-2twawkofk","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-13T09:44:17.5748646Z","changedTime":"2021-04-13T10:54:18.5971912Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-4xdsq/providers/Microsoft.Storage/storageAccounts/hdicliy5u7daegwvwo5fd4xv","name":"hdicliy5u7daegwvwo5fd4xv","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"eastus2","createdTime":"2021-04-13T09:42:57.8064354Z","changedTime":"2021-04-13T09:53:16.1899664Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-hmylg/providers/Microsoft.HDInsight/clusters/hdicli-j67xbgtrt","name":"hdicli-j67xbgtrt","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2020-11-23T07:25:30.5510283Z","changedTime":"2020-11-23T11:36:05.0596093Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-n54fg/providers/Microsoft.HDInsight/clusters/hdicli-ck64kxr3c","name":"hdicli-ck64kxr3c","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:18:39.6020317Z","changedTime":"2021-04-19T09:28:47.0164046Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/hdicli-o67mv/providers/Microsoft.HDInsight/clusters/hdicli-ffzqxm4jf","name":"hdicli-ffzqxm4jf","type":"Microsoft.HDInsight/clusters","location":"eastus2","createdTime":"2021-04-19T08:25:32.9794328Z","changedTime":"2021-04-19T08:25:44.5603462Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/managedHSMs/houk-hsm","name":"houk-hsm","type":"Microsoft.KeyVault/managedHSMs","sku":{"name":"Standard_B1","family":"B"},"location":"eastus","createdTime":"2021-04-15T07:08:09.851805Z","changedTime":"2021-04-19T08:02:41.7377813Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/houk-test/providers/Microsoft.KeyVault/vaults/houk-kv2","name":"houk-kv2","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T05:43:21.3613972Z","changedTime":"2021-04-12T05:53:29.1605924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4mcukdecrb43yzylyrk56bxa3tgvni2ohyqbvx4nscvo4b6pi2cwbk42hlj/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"025c617e-cf87-4350-aee9-726d3db7c4d4","clientId":"7c3db5ff-cbb6-4d62-bb98-431736298370"}}},"createdTime":"2020-09-02T03:09:16.0035293Z","changedTime":"2020-09-02T03:19:42.3536677Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_4wijm4tiuhe7w2knhji6aue4q5bnzvr74kgqt6xqdgdrdffmrmt432vrbub/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"3a32cb7b-aed0-47ea-a32d-8615dacb894c","clientId":"72a98aad-a4dc-4cc0-97d2-c62ff0c6b1e6"}}},"createdTime":"2020-08-17T07:54:22.5178511Z","changedTime":"2020-08-17T08:04:47.2761904Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_5zgehdqqrr3p3ncb42jj72b5wx3ctruzg7dl4hkbgti6ezji666mhk6t7rx/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"29a32b37-c958-424e-aabb-9ad27c486d63","clientId":"2d5b384e-4a64-46d3-ac72-6e6b7eefba56"}}},"createdTime":"2020-06-03T07:11:55.0727658Z","changedTime":"2020-06-03T07:22:21.5792428Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_bih3hjenbaztofqafczkvch2cz77pxwj6ogo5p3mfprovbvxe7fdpr2dsbu/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"24de7e4c-58ba-4337-84cf-531624ba527b","clientId":"0bed8c94-c140-40e2-bbbf-3e89c26a7933"}}},"createdTime":"2020-07-13T12:35:13.2382611Z","changedTime":"2020-07-13T12:45:43.1669144Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_dv5mpshlpskqake2czy4mhgyjiqg3wm7yx4k7jtyzbyet65oxhjpktizhta/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"701d4d1b-69d2-4611-a486-22d22b130d94","clientId":"c7d8d16d-32e7-4bd8-9b97-880b4f9d56b0"}}},"createdTime":"2020-09-04T19:40:13.6045901Z","changedTime":"2020-09-04T19:50:39.0204302Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_glbkgtkhlb6zgdgzhnvvmpodcylvquiopkhvd6gbna3yvg4xoxm5glug7d7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"9c00f972-5c39-432f-a11a-2f85d233e81b","clientId":"f60d1402-85dd-4eca-97a3-fbde0a1a5dfb"}}},"createdTime":"2020-08-28T19:39:31.9005712Z","changedTime":"2020-08-28T19:49:34.57506Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_urdoojxztqvku76yl2gtradzpoaxbz4nk5aywhdsyn57wqyuhm2klzetuox/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"19fc254d-dc12-4561-b3ce-af0fe556da17","clientId":"a235bd5a-d325-4459-bdac-455b8ef1f36e"}}},"createdTime":"2020-08-14T19:59:17.8139693Z","changedTime":"2020-08-14T20:09:50.2389373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.VirtualMachineImages/imageTemplates/template1","name":"template1","type":"Microsoft.VirtualMachineImages/imageTemplates","location":"westus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/img_tmpl_cancel_zbc4axbspixutxs4yvo3mj223e7fe6567hqqlxkn6yzmf523oxvh5lgy4c7/providers/Microsoft.ManagedIdentity/userAssignedIdentities/ide1":{"principalId":"fed69d01-0358-4340-bc81-f15f246cecd7","clientId":"84341ca7-dd44-401a-99b3-0b8ed7311b1e"}}},"createdTime":"2020-08-18T11:39:42.8970754Z","changedTime":"2020-08-18T12:50:05.4899175Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/IT_acctestRG-ibt-24_acctest-IBT-0710-2_4ebedb5a-e3b1-4675-aa4c-3c160fe70907/providers/Microsoft.Storage/storageAccounts/6ynst8ytvcms52eviy9cme3e","name":"6ynst8ytvcms52eviy9cme3e","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus2","createdTime":"2020-07-10T11:43:28.9019805Z","changedTime":"2020-07-10T11:53:50.7934461Z","provisioningState":"Succeeded","tags":{"createdby":"azureimagebuilder","magicvalue":"0d819542a3774a2a8709401a7cd09eb8"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/javacsmrg46947/providers/Microsoft.EventHub/namespaces/ns1305011933","name":"ns1305011933","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2018-02-14T05:28:59.2215702Z","changedTime":"2020-08-10T13:05:28.5885298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jf-test/providers/Microsoft.ServiceBus/namespaces/jf-namespace","name":"jf-namespace","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T09:10:02.2224116Z","changedTime":"2021-04-19T09:21:50.7729229Z","provisioningState":"Succeeded","tags":{"{''tag1":"value1''}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","name":"jiasli-ubuntu_disk1_0912e54b68004f3793648af1525ee633","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus","createdTime":"2020-09-30T08:16:06.1291164Z","changedTime":"2020-09-30T08:26:27.9263071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","name":"jlruby_OsDisk_1_6301bb391086403a9565eade4d92ae9e","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:08:40.0097821Z","changedTime":"2020-09-30T08:18:49.5585507Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/disks/jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","name":"jlwin_disk1_ff04c21eae1b4981963fae4387b0d03a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"westus2","createdTime":"2020-09-30T08:22:18.896435Z","changedTime":"2020-09-30T08:32:30.5620115Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jiasli-ubuntu","name":"jiasli-ubuntu","type":"Microsoft.Compute/virtualMachines","location":"westus","identity":{"principalId":"fd3e7311-1900-46c5-b360-627e449242f9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-12-18T04:01:03.798109Z","changedTime":"2021-01-20T09:15:27.0522635Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Compute/virtualMachines/jlwin","name":"jlwin","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"principalId":"ae4cc216-0356-433e-8c5b-24f030ebff42","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned, - UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/jiasli-cli-dev/providers/microsoft.managedidentity/userassignedidentities/jlid1":{"principalId":"2fdcd421-c744-440d-b253-3daf68c697eb","clientId":"da95e381-d7ab-4fdc-8047-2457909c723b"}}},"createdTime":"2020-11-05T03:15:37.8596697Z","changedTime":"2020-12-30T07:16:59.2081069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MDE.Windows","name":"jlwin/MDE.Windows","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-03-11T08:03:30.8853044Z","changedTime":"2021-03-11T08:14:05.3483236Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JIASLI-CLI-DEV/providers/Microsoft.Compute/virtualMachines/jlwin/extensions/MicrosoftMonitoringAgent","name":"jlwin/MicrosoftMonitoringAgent","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2020-11-06T00:12:13.716686Z","changedTime":"2020-11-06T00:22:59.2422207Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.KeyVault/vaults/cli-sni-kv","name":"cli-sni-kv","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2020-09-30T08:53:46.6463963Z","changedTime":"2020-09-30T09:04:00.0304811Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.ManagedIdentity/userAssignedIdentities/jlid1","name":"jlid1","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"centralus","createdTime":"2020-11-11T05:42:13.4402704Z","changedTime":"2020-11-11T05:52:19.3972485Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jiasli-ubuntu151","name":"jiasli-ubuntu151","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2020-12-18T04:00:58.5469273Z","changedTime":"2020-12-18T04:11:00.9641603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkInterfaces/jlwin846","name":"jlwin846","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2020-11-05T03:15:31.7917157Z","changedTime":"2020-11-05T03:25:30.2216234Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jiasli-ubuntu-nsg","name":"jiasli-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-18T04:00:44.680808Z","changedTime":"2020-12-18T04:12:57.1677865Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/networkSecurityGroups/jlwin-nsg","name":"jlwin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2020-11-05T03:15:00.485Z","changedTime":"2020-11-05T03:25:12.8974297Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jiasli-ubuntu-ip","name":"jiasli-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2020-12-18T04:00:44.7197962Z","changedTime":"2020-12-18T04:12:57.9559063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/publicIPAddresses/jlwin-ip","name":"jlwin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus2","createdTime":"2020-11-05T03:15:00.0174296Z","changedTime":"2020-11-05T03:25:14.9734047Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasli-cli-dev-vnet","name":"jiasli-cli-dev-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2020-11-05T03:14:57.0989764Z","changedTime":"2020-11-05T03:25:12.0024796Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Network/virtualNetworks/jiasliclidevvnet346","name":"jiasliclidevvnet346","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-18T04:00:44.1779483Z","changedTime":"2020-12-18T04:12:56.5055924Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlst","name":"jlst","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-12-31T03:05:23.968264Z","changedTime":"2020-12-31T03:15:50.0330897Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstcs","name":"jlstcs","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"southeastasia","createdTime":"2020-10-13T06:38:59.635764Z","changedTime":"2020-10-13T06:49:30.8713872Z","provisioningState":"Succeeded","tags":{"ms-resource-usage":"azure-cloud-shell"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jiasli-cli-dev/providers/Microsoft.Storage/storageAccounts/jlstwu","name":"jlstwu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-01-12T06:29:22.0717048Z","changedTime":"2021-01-12T06:39:47.8962187Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/JL-VM-SSH/providers/Microsoft.Compute/disks/jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","name":"jl-vm_disk1_7ecd838af3c84a999275b4fab3990779","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","location":"centralus","createdTime":"2021-04-02T07:59:29.3330206Z","changedTime":"2021-04-02T08:09:39.9553578Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm","name":"jl-vm","type":"Microsoft.Compute/virtualMachines","location":"centralus","identity":{"principalId":"4ce06159-b8da-462c-ab20-38cba2411ec6","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-02T07:59:22.4477959Z","changedTime":"2021-04-02T08:09:58.2447337Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Compute/virtualMachines/jl-vm/extensions/AADLoginForLinux","name":"jl-vm/AADLoginForLinux","type":"Microsoft.Compute/virtualMachines/extensions","location":"centralus","createdTime":"2021-04-02T07:59:53.174631Z","changedTime":"2021-04-02T08:10:45.6893166Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkInterfaces/jl-vm370","name":"jl-vm370","type":"Microsoft.Network/networkInterfaces","location":"centralus","createdTime":"2021-04-02T07:59:21.8565104Z","changedTime":"2021-04-02T08:09:24.8715658Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/networkSecurityGroups/jl-vm-nsg","name":"jl-vm-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"centralus","createdTime":"2021-04-02T07:59:14.4846317Z","changedTime":"2021-04-02T08:09:20.8405701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/publicIPAddresses/jl-vm-ip","name":"jl-vm-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"centralus","createdTime":"2021-04-02T07:59:14.4823953Z","changedTime":"2021-04-02T08:09:23.7592571Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/jl-vm-ssh/providers/Microsoft.Network/virtualNetworks/jl-vm-ssh-vnet","name":"jl-vm-ssh-vnet","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2021-04-02T07:59:14.4879552Z","changedTime":"2021-04-02T08:09:26.1221543Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/applicationGateways/ag","name":"ag","type":"Microsoft.Network/applicationGateways","location":"westus","createdTime":"2021-04-19T02:38:57.7104426Z","changedTime":"2021-04-19T06:11:14.4211213Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/loadBalancers/lb","name":"lb","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:18.8875781Z","changedTime":"2021-04-16T08:09:22.5091982Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkInterfaces/nic","name":"nic","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T08:10:29.444119Z","changedTime":"2021-04-16T08:20:36.7763931Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg1","name":"nsg1","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:20.7883611Z","changedTime":"2021-04-16T08:06:33.7011345Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/networkSecurityGroups/nsg2","name":"nsg2","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T07:56:49.6904762Z","changedTime":"2021-04-16T08:07:00.0048146Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/gateway_ip","name":"gateway_ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus","createdTime":"2021-04-19T02:37:56.9899099Z","changedTime":"2021-04-19T02:48:13.0193172Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/publicip","name":"publicip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:58:26.8025849Z","changedTime":"2021-04-16T08:08:41.1065857Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb","name":"PublicIPlb","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:59:04.2373642Z","changedTime":"2021-04-16T08:11:10.5076873Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/publicIPAddresses/PublicIPlb1","name":"PublicIPlb1","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-04-16T07:33:11.3473861Z","changedTime":"2021-04-16T07:43:24.3344777Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/agVnet","name":"agVnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-19T02:38:42.7779781Z","changedTime":"2021-04-19T02:48:54.8112679Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:55:49.5103697Z","changedTime":"2021-04-16T08:06:04.4429731Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu/providers/Microsoft.Storage/storageAccounts/kairu2","name":"kairu2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T02:10:09.4817941Z","changedTime":"2021-04-15T02:20:39.5673576Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-persist/providers/Microsoft.Storage/storageAccounts/kairu","name":"kairu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-01-13T07:35:14.5752239Z","changedTime":"2021-01-13T07:45:50.5772346Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualHubs/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualHubs","location":"centraluseuap","createdTime":"2020-12-14T07:36:39.2324261Z","changedTime":"2020-12-14T07:46:48.1759123Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/kairu-test/providers/Microsoft.Network/virtualNetworks/kairu-test","name":"kairu-test","type":"Microsoft.Network/virtualNetworks","location":"centraluseuap","createdTime":"2020-12-14T06:51:22.9717362Z","changedTime":"2020-12-24T05:55:54.5230206Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ljin-test/providers/Microsoft.KeyVault/vaults/kv-ljin-sni","name":"kv-ljin-sni","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2021-04-12T08:52:32.7161565Z","changedTime":"2021-04-12T09:02:39.8202008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-10307300-vmss","name":"aks-nodepool1-10307300-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool":{"principalId":"bc0653aa-4310-4815-b6b6-e32ce13113d7","clientId":"d8fc3aad-b983-4520-98b9-74576d95ded9"}}},"createdTime":"2021-04-13T08:42:54.8051439Z","changedTime":"2021-04-13T08:59:28.6762724Z","provisioningState":"Succeeded","tags":{"aksAPIServerIPAddress":"10.240.0.4","creationSource":"vmssclient-aks-nodepool1-10307300-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"10307300"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestxh34h5-agentpool","name":"cliakstestxh34h5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:40:09.2003944Z","changedTime":"2021-04-13T08:50:11.3842326Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:08.3697318Z","changedTime":"2021-04-13T08:50:09.0948785Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkInterfaces/kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","name":"kube-apiserver.nic.80d18a94-9d4d-41d5-9267-571c57348752","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:41:34.9744804Z","changedTime":"2021-04-13T08:53:36.6567974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-10307300-nsg","name":"aks-agentpool-10307300-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:15.4863593Z","changedTime":"2021-04-13T08:51:17.1453905Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-04-13T08:41:45.9644983Z","changedTime":"2021-04-13T08:52:18.6184413Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateDnsZones/282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/virtualNetworkLinks/cliaksdnszvfz7me-5bea9794","name":"282ef3d2-ef24-48f5-b08b-85dd44e2f9a8.privatelink.westus2.azmk8s.io/cliaksdnszvfz7me-5bea9794","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-04-13T08:42:19.8373902Z","changedTime":"2021-04-13T08:52:52.3745884Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/privateEndpoints/kube-apiserver","name":"kube-apiserver","type":"Microsoft.Network/privateEndpoints","location":"westus2","createdTime":"2021-04-13T08:41:34.0880644Z","changedTime":"2021-04-13T08:51:45.6632528Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/publicIPAddresses/37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","name":"37f9a6e3-be7d-44a4-a9aa-bc07a9aa2e47","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:40:06.7761485Z","changedTime":"2021-04-13T08:50:10.4206744Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-10307300-routetable","name":"aks-agentpool-10307300-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:19.1672572Z","changedTime":"2021-04-13T08:59:51.5574417Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest26dv6eu6lv_cliakstestxh34h5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-10307300","name":"aks-vnet-10307300","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:41:30.0217479Z","changedTime":"2021-04-13T08:51:36.4354974Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-25268602-vmss","name":"aks-nodepool1-25268602-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool":{"principalId":"a7fa3b2a-a999-46a5-8a9c-c0d0a39ddc26","clientId":"bd7ece5e-69c5-4f71-9ca4-d62271460081"}}},"createdTime":"2021-04-13T08:48:09.1845683Z","changedTime":"2021-04-13T09:00:29.6645856Z","provisioningState":"Succeeded","tags":{"createOperationID":"86a4552f-8a65-4217-8de5-65b06a144fad","creationSource":"vmssclient-aks-nodepool1-25268602-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"25268602"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestd7wsg5-agentpool","name":"cliakstestd7wsg5-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:47:30.1427787Z","changedTime":"2021-04-13T08:57:31.1191678Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:29.3184811Z","changedTime":"2021-04-13T08:57:30.8009823Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-25268602-nsg","name":"aks-agentpool-25268602-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:47:50.2824327Z","changedTime":"2021-04-13T08:57:50.9615725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/publicIPAddresses/c67009c2-a1fc-4b70-9141-b2e7fbe364dc","name":"c67009c2-a1fc-4b70-9141-b2e7fbe364dc","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:47:27.8149516Z","changedTime":"2021-04-13T08:57:30.6061143Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-25268602-routetable","name":"aks-agentpool-25268602-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:47:53.9472226Z","changedTime":"2021-04-13T09:00:13.2628904Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitest5hd5ygbfne_cliakstestd7wsg5_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-25268602","name":"aks-vnet-25268602","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:04.6240003Z","changedTime":"2021-04-13T08:58:08.5032084Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/availabilitySets/nodepool1-availabilitySet-41827532","name":"nodepool1-availabilitySet-41827532","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Aligned"},"location":"westus2","createdTime":"2021-04-13T08:45:12.6473153Z","changedTime":"2021-04-13T08:55:13.1181933Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_CLITESTAAYLINU2OT_CLIAKSTESTOD2MOR_WESTUS2/providers/Microsoft.Compute/disks/aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","name":"aks-nodepool1-41827532-0_OsDisk_1_6d15d69d080e46daad8b47e7bede172a","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","location":"westus2","createdTime":"2021-04-13T08:45:20.4032146Z","changedTime":"2021-04-13T08:55:20.6319373Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0","name":"aks-nodepool1-41827532-0","type":"Microsoft.Compute/virtualMachines","location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool":{"principalId":"8c082ab4-e02b-454e-b93b-22f93186b17c","clientId":"7a265029-9abf-4356-8b38-78dbe696cf57"}}},"createdTime":"2021-04-13T08:45:18.681573Z","changedTime":"2021-04-13T08:59:21.1697348Z","provisioningState":"Succeeded","tags":{"creationSource":"vmclient-aks-nodepool1-41827532-0","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"41827532"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/computeAksLinuxBilling","name":"aks-nodepool1-41827532-0/computeAksLinuxBilling","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:48:04.9062548Z","changedTime":"2021-04-13T08:58:26.9555761Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Compute/virtualMachines/aks-nodepool1-41827532-0/extensions/cse-agent-0","name":"aks-nodepool1-41827532-0/cse-agent-0","type":"Microsoft.Compute/virtualMachines/extensions","location":"westus2","createdTime":"2021-04-13T08:47:04.3887754Z","changedTime":"2021-04-13T08:57:53.709758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestod2mor-agentpool","name":"cliakstestod2mor-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:44:31.7912278Z","changedTime":"2021-04-13T08:54:32.6681201Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkInterfaces/aks-nodepool1-41827532-nic-0","name":"aks-nodepool1-41827532-nic-0","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2021-04-13T08:45:17.9178463Z","changedTime":"2021-04-13T08:55:18.7106755Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-41827532-nsg","name":"aks-agentpool-41827532-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:44:52.9129352Z","changedTime":"2021-04-13T08:54:55.1273291Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-41827532-routetable","name":"aks-agentpool-41827532-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:44:56.5723089Z","changedTime":"2021-04-13T08:58:15.2336613Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestaaylinu2ot_cliakstestod2mor_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-41827532","name":"aks-vnet-41827532","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:45:07.2727882Z","changedTime":"2021-04-13T08:55:10.0052736Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-37244533-vmss","name":"aks-nodepool1-37244533-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool":{"principalId":"0a6b7869-1b6d-4e66-9499-4bc5f4d216d7","clientId":"c4721872-6504-4029-801c-7f62782f07fc"}}},"createdTime":"2021-04-13T08:48:54.6180592Z","changedTime":"2021-04-13T09:01:14.1754398Z","provisioningState":"Succeeded","tags":{"createOperationID":"fb9cc261-15fa-417b-b9f8-293a3f146d1b","creationSource":"vmssclient-aks-nodepool1-37244533-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"37244533"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstests7jj4s-agentpool","name":"cliakstests7jj4s-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:48:14.0096612Z","changedTime":"2021-04-13T08:58:14.4364953Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:13.2570293Z","changedTime":"2021-04-13T08:58:13.5047496Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-37244533-nsg","name":"aks-agentpool-37244533-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:48:35.8913473Z","changedTime":"2021-04-13T08:58:38.029978Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/publicIPAddresses/63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","name":"63f5dcbf-c29d-4f1b-a3ee-44317b5d0923","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:48:09.6868131Z","changedTime":"2021-04-13T08:58:14.4426872Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-37244533-routetable","name":"aks-agentpool-37244533-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:48:39.5101311Z","changedTime":"2021-04-13T09:01:16.9408875Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestmn4gzfekdw_cliakstests7jj4s_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-37244533","name":"aks-vnet-37244533","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:48:50.1264934Z","changedTime":"2021-04-13T08:58:53.2985947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36498806-vmss","name":"aks-nodepool1-36498806-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"southcentralus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool":{"principalId":"d2dea38e-1f21-4f9c-9b0f-135df5dc4f68","clientId":"3a226aa6-08d9-4375-a06b-8f32f5ac7ef5"}}},"createdTime":"2021-04-13T08:49:47.1273826Z","changedTime":"2021-04-13T09:02:16.3368732Z","provisioningState":"Succeeded","tags":{"createOperationID":"a510edf0-3ee5-448e-a4ce-3dded5d11d5d","creationSource":"vmssclient-aks-nodepool1-36498806-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36498806"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestnigqau-agentpool","name":"cliakstestnigqau-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"southcentralus","createdTime":"2021-04-13T08:48:16.9701498Z","changedTime":"2021-04-13T08:58:17.1745017Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:16.0472217Z","changedTime":"2021-04-13T08:58:17.0513554Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36498806-nsg","name":"aks-agentpool-36498806-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southcentralus","createdTime":"2021-04-13T08:49:27.2082332Z","changedTime":"2021-04-13T08:59:28.4480533Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/publicIPAddresses/03e657e2-65a0-4cc5-9b2e-518341b7a3a3","name":"03e657e2-65a0-4cc5-9b2e-518341b7a3a3","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"southcentralus","createdTime":"2021-04-13T08:48:14.3979282Z","changedTime":"2021-04-13T08:58:17.1675813Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/routeTables/aks-agentpool-36498806-routetable","name":"aks-agentpool-36498806-routetable","type":"Microsoft.Network/routeTables","location":"southcentralus","createdTime":"2021-04-13T08:49:30.9338289Z","changedTime":"2021-04-13T09:02:15.5413143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitests6ojzbpknr_cliakstestnigqau_southcentralus/providers/Microsoft.Network/virtualNetworks/aks-vnet-36498806","name":"aks-vnet-36498806","type":"Microsoft.Network/virtualNetworks","location":"southcentralus","createdTime":"2021-04-13T08:49:41.7213751Z","changedTime":"2021-04-13T08:59:45.7145404Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-36885111-vmss","name":"aks-nodepool1-36885111-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":1},"location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool":{"principalId":"e61d4772-fea2-4ffb-a9b1-50577d53abbd","clientId":"4700f809-abf4-410c-aab9-0b9ea6f8effb"}}},"createdTime":"2021-04-13T08:47:02.8732316Z","changedTime":"2021-04-13T08:59:28.2001262Z","provisioningState":"Succeeded","tags":{"createOperationID":"4af5e3a8-0eb6-4eb7-a703-b5d9fcc23300","creationSource":"vmssclient-aks-nodepool1-36885111-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"36885111"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstestjtfenr-agentpool","name":"cliakstestjtfenr-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-13T08:46:24.2374679Z","changedTime":"2021-04-13T08:56:24.6044048Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:23.3942533Z","changedTime":"2021-04-13T08:56:23.569693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-36885111-nsg","name":"aks-agentpool-36885111-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-13T08:46:43.757244Z","changedTime":"2021-04-13T08:56:45.2580062Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/publicIPAddresses/af3e0e66-7bf1-412e-8275-e9a368b8114a","name":"af3e0e66-7bf1-412e-8275-e9a368b8114a","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"eastus","createdTime":"2021-04-13T08:46:21.8066314Z","changedTime":"2021-04-13T08:56:23.7922593Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu2sf5uuu4n_cliakstestjtfenr_eastus/providers/Microsoft.Network/routeTables/aks-agentpool-36885111-routetable","name":"aks-agentpool-36885111-routetable","type":"Microsoft.Network/routeTables","location":"eastus","createdTime":"2021-04-13T08:46:47.4744963Z","changedTime":"2021-04-13T08:59:37.4134049Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Compute/virtualMachineScaleSets/aks-nodepool1-12369646-vmss","name":"aks-nodepool1-12369646-vmss","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_DS2_v2","tier":"Standard","capacity":3},"location":"westus2","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool":{"principalId":"f3b5c4b8-eb5a-4194-9d3c-b52d2ba840ec","clientId":"3d092bfd-d0e2-461b-b066-927f47dbcdb2"}}},"createdTime":"2021-04-13T08:42:13.4118925Z","changedTime":"2021-04-13T08:58:43.1838672Z","provisioningState":"Succeeded","tags":{"creationSource":"vmssclient-aks-nodepool1-12369646-vmss","orchestrator":"Kubernetes:1.18.14","poolName":"nodepool1","resourceNameSuffix":"12369646"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/cliakstest4rjci2-agentpool","name":"cliakstest4rjci2-agentpool","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus2","createdTime":"2021-04-13T08:41:24.147462Z","changedTime":"2021-04-13T08:51:24.9652658Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/loadBalancers/kubernetes","name":"kubernetes","type":"Microsoft.Network/loadBalancers","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:23.188468Z","changedTime":"2021-04-13T08:51:23.917336Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/networkSecurityGroups/aks-agentpool-12369646-nsg","name":"aks-agentpool-12369646-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus2","createdTime":"2021-04-13T08:41:54.5529345Z","changedTime":"2021-04-13T08:51:57.1824117Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/publicIPAddresses/4d52bbe8-cc90-404b-824b-b23d599f4ccf","name":"4d52bbe8-cc90-404b-824b-b23d599f4ccf","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Standard"},"location":"westus2","createdTime":"2021-04-13T08:41:21.6247795Z","changedTime":"2021-04-13T08:51:27.3560822Z","provisioningState":"Succeeded","tags":{"owner":"kubernetes","type":"aks-slb-managed-outbound-ip"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mc_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/routeTables/aks-agentpool-12369646-routetable","name":"aks-agentpool-12369646-routetable","type":"Microsoft.Network/routeTables","location":"westus2","createdTime":"2021-04-13T08:41:58.295935Z","changedTime":"2021-04-13T08:59:02.485423Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MC_clitestu54uy6hm2p_cliakstest4rjci2_westus2/providers/Microsoft.Network/virtualNetworks/aks-vnet-12369646","name":"aks-vnet-12369646","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2021-04-13T08:42:09.0561701Z","changedTime":"2021-04-13T08:52:12.6383827Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/MYRESOURCEGROUP/providers/Microsoft.Compute/disks/vm_disk1_e6bb8572c81949938565e11a02e143df","name":"vm_disk1_e6bb8572c81949938565e11a02e143df","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","location":"eastus","createdTime":"2021-04-19T03:20:27.5290086Z","changedTime":"2021-04-19T03:30:27.9380762Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Compute/virtualMachines/vm","name":"vm","type":"Microsoft.Compute/virtualMachines","location":"eastus","identity":{"type":"UserAssigned","userAssignedIdentities":{"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2":{"principalId":"ca3b63bb-2720-4a80-8b27-5c2a910ab337","clientId":"6a54d9f7-eb32-48e1-890b-ced8039a28aa"}}},"createdTime":"2021-04-19T03:20:25.7463989Z","changedTime":"2021-04-19T04:02:00.0943857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.ManagedIdentity/userAssignedIdentities/emsi2","name":"emsi2","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2021-04-19T03:49:31.8128826Z","changedTime":"2021-04-19T03:59:40.8952572Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkInterfaces/vmVMNic","name":"vmVMNic","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-19T03:20:21.7332166Z","changedTime":"2021-04-19T06:40:07.6125254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/networkSecurityGroups/vmNSG","name":"vmNSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-19T03:20:07.6484362Z","changedTime":"2021-04-19T03:30:20.6910889Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/publicIPAddresses/vmPublicIP","name":"vmPublicIP","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-19T03:20:07.6699177Z","changedTime":"2021-04-19T03:30:22.259849Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myresourcegroup/providers/Microsoft.Network/virtualNetworks/vmVNET","name":"vmVNET","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-19T03:20:07.8743759Z","changedTime":"2021-04-19T03:30:21.3860899Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/myResourceGroup/providers/Microsoft.RecoveryServices/vaults/myVault","name":"myVault","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"Standard"},"location":"eastus","identity":{"principalId":"28c68980-b35c-44b1-b007-47602eae336d","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-05-28T04:58:14.2173366Z","changedTime":"2020-06-09T09:05:42.2556087Z","provisioningState":"Succeeded","tags":{"patch_key":"PatchKeyUpdated"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centralus","name":"NetworkWatcher_centralus","type":"Microsoft.Network/networkWatchers","location":"centralus","createdTime":"2021-04-14T03:01:14.3377702Z","changedTime":"2021-04-14T03:11:15.8589698Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_centraluseuap","name":"NetworkWatcher_centraluseuap","type":"Microsoft.Network/networkWatchers","location":"centraluseuap","createdTime":"2021-04-13T05:47:43.9748794Z","changedTime":"2021-04-13T05:57:45.4381356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastasia","name":"NetworkWatcher_eastasia","type":"Microsoft.Network/networkWatchers","location":"eastasia","createdTime":"2021-04-19T08:09:27.8904392Z","changedTime":"2021-04-19T08:19:35.3631932Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus","name":"NetworkWatcher_eastus","type":"Microsoft.Network/networkWatchers","location":"eastus","createdTime":"2021-04-09T08:03:21.5840392Z","changedTime":"2021-04-19T07:31:00.224823Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2","name":"NetworkWatcher_eastus2","type":"Microsoft.Network/networkWatchers","location":"eastus2","createdTime":"2021-04-13T03:21:56.9883552Z","changedTime":"2021-04-13T03:31:57.5093922Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus2euap","name":"NetworkWatcher_eastus2euap","type":"Microsoft.Network/networkWatchers","location":"eastus2euap","createdTime":"2021-04-09T06:40:22.1520058Z","changedTime":"2021-04-09T10:49:22.0194577Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/connectionMonitors/CMv2-01","name":"NetworkWatcher_eastus/CMv2-01","type":"Microsoft.Network/networkWatchers/connectionMonitors","location":"eastus","createdTime":"2021-04-19T07:48:48.6964748Z","changedTime":"2021-04-19T08:37:59.9573763Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/flowLogs/flow_log_test","name":"NetworkWatcher_eastus/flow_log_test","type":"Microsoft.Network/networkWatchers/flowLogs","location":"eastus","createdTime":"2021-04-19T07:48:02.1062916Z","changedTime":"2021-04-19T07:48:04.1861892Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_japanwest","name":"NetworkWatcher_japanwest","type":"Microsoft.Network/networkWatchers","location":"japanwest","createdTime":"2021-04-14T02:49:41.8410985Z","changedTime":"2021-04-16T02:20:38.3645045Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southcentralus","name":"NetworkWatcher_southcentralus","type":"Microsoft.Network/networkWatchers","location":"southcentralus","createdTime":"2021-04-12T09:10:41.7256543Z","changedTime":"2021-04-12T09:20:42.946603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_southeastasia","name":"NetworkWatcher_southeastasia","type":"Microsoft.Network/networkWatchers","location":"southeastasia","createdTime":"2021-04-16T02:27:36.2877094Z","changedTime":"2021-04-16T02:37:42.0407744Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westcentralus","name":"NetworkWatcher_westcentralus","type":"Microsoft.Network/networkWatchers","location":"westcentralus","createdTime":"2021-04-13T05:14:09.3522898Z","changedTime":"2021-04-13T05:24:12.3759044Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westeurope","name":"NetworkWatcher_westeurope","type":"Microsoft.Network/networkWatchers","location":"westeurope","createdTime":"2021-04-13T05:48:07.7906378Z","changedTime":"2021-04-13T05:58:11.6208065Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus","name":"NetworkWatcher_westus","type":"Microsoft.Network/networkWatchers","location":"westus","createdTime":"2021-04-09T07:19:18.3113924Z","changedTime":"2021-04-19T07:31:00.2819037Z","provisioningState":"Succeeded","tags":{"foo":"doo"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/NetworkWatcherRG/providers/Microsoft.Network/networkWatchers/NetworkWatcher_westus2","name":"NetworkWatcher_westus2","type":"Microsoft.Network/networkWatchers","location":"westus2","createdTime":"2021-04-19T07:24:07.3758082Z","changedTime":"2021-04-19T07:34:09.7140807Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - emerald-bookstore","name":"Failure Anomalies - emerald-bookstore","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-12-07T06:40:23.3145682Z","changedTime":"2020-12-07T06:50:25.1054176Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/microsoft.insights/components/emerald-bookstore","name":"emerald-bookstore","type":"microsoft.insights/components","kind":"web","location":"westus2","createdTime":"2020-12-07T06:29:32.8632322Z","changedTime":"2020-12-07T06:40:12.0658458Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/serverFarms/bookstore-westus2","name":"bookstore-westus2","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"westus2","createdTime":"2019-02-23T01:50:36.0192691Z","changedTime":"2019-06-26T22:07:44.4611141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/new-experiences/providers/Microsoft.Web/sites/emerald-bookstore","name":"emerald-bookstore","type":"Microsoft.Web/sites","kind":"app,linux","location":"westus2","createdTime":"2019-02-23T01:50:58.8434283Z","changedTime":"2019-06-26T22:15:20.4330342Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Storage/storageAccounts/portal2clistorage","name":"portal2clistorage","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-12-17T03:19:26.4068384Z","changedTime":"2020-12-17T03:29:46.2039685Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-ac52","name":"ASP-bimrg-ac52","type":"Microsoft.Web/serverFarms","sku":{"name":"D1","tier":"Shared","size":"D1","family":"D","capacity":0},"kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.2529685Z","changedTime":"2020-12-17T03:29:29.5143863Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/serverFarms/ASP-bimrg-bf2d","name":"ASP-bimrg-bf2d","type":"Microsoft.Web/serverFarms","sku":{"name":"Y1","tier":"Dynamic","size":"Y1","family":"Y","capacity":0},"kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.1892934Z","changedTime":"2020-12-17T03:29:29.6690943Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/portal2cli","name":"portal2cli","type":"Microsoft.Web/sites","kind":"functionapp","location":"eastus2euap","createdTime":"2020-12-17T03:19:09.232103Z","changedTime":"2020-12-17T03:29:29.4914058Z","provisioningState":"Succeeded"}],"nextLink":"https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2cchangedTime%2cprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTI4IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWQlBVbFJCVERKRFRFa3RUVWxEVWs5VFQwWlVPakpGVjBWQ09qSkdVMGxVUlZNNk1rWlhSVUpRTWtNdFEwVk9WRkpCVEZWVFJWVkJVQS0tIn0%3d"}' - headers: - cache-control: - - no-cache - content-length: - - '487278' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - resource list - Connection: - - keep-alive - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/resources?%24filter&%24expand=createdTime%2CchangedTime%2CprovisioningState&api-version=2018-05-01&%24skiptoken=eyJuZXh0UGFydGl0aW9uS2V5IjoiMSE4IU9FTTVOa1UtIiwibmV4dFJvd0tleSI6IjEhMTI4IU1FSXhSalkwTnpFeFFrWXdORVJFUVVGRlF6TkRRamt5TnpKR01EazFPVEJmUjFKTUxWQlBVbFJCVERKRFRFa3RUVWxEVWs5VFQwWlVPakpGVjBWQ09qSkdVMGxVUlZNNk1rWlhSVUpRTWtNdFEwVk9WRkpCVEZWVFJWVkJVQS0tIn0%3D - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/portal2cli/providers/Microsoft.Web/sites/webp2c","name":"webp2c","type":"Microsoft.Web/sites","kind":"app","location":"centraluseuap","createdTime":"2020-12-17T03:19:09.29027Z","changedTime":"2020-12-17T03:29:32.658008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","name":"qianwen-centos8_OsDisk_1_0ede5615bff140019d62a85ede7363e1","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-centos8","location":"southeastasia","createdTime":"2020-07-12T07:37:00.8188007Z","changedTime":"2020-07-12T07:47:12.9074631Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","name":"qianwen-nfs_disk1_931fd659076b4937a90b0b4a7e24d2af","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-nfs","location":"eastus","createdTime":"2020-03-09T12:03:30.3159443Z","changedTime":"2020-03-09T12:14:00.7970319Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","name":"qianwen-rdp2_OsDisk_1_37fd333d4e3a49afb5a71805eff41261","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp2","location":"southeastasia","createdTime":"2020-06-23T04:53:10.4124902Z","changedTime":"2020-06-23T05:03:18.284846Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","name":"qianwen-rdp3_OsDisk_1_d2816c2ef6934781a7c4763452b5a9b5","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp3","location":"southeastasia","createdTime":"2020-07-14T08:12:52.5352155Z","changedTime":"2020-07-14T08:22:59.2466759Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","name":"qianwen-rdp_disk1_cea8c1ca4cc5487d8fa6a7c01fc13cc0","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-rdp","location":"eastus","createdTime":"2020-06-23T03:34:01.129965Z","changedTime":"2020-06-23T03:44:01.2992574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","name":"qianwen-trusty_OsDisk_1_0f2be59c59d14666a7009182cbd7bc07","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-trusty","location":"eastus","createdTime":"2020-07-06T02:49:30.6501025Z","changedTime":"2020-07-06T02:59:31.0762515Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","name":"qianwen-ubuntu_disk1_f50737a0e81d4a22992792d97d2d5c9f","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-ubuntu","location":"southeastasia","createdTime":"2020-02-04T07:18:30.6883093Z","changedTime":"2020-02-04T07:28:37.5055765Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","name":"qianwen-windows_disk1_8602715b0ed041d6af08cfcf04276bc7","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwen-windows","location":"eastus","createdTime":"2020-06-17T07:57:57.0347397Z","changedTime":"2020-06-17T08:07:57.1173735Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/QIANWENS/providers/Microsoft.Compute/disks/qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","name":"qianwencentos_OsDisk_1_17cd5c03395842fd8b654dfcc2c4c83d","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Compute/virtualMachines/qianwencentos","location":"southeastasia","createdTime":"2020-07-08T07:51:31.8375591Z","changedTime":"2020-07-08T08:01:37.7175645Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ContainerRegistry/registries/qianwen","name":"qianwen","type":"Microsoft.ContainerRegistry/registries","sku":{"name":"Standard","tier":"Standard"},"location":"eastus","createdTime":"2020-08-10T05:37:05.4068418Z","changedTime":"2020-08-10T05:47:11.1814008Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.ManagedIdentity/userAssignedIdentities/qianwenidentity","name":"qianwenidentity","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"eastus","createdTime":"2020-04-22T08:19:22.1170687Z","changedTime":"2020-04-22T08:29:33.9584958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-0","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:04.9870325Z","changedTime":"2020-10-27T09:43:05.7238474Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-1","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.0054963Z","changedTime":"2020-10-27T09:43:41.4989541Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","name":"prod-9bef63c3-4937-49ef-bfd6-55609d35142e-cluster-nic-2","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T02:25:05.1910577Z","changedTime":"2020-10-27T09:47:08.4953958Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-centos8455","name":"qianwen-centos8455","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-12T07:36:08.7870472Z","changedTime":"2020-10-27T09:43:02.1284411Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-nfs346","name":"qianwen-nfs346","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-03-09T12:03:25.6455271Z","changedTime":"2020-10-27T09:43:01.0205592Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp2308","name":"qianwen-rdp2308","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-06-23T04:53:01.3273058Z","changedTime":"2020-10-27T09:45:17.5689655Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp3736","name":"qianwen-rdp3736","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-14T08:12:44.3759771Z","changedTime":"2020-10-27T09:44:28.7067294Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-rdp742","name":"qianwen-rdp742","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-23T03:33:52.8611726Z","changedTime":"2020-10-27T09:44:30.5369772Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-trusty198","name":"qianwen-trusty198","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-07-06T02:49:24.6711455Z","changedTime":"2020-10-27T09:46:19.5634938Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-ubuntu473","name":"qianwen-ubuntu473","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-02-04T07:17:15.2905622Z","changedTime":"2020-10-27T09:47:13.5628063Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwen-windows228","name":"qianwen-windows228","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2020-06-17T07:57:50.1045091Z","changedTime":"2020-10-27T10:42:58.6376157Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkInterfaces/qianwencentos539","name":"qianwencentos539","type":"Microsoft.Network/networkInterfaces","location":"southeastasia","createdTime":"2020-07-08T07:51:22.3879679Z","changedTime":"2020-10-27T09:46:54.3026947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-centos8-nsg","name":"qianwen-centos8-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-12T07:35:53.2815352Z","changedTime":"2020-10-27T09:43:22.4280764Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-nfs-nsg","name":"qianwen-nfs-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-03-09T12:02:19.4777159Z","changedTime":"2020-10-27T10:43:30.1946151Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp2-nsg","name":"qianwen-rdp2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-06-23T04:52:46.3929312Z","changedTime":"2020-10-27T09:41:14.3098611Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp3-nsg","name":"qianwen-rdp3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-14T08:12:28.7418149Z","changedTime":"2020-10-27T09:41:46.3064183Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-rdp-nsg","name":"qianwen-rdp-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-23T03:33:41.6810236Z","changedTime":"2020-10-27T09:41:17.9956434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-trusty-nsg","name":"qianwen-trusty-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-07-06T02:49:12.7526632Z","changedTime":"2020-10-27T09:42:51.6477838Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-ubuntu-nsg","name":"qianwen-ubuntu-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-02-04T07:16:58.4157179Z","changedTime":"2020-10-27T09:41:22.3068206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwen-windows-nsg","name":"qianwen-windows-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2020-06-17T07:57:41.3059926Z","changedTime":"2020-10-27T09:44:18.6789682Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/networkSecurityGroups/qianwencentos-nsg","name":"qianwencentos-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"southeastasia","createdTime":"2020-07-08T07:51:08.6290016Z","changedTime":"2020-10-27T09:42:31.958069Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2020-04-20T06:20:21.7741718Z","changedTime":"2020-10-27T05:28:53.6882116Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/t4aicc6wkatai","name":"privatelink.blob.core.windows.net/t4aicc6wkatai","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2020-04-20T06:21:27.8297477Z","changedTime":"2020-10-27T05:48:51.5652947Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-centos8-ip","name":"qianwen-centos8-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-12T07:35:53.2846096Z","changedTime":"2020-10-27T09:42:36.9213888Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-nfs-ip","name":"qianwen-nfs-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-03-09T12:02:19.3911868Z","changedTime":"2020-10-27T09:46:54.0130701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp2-ip","name":"qianwen-rdp2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-06-23T04:52:45.69987Z","changedTime":"2020-10-27T09:47:03.1805415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp3-ip","name":"qianwen-rdp3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-14T08:12:29.7555901Z","changedTime":"2020-10-27T09:44:23.7395425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-rdp-ip","name":"qianwen-rdp-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-23T03:33:41.7231681Z","changedTime":"2020-10-27T09:42:59.1214414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-trusty-ip","name":"qianwen-trusty-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-07-06T02:49:12.0720578Z","changedTime":"2020-10-27T09:43:05.2491604Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-ubuntu-ip","name":"qianwen-ubuntu-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-02-04T07:17:03.7612372Z","changedTime":"2020-10-27T09:43:05.6825232Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwen-windows-ip","name":"qianwen-windows-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2020-06-17T07:57:41.3114813Z","changedTime":"2020-10-27T09:45:08.4127685Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/publicIPAddresses/qianwencentos-ip","name":"qianwencentos-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"southeastasia","createdTime":"2020-07-08T07:51:07.9761081Z","changedTime":"2020-10-27T09:43:04.0127537Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/QIAN","name":"QIAN","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-24T02:20:55.5771667Z","changedTime":"2020-10-27T09:46:14.1086114Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwendev","name":"qianwendev","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2020-02-21T12:40:06.2251159Z","changedTime":"2020-10-27T10:43:35.1234315Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwenhpcc","name":"qianwenhpcc","type":"Microsoft.Network/virtualNetworks","location":"northeurope","createdTime":"2020-03-04T04:09:21.7100234Z","changedTime":"2020-10-27T09:44:14.4269854Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Network/virtualNetworks/qianwens-vnet","name":"qianwens-vnet","type":"Microsoft.Network/virtualNetworks","location":"southeastasia","createdTime":"2020-02-04T07:17:00.4977155Z","changedTime":"2020-10-27T09:43:06.9793511Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenadls","name":"qianwenadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-04-01T10:11:01.4699267Z","changedTime":"2020-04-01T10:21:44.1423377Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwendev","name":"qianwendev","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-02-12T03:28:57.9520193Z","changedTime":"2020-02-12T03:40:25.4541211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwenhpctarget","name":"qianwenhpctarget","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-03-06T07:08:48.3045206Z","changedTime":"2020-03-06T07:20:06.7361719Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Storage/storageAccounts/qianwensdiag","name":"qianwensdiag","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"southeastasia","createdTime":"2020-02-04T07:17:07.2124593Z","changedTime":"2020-02-04T07:27:37.8088616Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/qianwens/providers/Microsoft.Web/serverFarms/qianwens_asp_Linux_centralus_0","name":"qianwens_asp_Linux_centralus_0","type":"Microsoft.Web/serverFarms","sku":{"name":"P1v2","tier":"PremiumV2","size":"P1v2","family":"Pv2","capacity":1},"kind":"linux","location":"centralus","createdTime":"2020-07-08T03:02:09.7603359Z","changedTime":"2020-07-08T06:20:00.4498733Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Cache/Redis/redis2weidxu","name":"redis2weidxu","type":"Microsoft.Cache/Redis","location":"eastus","createdTime":"2021-02-19T06:01:22.2698175Z","changedTime":"2021-02-19T10:21:52.7606527Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-weidxu/providers/Microsoft.Storage/storageAccounts/lcok2weidxu","name":"lcok2weidxu","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2021-01-22T03:19:16.5160707Z","changedTime":"2021-01-22T03:29:44.146363Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","name":"vm315242053_disk1_fd68918816df4c8fa0a9766c4533d2a0","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.1966299Z","changedTime":"2021-04-19T07:40:06.5170303Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","name":"vm315242053_disk2_534f0e7a552d407cac7c47dabfc7836d","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2132952Z","changedTime":"2021-04-19T07:40:07.2044281Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","name":"vm315242053_disk3_7f93315922c94035bf48ca31c287fc10","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.2091938Z","changedTime":"2021-04-19T07:40:06.9436767Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV001070D/providers/Microsoft.Compute/disks/vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","name":"vm315242053_disk4_a22b25f558f44e0493e7feaf82164a8c","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus2","createdTime":"2021-04-19T07:30:06.3635314Z","changedTime":"2021-04-19T07:40:06.6261328Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk1_7036e05d00e040d8baaedede949e986a","name":"vm3980781_disk1_7036e05d00e040d8baaedede949e986a","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7385167Z","changedTime":"2021-04-19T07:22:02.372801Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","name":"vm3980781_disk2_d6f3d74977804e67a2039e92d8cc8716","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7888523Z","changedTime":"2021-04-19T07:22:02.1120383Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","name":"vm3980781_disk3_4d4d89ffa3bf40da8614413943f2b552","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7476848Z","changedTime":"2021-04-19T07:22:02.2920907Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","name":"vm3980781_disk4_1be82eb1c0e643b5a1bbb055f0241357","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.7731014Z","changedTime":"2021-04-19T07:22:00.9454043Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/RGCOMV61802AC/providers/Microsoft.Compute/disks/vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","name":"vm3980781_disk5_e7cc9b706cdd4126a6cd8dfc3f64fbb2","type":"Microsoft.Compute/disks","sku":{"name":"Standard_LRS","tier":"Standard"},"location":"westus","createdTime":"2021-04-19T07:12:00.8969407Z","changedTime":"2021-04-19T07:22:00.9946055Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/clusters/eventhubs-clus1-52p7","name":"eventhubs-clus1-52p7","type":"Microsoft.EventHub/clusters","sku":{"name":"Dedicated","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:44.2233646Z","changedTime":"2021-04-19T05:09:52.8595837Z","provisioningState":"Succeeded","tags":{"tag2":"value2"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgehcluster-cli-test/providers/Microsoft.EventHub/namespaces/eventhubs-nsclihh5fm","name":"eventhubs-nsclihh5fm","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"southcentralus","createdTime":"2021-04-19T04:58:47.4949708Z","changedTime":"2021-04-19T05:08:49.5531237Z","provisioningState":"Succeeded","tags":{"{tag1":"value1}"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-b7p4me5w3fm4v5ojterc5bon5uo5wbsmfhjxwdy5xwh42eurktn4sq3jdpe3raw6hjcsiww2bzn/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T10:17:20.5414426Z","changedTime":"2021-04-16T10:27:22.5824066Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:51.5333228Z","changedTime":"2021-04-16T10:28:52.8985143Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-c5kitkct7tnusvbhm6trxvud4recfkpkwfvlkl5brhcbzmoimsj7mlt63hn3pkktyj4qcaa6l2a/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:18:54.4690406Z","changedTime":"2021-04-16T10:28:55.7733108Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-dib45xo6wspxdjhy25pz4pmbe36tqulxm3si2d44yx5rdjcom6hf7xhw3wy2q7yy2jvixs5ixuo/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:15:33.0367148Z","changedTime":"2021-04-16T08:25:34.4699091Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-nr5t5tkrd3dfy5s3cdogjaul6vgau6zk3z2me6jepz3d2cmx6nj5vegeortzqh7xuzbvca6ok3l/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:08:09.5132813Z","changedTime":"2021-04-16T10:18:11.3260431Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ouo3jjibwnld6sv4wp4st5bwoqfyuqjwruxgzngkm4lxwiockh4pibkmof27hvrpt3sigwzbpx2/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T08:27:04.0811162Z","changedTime":"2021-04-16T08:37:06.2144901Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","name":"endpoint123xxx.nic.97589f5b-289f-4901-bb80-e65e3868aee7","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:49:20.1498322Z","changedTime":"2021-04-13T06:01:22.5455227Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:49:19.2441645Z","changedTime":"2021-04-13T05:59:36.4752576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-q5ubduxtnec2vm6umpjrjkkxqkp46yyouuonfsitbsbyibnlktgnwbsx3ddwn45vtd5zpw276ch/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:49:09.6663065Z","changedTime":"2021-04-13T05:59:22.6887839Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:41.385595Z","changedTime":"2021-04-16T08:38:43.2099435Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-quwg2ezxkflbm2hajwzd7jagjgfiuhlkba6disq7h5qra6v3fprdxga2axac7ijrzvob3jdwjg3/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:28:43.2091663Z","changedTime":"2021-04-16T08:38:44.8605004Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ukzvq3ykaqqwrjaiuk7jkfr3775v27se47dbizw2i6jsrvzqw3altzi7icasivx5gjuihmsd5t4/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T08:17:47.2957402Z","changedTime":"2021-04-16T08:27:49.6637519Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-uprrmtmadxtglxidnidulnmwy6n6sfcqy2ieu5lzx7d3veixu2tmw4cwy4e4xzzk4hc3fcc6pcq/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T10:06:09.7360243Z","changedTime":"2021-04-16T10:16:11.5409437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-ywtpgrr2wj4otjy2rml2yj3aqrrulvu55fcw3lqxna325xn4oga75gd4cjacd54u6gsmxafubco/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uai","name":"uai","type":"Microsoft.ManagedIdentity/userAssignedIdentities","location":"westus","createdTime":"2021-04-16T09:55:44.8681585Z","changedTime":"2021-04-16T10:05:47.4324327Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-z2n6tjylaptobeb6qbnwfmgrjkzcq2eartmrevz2wtpszn5atgevjfzql4k5mzczomavumgwvxr/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:44:26.8175499Z","changedTime":"2021-04-16T09:54:28.5628695Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/networkInterfaces/endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","name":"endpoint123xxx.nic.3ecfd891-f8b0-4565-9413-ebc44c2592ec","type":"Microsoft.Network/networkInterfaces","location":"westeurope","createdTime":"2021-04-13T05:48:11.4804842Z","changedTime":"2021-04-13T06:00:14.393522Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/privateEndpoints/endpoint123xxx","name":"endpoint123xxx","type":"Microsoft.Network/privateEndpoints","location":"westeurope","createdTime":"2021-04-13T05:48:10.369524Z","changedTime":"2021-04-13T05:58:34.0561403Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zewsfjowuc7ekvznn56rq2brkniaefosjozqrgedcrprfdqs2iudmkdlh2y3kuk3ndofodn2ebb/providers/Microsoft.Network/virtualNetworks/virualnetwork111","name":"virualnetwork111","type":"Microsoft.Network/virtualNetworks","location":"westeurope","createdTime":"2021-04-13T05:48:00.2703448Z","changedTime":"2021-04-13T05:58:12.0044454Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zpcge3ymst4galvq3izu3vyspbffzif3agefhirk52v6tudwfrxyufywqtiffjrseqnwh3xh4ju/providers/Microsoft.Compute/availabilitySets/availabilitySet1","name":"availabilitySet1","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:46:28.3216664Z","changedTime":"2021-04-16T09:56:30.3702545Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a","name":"pytestavset7650e8a","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:14.8539307Z","changedTime":"2021-04-16T10:07:16.7949574Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rgpy-zwbjdtonuffy64lssxc7bmzp5teitq5f2llkoxhplontwqyndlo4z4pkbjjs73kdr6f2l5w67bm/providers/Microsoft.Compute/availabilitySets/pytestavset7650e8a2","name":"pytestavset7650e8a2","type":"Microsoft.Compute/availabilitySets","sku":{"name":"Classic"},"location":"westus","createdTime":"2021-04-16T09:57:16.6411265Z","changedTime":"2021-04-16T10:07:18.8446376Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/networkInterfaces/anf-sdk-vnet-nic-VLB5RZ","name":"anf-sdk-vnet-nic-VLB5RZ","type":"Microsoft.Network/networkInterfaces","location":"westus2","createdTime":"2019-09-29T04:34:50.7413363Z","changedTime":"2020-10-27T09:40:18.564434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/sdk-wus2-rg-test/providers/Microsoft.Network/virtualNetworks/sdk-vnet","name":"sdk-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus2","createdTime":"2019-09-29T02:29:33.4675901Z","changedTime":"2020-10-27T09:40:43.6763691Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Compute/virtualMachineScaleSets/pnt","name":"pnt","type":"Microsoft.Compute/virtualMachineScaleSets","sku":{"name":"Standard_D2","tier":"Standard","capacity":5},"location":"eastasia","createdTime":"2021-04-19T08:48:31.5154262Z","changedTime":"2021-04-19T09:13:52.0102414Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/loadBalancers/LB-sfrp-cli-hqvjk4ymjsct2m2","name":"LB-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/loadBalancers","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:31.9349613Z","changedTime":"2021-04-19T08:55:32.08355Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/networkSecurityGroups/SF-NSG","name":"SF-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"eastasia","createdTime":"2021-04-19T08:45:25.8495007Z","changedTime":"2021-04-19T08:55:29.1238361Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/publicIPAddresses/PublicIP-sfrp-cli-hqvjk4ymjsct2m2","name":"PublicIP-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastasia","createdTime":"2021-04-19T08:45:25.8393717Z","changedTime":"2021-04-19T08:56:00.5127966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Network/virtualNetworks/VNet-sfrp-cli-hqvjk4ymjsct2m2","name":"VNet-sfrp-cli-hqvjk4ymjsct2m2","type":"Microsoft.Network/virtualNetworks","location":"eastasia","createdTime":"2021-04-19T08:45:27.7827409Z","changedTime":"2021-04-19T08:55:34.1294128Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/SFC_7347a0d4-a69f-4229-8944-f6543e3078c5/providers/Microsoft.Storage/storageAccounts/sfmcwr73kjjku7u2a","name":"sfmcwr73kjjku7u2a","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"eastasia","createdTime":"2021-04-19T08:45:25.8065311Z","changedTime":"2021-04-19T08:56:00.5177756Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro1","name":"storagesfrepro1","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:07:41.8298406Z","changedTime":"2019-02-26T04:18:03.9545706Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro10","name":"storagesfrepro10","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:00.6262226Z","changedTime":"2019-02-26T04:24:21.2000874Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro11","name":"storagesfrepro11","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:14:28.3533122Z","changedTime":"2019-02-26T04:24:54.5987919Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro12","name":"storagesfrepro12","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:15:15.2083601Z","changedTime":"2019-02-26T04:25:38.5823696Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro13","name":"storagesfrepro13","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:16:55.4175886Z","changedTime":"2019-02-26T04:27:17.4408915Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro14","name":"storagesfrepro14","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:17:40.5195487Z","changedTime":"2019-02-26T04:28:02.5616108Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro15","name":"storagesfrepro15","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:18:51.6234329Z","changedTime":"2019-02-26T04:29:12.9369803Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro16","name":"storagesfrepro16","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:19:32.8563409Z","changedTime":"2019-02-26T04:29:54.3760002Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro17","name":"storagesfrepro17","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:23.1230139Z","changedTime":"2019-02-26T05:14:45.3192214Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro18","name":"storagesfrepro18","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:04:53.5559027Z","changedTime":"2019-02-26T05:15:16.2637635Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro19","name":"storagesfrepro19","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:05:25.8432056Z","changedTime":"2019-02-26T05:16:09.4805857Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro2","name":"storagesfrepro2","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:08:45.4529721Z","changedTime":"2019-02-26T04:19:07.2086102Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro20","name":"storagesfrepro20","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:07.1026482Z","changedTime":"2019-02-26T05:16:28.4807447Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro21","name":"storagesfrepro21","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:36.9974297Z","changedTime":"2019-02-26T05:16:58.8741059Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro22","name":"storagesfrepro22","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:06:59.4088602Z","changedTime":"2019-02-26T05:17:21.4795891Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro23","name":"storagesfrepro23","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:28.5790674Z","changedTime":"2019-02-26T05:17:51.3270138Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro24","name":"storagesfrepro24","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:07:52.9258747Z","changedTime":"2019-02-26T05:18:15.4621631Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro25","name":"storagesfrepro25","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T05:08:18.1174498Z","changedTime":"2019-02-26T05:18:39.8161747Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro3","name":"storagesfrepro3","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:18.9108731Z","changedTime":"2019-02-26T04:19:40.5313795Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro4","name":"storagesfrepro4","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:09:54.7369198Z","changedTime":"2019-02-26T04:20:16.8946414Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro5","name":"storagesfrepro5","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:10:47.8461815Z","changedTime":"2019-02-26T04:21:08.9088521Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro6","name":"storagesfrepro6","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:11:27.6029381Z","changedTime":"2019-02-26T04:21:49.3876577Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro7","name":"storagesfrepro7","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:08.4925229Z","changedTime":"2019-02-26T04:22:29.0033096Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro8","name":"storagesfrepro8","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:12:39.2707468Z","changedTime":"2019-02-26T04:23:00.5698211Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/storage-v2rt-repro/providers/Microsoft.Storage/storageAccounts/storagesfrepro9","name":"storagesfrepro9","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"centralus","createdTime":"2019-02-26T04:13:17.7206367Z","changedTime":"2019-02-26T04:23:38.4237376Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappdtkyeu5jahvia/providers/Microsoft.Network/virtualNetworks/swiftname7ejcvmcnpwrm6zw","name":"swiftname7ejcvmcnpwrm6zw","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-14T03:12:55.2093424Z","changedTime":"2021-04-14T03:23:06.6926888Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappvullq2rwvcrbi/providers/Microsoft.Network/virtualNetworks/swiftname63g6wvqkgvmodve","name":"swiftname63g6wvqkgvmodve","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T07:56:32.9282188Z","changedTime":"2021-04-19T08:06:41.0624174Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/swiftwebappykvmvassqkbkz/providers/Microsoft.Network/virtualNetworks/swiftname2ps6zotu23xidfe","name":"swiftname2ps6zotu23xidfe","type":"Microsoft.Network/virtualNetworks","location":"japanwest","createdTime":"2021-04-19T03:20:28.6793668Z","changedTime":"2021-04-19T03:30:44.1605022Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","name":"workspace000","type":"Microsoft.Sql/servers","kind":"v12.0,analytics","location":"westus","createdTime":"2021-04-16T07:32:41.1561008Z","changedTime":"2021-04-16T07:43:27.6039701Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000/databases/master","name":"workspace000/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/synapseworkspace-managedrg-c4286c1c-027c-4049-9367-434371f0b88c/providers/Microsoft.Sql/servers/workspace000","location":"westus","createdTime":"2021-04-16T07:33:55.9213298Z","changedTime":"2021-04-17T08:42:05.4240675Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.RecoveryServices/vaults/vault296","name":"vault296","type":"Microsoft.RecoveryServices/vaults","sku":{"name":"RS0","tier":"Standard"},"location":"japaneast","createdTime":"2020-08-05T05:33:56.0587548Z","changedTime":"2020-08-17T06:19:09.9971312Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverFarms/WebAppPortal2CLIPlan","name":"WebAppPortal2CLIPlan","type":"Microsoft.Web/serverFarms","sku":{"name":"S1","tier":"Standard","size":"S1","family":"S","capacity":1},"kind":"app","location":"westus","createdTime":"2020-08-27T01:30:10.3225337Z","changedTime":"2020-08-27T01:40:14.5150416Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/sites/WebAppPortal2CLI20200827092707","name":"WebAppPortal2CLI20200827092707","type":"Microsoft.Web/sites","kind":"app","location":"westus","identity":{"principalId":"504a3e0f-4ce1-4fb0-80b7-0f7a3b10b0fa","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-08-27T01:30:16.6447697Z","changedTime":"2020-08-27T01:40:21.555168Z","provisioningState":"Succeeded","tags":{"hidden-related:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yakou2/providers/Microsoft.Web/serverfarms/WebAppPortal2CLIPlan":"empty"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/t-yueshi/providers/Microsoft.Storage/storageAccounts/yueshi4debug","name":"yueshi4debug","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus","createdTime":"2020-09-14T09:43:26.6927545Z","changedTime":"2020-09-14T09:53:55.0716599Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T05:49:30.0883937Z","changedTime":"2021-04-12T06:59:39.4075949Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-12T05:45:35.2596602Z","changedTime":"2021-04-12T06:59:26.6388356Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/test_azure_firewall_tier2nykbc5wpbgyqf3u6yroaefoylixtauyaevz4cgoqs2xpo3dqnn/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-12T05:45:13.2351238Z","changedTime":"2021-04-12T05:55:38.4811074Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/VN1_GROUP/providers/Microsoft.Compute/disks/vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","name":"vn1_OsDisk_1_ac7531999a4c4bdbbf6badf7f9fa96ac","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","location":"eastus","createdTime":"2021-04-16T11:23:01.5707345Z","changedTime":"2021-04-16T11:33:01.944692Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn2","name":"vn2","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn2","location":"eastus","createdTime":"2021-04-16T11:35:20.1084868Z","changedTime":"2021-04-16T11:45:49.9008822Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn3","name":"vn3","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:38:30.0693076Z","changedTime":"2021-04-16T11:48:40.8049503Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/disks/vn4","name":"vn4","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"location":"eastus","createdTime":"2021-04-16T11:39:09.2060209Z","changedTime":"2021-04-16T11:49:20.8552559Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/snapshots/mcr","name":"mcr","type":"Microsoft.Compute/snapshots","sku":{"name":"Standard_ZRS","tier":"Standard"},"location":"eastus","createdTime":"2021-04-16T11:33:20.7879295Z","changedTime":"2021-04-16T11:43:33.8263068Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Compute/virtualMachines/vn1","name":"vn1","type":"Microsoft.Compute/virtualMachines","location":"eastus","createdTime":"2021-04-16T11:23:00.0676719Z","changedTime":"2021-04-16T11:35:49.2799302Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn1584","name":"vn1584","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:22:57.6120101Z","changedTime":"2021-04-16T11:32:59.3802669Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn2993","name":"vn2993","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:36:27.642062Z","changedTime":"2021-04-16T11:46:32.1662446Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn3965","name":"vn3965","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:39:41.1647879Z","changedTime":"2021-04-16T11:49:44.302433Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkInterfaces/vn4847","name":"vn4847","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-16T11:40:15.5960995Z","changedTime":"2021-04-16T11:50:19.0557899Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn1-nsg","name":"vn1-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:22:50.8844497Z","changedTime":"2021-04-16T11:32:57.9018339Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn2-nsg","name":"vn2-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:36:21.582964Z","changedTime":"2021-04-16T11:46:28.6185111Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn3-nsg","name":"vn3-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:39:35.2059082Z","changedTime":"2021-04-16T11:49:42.7216313Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/networkSecurityGroups/vn4-nsg","name":"vn4-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"eastus","createdTime":"2021-04-16T11:40:08.9335296Z","changedTime":"2021-04-16T11:50:15.4250071Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn1-ip","name":"vn1-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:22:50.8880508Z","changedTime":"2021-04-16T11:32:59.0230002Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn2-ip","name":"vn2-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:36:21.5799163Z","changedTime":"2021-04-16T11:46:27.3333311Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn3-ip","name":"vn3-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:39:35.2088513Z","changedTime":"2021-04-16T11:49:43.2079037Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/publicIPAddresses/vn4-ip","name":"vn4-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"eastus","createdTime":"2021-04-16T11:40:08.9293917Z","changedTime":"2021-04-16T11:52:16.7112272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/vn1_group/providers/Microsoft.Network/virtualNetworks/vn1_group-vnet","name":"vn1_group-vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-16T11:22:50.9665105Z","changedTime":"2021-04-16T11:32:59.2963267Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xuzhang3/providers/Microsoft.DesktopVirtualization/hostpools/xz-vd-pool","name":"xz-vd-pool","type":"Microsoft.DesktopVirtualization/hostpools","location":"eastus","createdTime":"2020-08-26T06:56:54.2512294Z","changedTime":"2020-08-26T07:07:03.3123018Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/circuit-test-diret","name":"circuit-test-diret","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-16T05:20:57.1590844Z","changedTime":"2021-04-16T05:31:04.8718764Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit","name":"xz-circuit","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"westus","createdTime":"2021-04-15T09:10:51.4313593Z","changedTime":"2021-04-15T09:21:00.0992254Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRouteCircuits/xz-circuit-test","name":"xz-circuit-test","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-04-15T09:07:22.4361469Z","changedTime":"2021-04-15T13:09:20.3504539Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-circuit-test/providers/Microsoft.Network/expressRoutePorts/xz3-express-route-port","name":"xz3-express-route-port","type":"Microsoft.Network/expressRoutePorts","location":"westus","createdTime":"2021-04-15T07:02:08.3140937Z","changedTime":"2021-04-15T07:12:40.7753842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er","name":"tf-er","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-12T07:07:37.1092242Z","changedTime":"2021-04-16T06:31:40.3868489Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er2","name":"tf-er2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:27:37.3813818Z","changedTime":"2021-04-16T03:32:41.6801617Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er3","name":"tf-er3","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-17T09:28:49.0965201Z","changedTime":"2021-03-17T09:39:13.5551105Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt1","name":"tf-er-spt1","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:21:42.4768556Z","changedTime":"2021-03-26T07:32:01.9114557Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/expressRouteCircuits/tf-er-spt2","name":"tf-er-spt2","type":"Microsoft.Network/expressRouteCircuits","sku":{"name":"Standard_MeteredData","tier":"Standard","family":"MeteredData"},"location":"eastus","createdTime":"2021-03-26T07:26:36.9891803Z","changedTime":"2021-04-12T10:02:14.0104006Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/xz3-test/providers/Microsoft.Network/virtualWans/xz-vwan","name":"xz-vwan","type":"Microsoft.Network/virtualWans","location":"eastus","createdTime":"2021-03-17T08:34:32.7553533Z","changedTime":"2021-03-17T08:44:49.2570722Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AppConfiguration/configurationStores/ysAppConfig","name":"ysAppConfig","type":"Microsoft.AppConfiguration/configurationStores","sku":{"name":"standard"},"location":"westus","createdTime":"2021-02-23T09:16:09.3031552Z","changedTime":"2021-02-23T09:26:30.4151842Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/yishiTestTenant.onmicrosoft.com","name":"yishiTestTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP2","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-04T07:23:46.9401283Z","changedTime":"2021-01-04T08:45:49.8626043Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.AzureActiveDirectory/b2cDirectories/ysTeatTenant.onmicrosoft.com","name":"ysTeatTenant.onmicrosoft.com","type":"Microsoft.AzureActiveDirectory/b2cDirectories","sku":{"name":"PremiumP1","tier":"A0"},"location":"unitedstates","createdTime":"2021-01-13T08:07:05.5349143Z","changedTime":"2021-01-13T08:18:16.3475009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/YISHITEST/providers/Microsoft.Compute/disks/yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","name":"yswin_disk1_37ea16f17fcd4820b18149bf1a3a4785","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","location":"westus","createdTime":"2021-01-06T05:43:16.5141985Z","changedTime":"2021-01-06T05:53:18.2225558Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Compute/virtualMachines/yswin","name":"yswin","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-01-06T05:40:59.7941252Z","changedTime":"2021-01-06T05:54:48.9243693Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testdevice","name":"testdevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Gateway","tier":"Standard"},"kind":"AzureDataBoxGateway","location":"eastus","identity":{"principalId":"c9fd4631-c426-427e-bfda-13038fdcc74f","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2020-11-20T07:41:23.929985Z","changedTime":"2020-11-23T07:02:57.7720137Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DataBoxEdge/DataBoxEdgeDevices/testedgedevice","name":"testedgedevice","type":"Microsoft.DataBoxEdge/DataBoxEdgeDevices","sku":{"name":"Edge","tier":"Standard"},"kind":"AzureStackEdge","location":"eastus","createdTime":"2020-11-24T06:13:30.1942259Z","changedTime":"2021-01-26T09:17:43.3832242Z","provisioningState":"Succeeded","tags":{"key":"value"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.DocumentDB/databaseAccounts/ystestcosmosdb","name":"ystestcosmosdb","type":"Microsoft.DocumentDB/databaseAccounts","kind":"GlobalDocumentDB","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-08T07:04:51.9526845Z","changedTime":"2021-04-08T07:17:24.401835Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-testdevice-020dc7b13","name":"ase-testdevice-020dc7b13","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-23T06:52:53.5573807Z","changedTime":"2020-11-23T07:03:00.269086Z","provisioningState":"Succeeded","tags":{"dbe-resource":"testdevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ase-ysgatewayd-e2960da93","name":"ase-ysgatewayd-e2960da93","type":"Microsoft.KeyVault/vaults","location":"eastus","createdTime":"2020-11-19T09:48:06.8214055Z","changedTime":"2020-11-19T09:58:16.2549037Z","provisioningState":"Succeeded","tags":{"dbe-resource":"ysgatewaydevice"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.KeyVault/vaults/ysvault","name":"ysvault","type":"Microsoft.KeyVault/vaults","location":"westus","createdTime":"2021-04-08T03:00:02.7237741Z","changedTime":"2021-04-08T03:10:11.0705723Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkInterfaces/yswin170","name":"yswin170","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-01-06T05:40:53.7747165Z","changedTime":"2021-01-06T05:50:57.3489018Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/aadds-nsg","name":"aadds-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2020-12-24T06:50:08.5856382Z","changedTime":"2020-12-24T07:00:22.397889Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/networkSecurityGroups/yswin-nsg","name":"yswin-nsg","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-01-06T05:40:39.6141685Z","changedTime":"2021-01-06T05:50:54.0649406Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net","name":"privatelink.blob.core.windows.net","type":"Microsoft.Network/privateDnsZones","location":"global","createdTime":"2021-01-27T03:44:40.1971063Z","changedTime":"2021-01-27T03:55:20.5059411Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/privateDnsZones/privatelink.blob.core.windows.net/virtualNetworkLinks/25trwykkfptba","name":"privatelink.blob.core.windows.net/25trwykkfptba","type":"Microsoft.Network/privateDnsZones/virtualNetworkLinks","location":"global","createdTime":"2021-01-27T03:45:47.9345022Z","changedTime":"2021-01-27T03:56:28.0264353Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/publicIPAddresses/yswin-ip","name":"yswin-ip","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-01-06T05:40:39.646476Z","changedTime":"2021-01-06T05:50:53.788434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/aadds-vnet","name":"aadds-vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-24T07:07:18.9430065Z","changedTime":"2020-12-24T07:17:48.6783373Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/testvnet","name":"testvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-23T07:57:02.6970848Z","changedTime":"2020-12-23T08:07:20.6489567Z","provisioningState":"Succeeded","tags":{"product":"azurecli","cause":"automation","date":"2020-12-23T07:27:55Z"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Network/virtualNetworks/ysvnet","name":"ysvnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2020-12-10T06:42:59.2021987Z","changedTime":"2020-12-10T06:53:21.6363564Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/testcreationtime","name":"testcreationtime","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"StorageV2","location":"westus","identity":{"principalId":"c120e453-0fb4-41f4-b9e7-ac280e27992a","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-08T02:43:54.0372607Z","changedTime":"2021-04-08T03:24:47.3770728Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssa","name":"yssa","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2020-10-27T14:55:29.5224551Z","changedTime":"2020-10-27T15:05:58.4976283Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaadls","name":"yssaadls","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-03-11T08:15:58.949829Z","changedTime":"2021-03-11T08:26:26.2469549Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssaeuap","name":"yssaeuap","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-10T03:37:13.5764051Z","changedTime":"2020-11-10T03:47:40.0906455Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssanew","name":"yssanew","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2020-11-06T09:18:51.9539726Z","changedTime":"2020-11-06T09:29:18.4962349Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.Storage/storageAccounts/yssatmp","name":"yssatmp","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"BlobStorage","location":"westus","createdTime":"2021-02-04T07:19:42.2199861Z","changedTime":"2021-02-04T07:30:12.9082752Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yishitest/providers/Microsoft.WindowsIoT/DeviceServices/testwiot","name":"testwiot","type":"Microsoft.WindowsIoT/DeviceServices","location":"westus","createdTime":"2021-03-25T09:18:06.591596Z","changedTime":"2021-03-25T09:28:13.2062777Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/create-sync-using-cli-on-location","name":"create-sync-using-cli-on-location","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-03-12T06:22:59.5643495Z","changedTime":"2021-02-12T08:31:10.3915757Z","provisioningState":"Succeeded","tags":{"key1":"value1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yu-test-rg/providers/Microsoft.StorageSync/storageSyncServices/yu-storage-sync","name":"yu-storage-sync","type":"Microsoft.StorageSync/storageSyncServices","location":"eastus","createdTime":"2020-01-15T04:27:32.0924697Z","changedTime":"2021-02-12T08:32:09.7762506Z","provisioningState":"Succeeded","tags":{"zhoxing_test":"1"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/waf","name":"waf","type":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies","location":"eastus2","createdTime":"2021-04-15T02:28:24.6918028Z","changedTime":"2021-04-15T02:41:19.5668757Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/azureFirewalls/firewall-yyc","name":"firewall-yyc","type":"Microsoft.Network/azureFirewalls","location":"eastus2","createdTime":"2021-04-19T09:15:39.9172072Z","changedTime":"2021-04-19T09:25:55.5399056Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/p2sVpnGateways/pvg-yyc","name":"pvg-yyc","type":"Microsoft.Network/p2sVpnGateways","location":"eastus2","createdTime":"2021-04-19T06:28:17.8009474Z","changedTime":"2021-04-19T07:38:26.2014501Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2","createdTime":"2021-04-19T06:11:54.6587464Z","changedTime":"2021-04-19T06:25:53.5321654Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualHubs/vhub-yyc","name":"vhub-yyc","type":"Microsoft.Network/virtualHubs","location":"westus","createdTime":"2021-04-19T06:05:34.3842152Z","changedTime":"2021-04-19T06:19:25.357434Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/virtualWans/vwan-yyc","name":"vwan-yyc","type":"Microsoft.Network/virtualWans","location":"eastus2","createdTime":"2021-04-19T06:05:09.9595861Z","changedTime":"2021-04-19T06:15:29.1267966Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc/providers/Microsoft.Network/vpnServerConfigurations/vsc-yyc","name":"vsc-yyc","type":"Microsoft.Network/vpnServerConfigurations","location":"eastus2","createdTime":"2021-04-19T06:27:01.4121158Z","changedTime":"2021-04-19T06:37:21.6505996Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc","name":"hs-yyc","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"8e389292-297c-4633-978f-bcf69b4e0d79","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T07:50:52.7484689Z","changedTime":"2021-04-15T08:05:45.6624807Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.HealthcareApis/services/hs-yyc1","name":"hs-yyc1","type":"Microsoft.HealthcareApis/services","kind":"fhir","location":"eastus","identity":{"principalId":"3681f417-be78-4ba0-9aa7-b63253fa1ad9","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-15T09:10:28.3051402Z","changedTime":"2021-04-15T09:24:32.2533772Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/networkInterfaces/pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","name":"pe.nic.6800b2cb-3791-4eae-9c26-b14f6e58ab0b","type":"Microsoft.Network/networkInterfaces","location":"eastus","createdTime":"2021-04-15T08:00:18.7692677Z","changedTime":"2021-04-15T08:12:19.8796415Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus","createdTime":"2021-04-15T08:00:13.5209958Z","changedTime":"2021-04-15T08:11:23.6449043Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus","createdTime":"2021-04-15T07:59:18.1510384Z","changedTime":"2021-04-15T08:09:37.9601924Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc000","name":"abc000","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:09:46.0267532Z","changedTime":"2021-04-14T06:19:54.9524864Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Automation/automationAccounts/abc001","name":"abc001","type":"Microsoft.Automation/automationAccounts","location":"eastus2","createdTime":"2021-04-14T06:52:30.4294068Z","changedTime":"2021-04-14T07:02:41.9660481Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F1500","capacity":3},"location":"eastus2","createdTime":"2021-04-14T08:38:16.7398868Z","changedTime":"2021-04-14T08:52:51.3267125Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.MixedReality/spatialAnchorsAccounts/saa","name":"saa","type":"Microsoft.MixedReality/spatialAnchorsAccounts","location":"eastus2","createdTime":"2021-04-09T08:47:35.812584Z","changedTime":"2021-04-09T08:57:42.5588027Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","name":"pe1.nic.68b0a8d6-2833-4dc4-a539-8f5530bd1fa7","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:39:51.5370351Z","changedTime":"2021-04-14T06:51:53.6623023Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/networkInterfaces/pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","name":"pe.nic.f58556d7-7a2e-4a25-a1c4-1f56823ac44f","type":"Microsoft.Network/networkInterfaces","location":"eastus2","createdTime":"2021-04-14T06:13:10.0257708Z","changedTime":"2021-04-14T06:25:14.5446329Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:13:05.1200373Z","changedTime":"2021-04-14T06:24:03.4744422Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/privateEndpoints/pe1","name":"pe1","type":"Microsoft.Network/privateEndpoints","location":"eastus2","createdTime":"2021-04-14T06:39:47.2902773Z","changedTime":"2021-04-14T06:50:06.28305Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"eastus2","createdTime":"2021-04-14T06:10:12.5003032Z","changedTime":"2021-04-14T06:20:36.5679491Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/af","name":"af","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-09T08:00:20.7664676Z","changedTime":"2021-04-12T03:04:18.488758Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/azureFirewalls/afxxx","name":"afxxx","type":"Microsoft.Network/azureFirewalls","location":"eastus2euap","createdTime":"2021-04-12T06:00:00.3055289Z","changedTime":"2021-04-12T06:10:20.8169437Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualHubs/vhub","name":"vhub","type":"Microsoft.Network/virtualHubs","location":"eastus2euap","createdTime":"2021-04-09T07:53:18.8596786Z","changedTime":"2021-04-09T08:07:24.675226Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-eastus2euap/providers/Microsoft.Network/virtualWans/vwan","name":"vwan","type":"Microsoft.Network/virtualWans","location":"eastus2euap","createdTime":"2021-04-09T07:52:47.676084Z","changedTime":"2021-04-09T08:03:12.0583626Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Cache/redisEnterprise/rs","name":"rs","type":"Microsoft.Cache/redisEnterprise","sku":{"name":"EnterpriseFlash_F300","capacity":3},"location":"westus","createdTime":"2021-04-14T08:51:36.0928084Z","changedTime":"2021-04-14T09:08:12.6749782Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Compute/diskAccesses/da","name":"da","type":"Microsoft.Compute/diskAccesses","location":"westus","createdTime":"2021-04-15T05:44:50.8223622Z","changedTime":"2021-04-15T05:55:17.3996009Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.EventHub/namespaces/eventhubs-nscli","name":"eventhubs-nscli","type":"Microsoft.EventHub/namespaces","sku":{"name":"Standard","tier":"Standard","capacity":1},"location":"westus","createdTime":"2021-04-14T09:13:29.1333384Z","changedTime":"2021-04-16T07:12:34.2506408Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname","name":"amsname","type":"Microsoft.Media/mediaservices","location":"westus","identity":{"type":"None"},"createdTime":"2021-04-16T05:16:20.5583953Z","changedTime":"2021-04-16T05:26:26.6965697Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Media/mediaservices/amsname/streamingEndpoints/default","name":"amsname/default","type":"Microsoft.Media/mediaservices/streamingEndpoints","location":"westus","createdTime":"2021-04-16T05:17:09.5175349Z","changedTime":"2021-04-16T05:22:09.699558Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/dnszones/www.microsoft.com","name":"www.microsoft.com","type":"Microsoft.Network/dnszones","location":"global","createdTime":"2021-04-16T03:25:06.98624Z","changedTime":"2021-04-16T03:35:15.6908339Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","name":"pe-ams.nic.63c00b9a-7b45-4143-95be-525834a31b00","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T05:24:02.0983382Z","changedTime":"2021-04-16T05:36:04.0241255Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","name":"pe-eventhub.nic.be072970-372f-43b9-a9e8-427700a5c071","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:04:57.4165959Z","changedTime":"2021-04-16T07:16:59.2901576Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","name":"pe-sqlserver.nic.9a8e4172-28e1-40bc-9283-d542d69a957b","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:45:22.4659975Z","changedTime":"2021-04-16T06:57:27.053249Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","name":"pe-storagesync.nic.0f931107-720a-41aa-85d8-455952015c82","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T06:59:01.5811478Z","changedTime":"2021-04-16T07:11:05.4601096Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","name":"pe-synapse.nic.92d97e6f-4998-4c37-8740-dfa3c839ed17","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-16T07:39:26.764982Z","changedTime":"2021-04-16T07:51:29.4743941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkInterfaces/pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","name":"pe.nic.5b6e91a1-51e0-4497-b432-39bb2ef38768","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-04-14T09:01:20.3218649Z","changedTime":"2021-04-14T09:13:23.330499Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/networkSecurityGroups/appservice-yyc-NSG","name":"appservice-yyc-NSG","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-04-16T08:15:10.9455077Z","changedTime":"2021-04-16T08:25:20.8427818Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe","name":"pe","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-14T09:01:16.1836247Z","changedTime":"2021-04-14T09:13:43.5935583Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-ams","name":"pe-ams","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T05:23:58.5654576Z","changedTime":"2021-04-16T05:34:22.6348327Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-eventhub","name":"pe-eventhub","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:04:53.942218Z","changedTime":"2021-04-16T07:15:57.2758177Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-sqlserver","name":"pe-sqlserver","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:45:19.1810494Z","changedTime":"2021-04-16T06:55:43.2947286Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-storagesync","name":"pe-storagesync","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T06:58:56.6768294Z","changedTime":"2021-04-16T07:09:42.5527941Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/privateEndpoints/pe-synapse","name":"pe-synapse","type":"Microsoft.Network/privateEndpoints","location":"westus","createdTime":"2021-04-16T07:39:22.8141147Z","changedTime":"2021-04-16T07:49:57.3398799Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/routeTables/appservice-yyc-Route-Table","name":"appservice-yyc-Route-Table","type":"Microsoft.Network/routeTables","location":"westus","createdTime":"2021-04-16T08:14:37.4436007Z","changedTime":"2021-04-16T08:24:48.9465425Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/trafficmanagerprofiles/tm","name":"tm","type":"Microsoft.Network/trafficmanagerprofiles","location":"global","createdTime":"2021-04-16T03:13:10.6590225Z","changedTime":"2021-04-16T03:23:18.4158462Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet","name":"vnet","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-14T09:00:52.5507234Z","changedTime":"2021-04-16T05:29:43.4786384Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-ams","name":"vnet-ams","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T05:22:55.311056Z","changedTime":"2021-04-16T05:33:09.7333086Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-eventhub","name":"vnet-eventhub","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:03:56.549564Z","changedTime":"2021-04-16T07:14:11.8016505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-servicebus","name":"vnet-servicebus","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:01:52.0273784Z","changedTime":"2021-04-16T06:12:10.6931951Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-sqlserver","name":"vnet-sqlserver","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:44:57.7948953Z","changedTime":"2021-04-16T06:55:15.5195642Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-storagesync","name":"vnet-storagesync","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T06:58:13.1605881Z","changedTime":"2021-04-16T07:08:28.7315626Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-synapse","name":"vnet-synapse","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T07:38:54.9651229Z","changedTime":"2021-04-16T07:49:11.6802948Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Network/virtualNetworks/vnet-web-hosting","name":"vnet-web-hosting","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-04-16T08:13:52.9792957Z","changedTime":"2021-04-16T08:24:08.5279343Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.ServiceBus/namespaces/servicebus-1010","name":"servicebus-1010","type":"Microsoft.ServiceBus/namespaces","sku":{"name":"Standard","tier":"Standard"},"location":"westus","createdTime":"2021-04-16T05:57:16.0412067Z","changedTime":"2021-04-16T06:07:22.3961058Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","name":"sql-server123","type":"Microsoft.Sql/servers","kind":"v12.0","location":"westus","createdTime":"2021-04-16T06:17:03.4449649Z","changedTime":"2021-04-16T06:28:00.4077244Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123/databases/master","name":"sql-server123/master","type":"Microsoft.Sql/servers/databases","sku":{"name":"System","tier":"System","capacity":0},"kind":"v12.0,system","managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Sql/servers/sql-server123","location":"westus","createdTime":"2021-04-16T06:18:22.8118374Z","changedTime":"2021-04-17T07:02:26.0736317Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Storage/storageAccounts/sayyc","name":"sayyc","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"westus","createdTime":"2021-04-16T03:49:30.3402983Z","changedTime":"2021-04-16T04:00:00.0284461Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.StorageSync/storageSyncServices/store-yyc","name":"store-yyc","type":"Microsoft.StorageSync/storageSyncServices","location":"westus","createdTime":"2021-04-16T06:56:13.3493515Z","changedTime":"2021-04-16T07:06:19.7803265Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Synapse/workspaces/workspace000","name":"workspace000","type":"Microsoft.Synapse/workspaces","location":"westus","identity":{"principalId":"3011cfc1-a7f9-4d00-a27c-a7900ca8d931","tenantId":"54826b22-38d6-4fb2-bad9-b7b93a3e9c5a","type":"SystemAssigned"},"createdTime":"2021-04-16T07:31:48.0028382Z","changedTime":"2021-04-16T07:45:33.2090206Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/yyc-westus/providers/Microsoft.Web/hostingEnvironments/appservice-yyc","name":"appservice-yyc","type":"Microsoft.Web/hostingEnvironments","kind":"ASEV2","location":"westus","createdTime":"2021-04-16T08:19:03.4911822Z","changedTime":"2021-04-16T09:54:31.0574215Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - aiqkmwurjsg3x5k","name":"Failure Anomalies - aiqkmwurjsg3x5k","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-11-20T06:03:41.3010345Z","changedTime":"2020-11-20T06:13:43.6237529Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - appInsights-6472qnxl3vv5o","name":"Failure Anomalies - appInsights-6472qnxl3vv5o","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-02-27T08:34:35.8884083Z","changedTime":"2020-02-27T08:44:42.1496067Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-edition-application-insights","name":"Failure Anomalies - - func-zdf-getit-edition-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:55.29075Z","changedTime":"2020-08-14T02:36:58.0039223Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-graphql-application-insights","name":"Failure Anomalies - - func-zdf-getit-graphql-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.77474Z","changedTime":"2020-08-14T02:36:56.4353277Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-group-application-insights","name":"Failure Anomalies - - func-zdf-getit-group-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:56.0922941Z","changedTime":"2020-08-14T02:36:57.3225556Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-product-application-insights","name":"Failure Anomalies - - func-zdf-getit-product-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:51.6390763Z","changedTime":"2020-08-14T02:36:52.3383621Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","name":"Failure - Anomalies - func-zdf-getit-publicationevent-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1579694Z","changedTime":"2020-08-14T02:36:55.8187848Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.alertsmanagement/smartDetectorAlertRules/Failure - Anomalies - func-zdf-getit-resource-application-insights","name":"Failure - Anomalies - func-zdf-getit-resource-application-insights","type":"microsoft.alertsmanagement/smartDetectorAlertRules","location":"global","createdTime":"2020-08-14T02:26:54.1368548Z","changedTime":"2020-08-14T02:36:56.1484619Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.CertificateRegistration/certificateOrders/zhoxing-test","name":"zhoxing-test","type":"Microsoft.CertificateRegistration/certificateOrders","location":"global","createdTime":"2020-03-16T02:37:52.706132Z","changedTime":"2020-03-16T03:13:08.963062Z","provisioningState":"Succeeded","tags":{"dev":"test"}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/ZHOXING-TEST/providers/Microsoft.Compute/disks/clivmDisk","name":"clivmDisk","type":"Microsoft.Compute/disks","sku":{"name":"Premium_LRS","tier":"Premium"},"managedBy":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","location":"westus","createdTime":"2021-03-09T09:30:51.4230583Z","changedTime":"2021-03-09T09:40:53.0058637Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Compute/virtualMachines/veerCrossTenantVM-2","name":"veerCrossTenantVM-2","type":"Microsoft.Compute/virtualMachines","location":"westus","createdTime":"2021-03-09T09:30:46.1512334Z","changedTime":"2021-03-11T09:30:12.8338472Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/actiongroups/test-ag-yu","name":"test-ag-yu","type":"microsoft.insights/actiongroups","location":"global","createdTime":"2020-05-07T04:48:32.8786902Z","changedTime":"2020-05-07T04:58:39.2116348Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/autoscalesettings/ASP-zhoxingtest-b6db-Autoscale-76","name":"ASP-zhoxingtest-b6db-Autoscale-76","type":"microsoft.insights/autoscalesettings","location":"centralus","createdTime":"2020-04-16T07:28:52.6283631Z","changedTime":"2020-04-16T07:38:59.7104573Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions","name":"Alert on Exceptions","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:41:49.3932442Z","changedTime":"2020-05-07T04:51:55.3428456Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Insights/metricalerts/Alert - on Exceptions1","name":"Alert on Exceptions1","type":"Microsoft.Insights/metricalerts","location":"global","createdTime":"2020-05-07T04:49:59.5418777Z","changedTime":"2020-05-07T05:00:07.2006478Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/eg-extendedrange-init-la - failed","name":"eg-extendedrange-init-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T08:42:07.3017435Z","changedTime":"2020-04-20T08:52:12.3686925Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/metricalerts/logic-app-test-la - failed","name":"logic-app-test-la failed","type":"microsoft.insights/metricalerts","location":"global","createdTime":"2020-04-20T03:28:56.3960583Z","changedTime":"2020-04-20T03:39:00.8211771Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/microsoft.insights/scheduledqueryrules/zhoxing-test","name":"zhoxing-test","type":"microsoft.insights/scheduledqueryrules","location":"centralus","createdTime":"2020-05-15T07:49:30.7864858Z","changedTime":"2020-10-02T07:50:54.279368Z","provisioningState":"Succeeded","tags":{"hidden-link:/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/testece/providers/Microsoft.OperationalInsights/workspaces/mmeum-analytics-workspace-testece":""}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkInterfaces/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkInterfaces","location":"westus","createdTime":"2021-03-09T07:52:34.1185602Z","changedTime":"2021-03-09T08:02:39.7103264Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing","name":"zhoxing","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:48:09.2949277Z","changedTime":"2021-03-09T07:58:22.205725Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/networkSecurityGroups/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/networkSecurityGroups","location":"westus","createdTime":"2021-03-09T07:14:44.515219Z","changedTime":"2021-03-11T20:15:06.502331Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/publicIPAddresses/zhoxing","name":"zhoxing","type":"Microsoft.Network/publicIPAddresses","sku":{"name":"Basic"},"location":"westus","createdTime":"2021-03-09T07:49:18.1903282Z","changedTime":"2021-03-09T07:59:36.8017781Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing","name":"zhoxing","type":"Microsoft.Network/virtualNetworks","location":"westus","createdTime":"2021-03-09T07:46:40.6292424Z","changedTime":"2021-03-09T07:57:05.5038298Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Network/virtualNetworks/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Network/virtualNetworks","location":"centralus","createdTime":"2020-03-06T08:01:41.4197513Z","changedTime":"2020-10-27T09:44:20.230656Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Security/iotSecuritySolutions/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Security/iotSecuritySolutions","location":"eastus","createdTime":"2020-06-05T03:04:22.0225121Z","changedTime":"2020-06-05T03:14:24.541505Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing","name":"zhoxing","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-19T06:35:21.5803365Z","changedTime":"2021-03-19T06:47:29.2965105Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing123","name":"zhoxing123","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2021-03-15T01:41:37.3583312Z","changedTime":"2021-03-15T01:51:44.4196293Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/serverFarms/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/serverFarms","sku":{"name":"B1","tier":"Basic","size":"B1","family":"B","capacity":1},"kind":"app","location":"westus","createdTime":"2020-11-20T07:54:42.8945252Z","changedTime":"2021-03-23T03:01:52.4548603Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zhoxing-test/providers/Microsoft.Web/sites/zhoxing-test","name":"zhoxing-test","type":"Microsoft.Web/sites","kind":"app","location":"westus","createdTime":"2021-01-09T08:34:42.5056579Z","changedTime":"2021-03-31T00:28:54.0586272Z","provisioningState":"Succeeded"},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/ugyuftdf","name":"ugyuftdf","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-19T06:44:35.3916861Z","changedTime":"2021-04-19T06:55:08.8615313Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhdefault","name":"zuhdefault","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-04-09T09:02:43.2211972Z","changedTime":"2021-04-12T10:17:19.8937141Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtest","name":"zuhtest","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"StorageV2","location":"eastus2euap","createdTime":"2021-01-14T07:13:39.5324175Z","changedTime":"2021-03-19T02:56:11.7011431Z","provisioningState":"Succeeded","tags":{}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/zuh/providers/Microsoft.Storage/storageAccounts/zuhtestss","name":"zuhtestss","type":"Microsoft.Storage/storageAccounts","sku":{"name":"Standard_RAGRS","tier":"Standard"},"kind":"Storage","location":"westus","createdTime":"2021-04-15T03:15:11.7383662Z","changedTime":"2021-04-15T03:25:50.5868016Z","provisioningState":"Succeeded","tags":{}}]}' - headers: - cache-control: - - no-cache - content-length: - - '118822' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:34:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml deleted file mode 100644 index 36c5c6e8268..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_built_in_policy.yaml +++ /dev/null @@ -1,88371 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions?api-version=2016-12-01 - response: - body: - string: "{\"value\":[{\"properties\":{\"displayName\":\"Microsoft Managed Control - 1599 - Developer Configuration Management | Software / Firmware Integrity - Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1599\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0004bbf0-5099-4179-869e-e9ffe5fb0945\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0004bbf0-5099-4179-869e-e9ffe5fb0945\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"existenceCondition\":{\"field\":\"name\",\"like\":\"ASR-Protect-*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"001802d1-4969-4c82-a700-c29c6c6f9bbd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1375 - Incident Response Assistance | Automation Support For - Availability Of Information / Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1375\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/00379355-8932-4b52-b63a-3bc6daf3451a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"00379355-8932-4b52-b63a-3bc6daf3451a\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your Synapse workspaces\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0049a6b3-a662-4f3e-8635-39cf44ace45a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1605 - Developer Security Testing And Evaluation | Static - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1605\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0062eb8b-dc75-4718-8ea5-9bb4a9606655\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0062eb8b-dc75-4718-8ea5-9bb4a9606655\"},{\"properties\":{\"displayName\":\"SQL - Server Integration Services integration runtimes on Azure Data Factory should - be joined to a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0088bc63-6dee-4a9c-9d29-91cfdc848952\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"009a0c92-f5b4-4776-9b66-4ed2b4775563\"},{\"properties\":{\"displayName\":\"Azure - Backup should be enabled for Virtual Machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - protection of your Azure Virtual Machines by enabling Azure Backup. Azure - Backup is a secure and cost effective data protection solution for Azure.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"013e242c-8828-4970-87b3-ab247555486d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1142 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1142\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01524fa8-4555-48ce-ba5f-c3b8dcef5147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01524fa8-4555-48ce-ba5f-c3b8dcef5147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1099 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1099\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01910bab-8639-4bd0-84ef-cc53b24d79ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01910bab-8639-4bd0-84ef-cc53b24d79ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1285 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1285\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/01f7726b-db54-45c2-bcb5-9bd7a43796ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"01f7726b-db54-45c2-bcb5-9bd7a43796ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1709 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1709\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/025992d6-7fee-4137-9bbf-2ffc39c0686c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"025992d6-7fee-4137-9bbf-2ffc39c0686c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1052 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1052\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/027cae1c-ec3e-4492-9036-4168d540c42a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"027cae1c-ec3e-4492-9036-4168d540c42a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1034 - Least Privilege\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1034\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a5ed00-6d2e-4e97-9a98-46c32c057329\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a5ed00-6d2e-4e97-9a98-46c32c057329\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the remote host connection status - does not match the specified one. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02a84be7-c304-421f-9bb7-5d2c26af54ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1623 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1623\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02ce1b22-412a-4528-8630-c42146f917ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02ce1b22-412a-4528-8630-c42146f917ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1515 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1515\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/02dd141a-a2b2-49a7-bcbd-ca31142f6211\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"02dd141a-a2b2-49a7-bcbd-ca31142f6211\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1327 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1327\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03188d8f-1ae5-4fe1-974d-2d7d32ef937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03188d8f-1ae5-4fe1-974d-2d7d32ef937d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1229 - Information System Component Inventory | No Duplicate - Accounting Of Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1229\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03752212-103c-4ab8-a306-7e813022ca9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03752212-103c-4ab8-a306-7e813022ca9d\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"037eea7a-bd0a-46c5-9a66-03aea78705d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1123 - Audit Review, Analysis, And Reporting | Audit Level - Adjustment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1123\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03996055-37a4-45a5-8b70-3f1caa45f87d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03996055-37a4-45a5-8b70-3f1caa45f87d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1474 - Emergency Power | Long-Term Alternate Power Supply - - Minimal Operational Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1474\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ad326e-d7a1-44b1-9a76-e17492efc9e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ad326e-d7a1-44b1-9a76-e17492efc9e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1227 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1227\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03b78f5e-4877-4303-b0f4-eb6583f25768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03b78f5e-4877-4303-b0f4-eb6583f25768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1361 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1361\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/03ed3be1-7276-4452-9a5d-e4168565ac67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"03ed3be1-7276-4452-9a5d-e4168565ac67\"},{\"properties\":{\"displayName\":\"Azure - Kubernetes Service Private Clusters should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"notEquals\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"040732e8-d947-40b8-95d6-854c95024bf8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1594 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1594\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/042ba2a1-8bb8-45f4-b080-c78cf62b90e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"042ba2a1-8bb8-45f4-b080-c78cf62b90e9\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"not_installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0447bc18-e2f7-4c0d-aa20-bff034275be1\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB allowed locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying Azure Cosmos DB resources.\",\"strongType\":\"location\"}},\"policyEffect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/Locations[*]\",\"where\":{\"value\":\"[replace(toLower(first(field('Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName'))), - ' ', '')]\",\"in\":\"[parameters('listOfAllowedLocations')]\"}},\"notEquals\":\"[length(field('Microsoft.DocumentDB/databaseAccounts/Locations[*]'))]\"}]},\"then\":{\"effect\":\"[parameters('policyEffect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0473574d-2d43-4217-aefe-941fcdf7e684\"},{\"properties\":{\"displayName\":\"SQL - managed instances should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"048248b0-55cd-46da-b1ff-39efd52db260\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Linux virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Linux VMs - monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c4380f-3fae-46e8-96c9-30193528f602\"},{\"properties\":{\"displayName\":\"Shared - dashboards should not have markdown tiles with inline content\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that's hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Portal\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Portal/dashboards\"},{\"anyof\":[{\"not\":{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2020-09-01-alpha\"}},{\"count\":{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type\",\"equals\":\"Extension/HubsExtension/PartType/MarkdownPart\"},{\"anyOf\":[{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"exists\":\"false\"},{\"field\":\"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource\",\"equals\":\"1\"}]}]}},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04c655fe-0ac7-48ae-9a32-3a2e208c7624\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04d53d87-841c-4f23-8a5b-21564380b55e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1572 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1572\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04f5fb00-80bb-48a9-a75b-4cb4d4c97c36\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use a customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"field\":\"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"051cba44-2429-45b9-9649-46cec11c7119\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux VMs if the VM Image (OS) is in the list defined - and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"053d3325-282c-4e5c-b944-24faffd30d77\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1331 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1331\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05460fe2-301f-4ed1-8174-d62c8bb92ff4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05460fe2-301f-4ed1-8174-d62c8bb92ff4\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Azure Front Door Service - service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"055aa869-bc98-4af8-bafc-23f1ab6ffe2c\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0564d078-92f5-4f97-8398-b9f58a51f70b\"},{\"properties\":{\"displayName\":\"Vulnerability - Assessment settings for SQL server should contain an email address to receive - scan reports\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send scan reports to' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\",\"notEquals\":\"\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]\"},\"notEquals\":0}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Data Lake Store should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"057ef27e-665e-4328-8ea3-04b3122bd9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1132 - Protection Of Audit Information | Audit Backup On Separate - Physical Systems / Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1132\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05938e10-cdbd-4a54-9b2b-1cbcfc141ad0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1223 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1223\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a1bb01-ad5a-49c1-aad3-b0c893b2ec3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1640 - Transmission Confidentiality And Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1640\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05a289ce-6a20-4b75-a0f3-dc8601b6acd0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05a289ce-6a20-4b75-a0f3-dc8601b6acd0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1420 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1420\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/05ae08cc-a282-413b-90c7-21a2c60b8404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"05ae08cc-a282-413b-90c7-21a2c60b8404\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1658 - Secure Name / Address Resolution Service (Recursive - Or Caching Resolver)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1658\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063b540e-4bdc-4e7a-a569-3a42ddf22098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063b540e-4bdc-4e7a-a569-3a42ddf22098\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1688 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1688\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/063c3f09-e0f0-4587-8fd5-f4276fae675f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"063c3f09-e0f0-4587-8fd5-f4276fae675f\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - access the private endpoint(s) for Storage Sync Service resource interfaces - from a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint's private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateDnsZoneId\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"Private - DNS Zone Identifier\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"afs\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f\",\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-afs\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06695360-db88-47f6-b976-7500d4297475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1332 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1332\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068260be-a5e6-4b0a-a430-cd27071c226a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068260be-a5e6-4b0a-a430-cd27071c226a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1455 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1455\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/068a88d4-e520-434e-baf0-9005a8164e6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"068a88d4-e520-434e-baf0-9005a8164e6a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit SQL DB Level Audit Setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - DB level audit setting for SQL databases\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Audit - VMs that do not use managed disks\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits VMs that do not use managed disks\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/osDisk.uri\",\"exists\":\"True\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/VirtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers\",\"exists\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl\",\"exists\":\"True\"}]}]}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06a78e20-9358-41c9-923c-fb736d382a4d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1366 - Incident Handling | Information Correlation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1366\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/06c45c30-ae44-4f0f-82be-41331da911cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"06c45c30-ae44-4f0f-82be-41331da911cc\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that Cognitive Services - account isn't exposed on the public internet. Creating private endpoints can - limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - \",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cognitive Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0725b4dd-7e76-479c-a735-68e7ee23d5ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1633 - Boundary Protection | Route Traffic To Authenticated - Proxy Servers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1633\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/07557aa0-e02f-4460-9a81-8ecd2fed601a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"07557aa0-e02f-4460-9a81-8ecd2fed601a\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0820b7b9-23aa-4725-a1ce-ae4558f718e5\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - values: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0868462e-646c-4fe3-9ced-a733534b6a2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1583 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1583\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0882d488-8e80-4466-bc0f-0cd15b6cb66d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0882d488-8e80-4466-bc0f-0cd15b6cb66d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the DSC configuration is not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDscConfiguration\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd\"},{\"properties\":{\"displayName\":\"Configure - Data Factories to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2018-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b1442b-7789-4130-8506-4f99a97226a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08b17839-76c6-4015-90e0-33d9d54d219c\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08ba64b8-738f-4918-9686-730d2ed79c7d\"},{\"properties\":{\"displayName\":\"Adaptive - network hardening recommendations should be applied on internet facing virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f9f0eed0-f143-47bf-b856-671ea2eeed62\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"08e6af2d-db70-460a-bfe9-d5bd474ba9d6\"},{\"properties\":{\"displayName\":\"There - should be more than one owner assigned to your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2c79b4af-f830-b61e-92b9-63dfa30f16e4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09024ccc-0c5f-475e-9457-b7c0d9ed487b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1159 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1159\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0925f098-7877-450b-8ba4-d1e55f2d8795\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0925f098-7877-450b-8ba4-d1e55f2d8795\"},{\"properties\":{\"displayName\":\"Disk - encryption should be applied on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d57a4221-a804-52ca-3dea-768284f06bb7\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0961003e-5a0a-4549-abde-af6a37f2724d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1302 - Identification And Authentication (Org. Users) | Network - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1302\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09828c65-e323-422b-9774-9d5c646124da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09828c65-e323-422b-9774-9d5c646124da\"},{\"properties\":{\"displayName\":\"Configure - backup on virtual machines without a given tag to an existing recovery services - vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location - (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.\",\"strongType\":\"location\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Backup - Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding VMs from - the scope of this policy. This should be used along with the Exclusion Tag - Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exclusion - Tag Values\",\"description\":\"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"value\":\"[empty(parameters('exclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('exclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"09ce66bc-1220-4153-8104-e3f51c936913\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a1302fb-a631-4106-9753-f3d494733990\"},{\"properties\":{\"displayName\":\"Azure - Policy Add-on for Kubernetes service (AKS) should be installed and enabled - on your clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a15ec92-a229-4763-bb14-0ea34a568f8d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1654 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1654\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a2ee16e-ab1f-414a-800b-d1608835862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a2ee16e-ab1f-414a-800b-d1608835862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1402 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1402\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a560d32-8075-4fec-9615-9f7c853f4ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a560d32-8075-4fec-9615-9f7c853f4ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1428 - Media Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1428\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a77fcc7-b8d8-451a-ab52-56197913c0c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a77fcc7-b8d8-451a-ab52-56197913c0c7\"},{\"properties\":{\"displayName\":\"Audit - resource location matches resource group location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that the resource location matches its resource group location\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[resourcegroup().location]\"},{\"field\":\"location\",\"notEquals\":\"global\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a914e76-4921-4c19-b460-a2d36003525a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Management'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0a9991e6-21be-49f9-8916-a06d934bcf29\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl\",\"exists\":false},{\"field\":\"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0aa61e00-0a01-4a3c-9945-e93cffedf0e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1044 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1044\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0abbac52-57cf-450d-8408-1208d0dd9e90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0abbac52-57cf-450d-8408-1208d0dd9e90\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1253 - Contingency Plan | Resume Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1253\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0afce0b3-dd9f-42bb-af28-1e4284ba8311\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0afce0b3-dd9f-42bb-af28-1e4284ba8311\"},{\"properties\":{\"displayName\":\"Email - notification to subscription owner for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"not\":{\"allOf\":[{\"field\":\"Microsoft.Security/securityContacts/alertsToAdmins\",\"equals\":\"Off\"},{\"field\":\"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity\",\"equals\":\"High\"}]}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b15565f-aa9e-48ba-8619-45960f2c314d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1046 - Automatic Account Lock | Purge / Wipe Mobile Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1046\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b1aa965-7502-41f9-92be-3e2fe7cc392a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b1aa965-7502-41f9-92be-3e2fe7cc392a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1020 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1020\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b291ee8-3140-4cad-beb7-568c077c78ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b291ee8-3140-4cad-beb7-568c077c78ce\"},{\"properties\":{\"displayName\":\"Key - vaults should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enablePurgeProtection\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1115 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1115\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b653845-2ad9-4e09-a4f3-5a7c1d78353d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b653845-2ad9-4e09-a4f3-5a7c1d78353d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB throughput should be limited\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the maximum throughput your organization can - specify when creating Azure Cosmos DB databases and containers through the - resource provider. It blocks the creation of autoscale resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"throughputMax\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"Max - RUs\",\"description\":\"The maximum throughput (RU/s) that can be assigned - to a container via the Resource Provider during create or update.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"anyOf\":[{\"field\":\"type\",\"like\":\"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings\"},{\"field\":\"type\",\"in\":[\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases\",\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases\",\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases\",\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces\",\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables\",\"Microsoft.DocumentDB/databaseAccounts/tables\"]}]},{\"anyOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-08-01\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"},{\"value\":\"[if(equals(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'), - ''), 0, int(field('Microsoft.DocumentDB/databaseAccounts/tables/options.throughput')))]\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/options\",\"containsKey\":\"ProvisionedThroughputSettings\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput\",\"greater\":\"[parameters('throughputMax')]\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1239 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1239\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0be51298-f643-4556-88af-d7db90794879\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0be51298-f643-4556-88af-d7db90794879\"},{\"properties\":{\"displayName\":\"Ensure - API app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c192fe8-9cbb-4516-85b3-0ade8bd03886\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Automation Accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0c2b3618-68a8-4034-a150-ff4abc873462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1496 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1496\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ca96127-2f87-46ab-a4fc-0d2a786df1c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ca96127-2f87-46ab-a4fc-0d2a786df1c8\"},{\"properties\":{\"displayName\":\"SQL - servers should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/encryptionProtector\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/encryptionProtector/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/servers/encryptionProtector/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d134df8-db83-46fb-ad72-fe0c9428c8dd\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for IoT Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d40b058-9f95-4a19-93e3-9b0330baa2a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1518 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1518\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d58f734-c052-40e9-8b2f-a1c2bff0b815\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d58f734-c052-40e9-8b2f-a1c2bff0b815\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1713 - Software, Firmware, And Information Integrity | Integrity - Checks\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1713\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d87c70b-5012-48e9-994b-e70dd4b8def0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d87c70b-5012-48e9-994b-e70dd4b8def0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1466 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1466\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d943a9c-a6f1-401f-a792-740cdb09c451\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d943a9c-a6f1-401f-a792-740cdb09c451\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which Windows Defender Exploit Guard - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0da106f2-4ca3-48e8-bc85-c638fe6aea8f\"},{\"properties\":{\"displayName\":\"Deploy - a flow log resource with target network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"nsgRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NSG - Region\",\"description\":\"This Policy will review NSGs only in the selected - region. You can create other assignments to include other regions.\",\"strongType\":\"location\"}},\"storageId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - id\",\"description\":\"A string with the storage id for the flowlogs to be - sent to. It will be used for deployment purposes only. Make sure this storage - account is located in the same region as the NSG. The format must be: '/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}\",\"assignPermissions\":\"true\"}},\"networkWatcherRG\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watchers RG\",\"description\":\"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.\",\"strongType\":\"existingResourceGroups\"}},\"networkWatcherName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Watcher name\",\"description\":\"The name of the network watcher under which - the flowLog resources will be created. Make sure it belongs to the same region - as the NSG.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"field\":\"location\",\"equals\":\"[parameters('nsgRegion')]\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers/flowlogs\",\"resourceGroupName\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\",\"name\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id'))), - 'null/null', concat(split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8], '/', split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10]))]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/storageId\",\"equals\":\"[parameters('storageId')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageId\":{\"type\":\"String\"},\"networkWatcherRG\":{\"type\":\"String\"},\"networkWatcherName\":{\"type\":\"String\"},\"flowlogName\":{\"type\":\"String\"},\"location\":{\"type\":\"String\"},\"targetResource\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[concat('flowlogDeployment-', - uniqueString(parameters('flowlogName')))]\",\"apiVersion\":\"2019-10-01\",\"resourceGroup\":\"[parameters('networkWatcherRG')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"resources\":[{\"type\":\"Microsoft.Network/networkWatchers/flowLogs\",\"name\":\"[concat(parameters('networkWatcherName'), - '/', parameters('flowlogName'))]\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"targetResourceId\":\"[parameters('targetResource')]\",\"storageId\":\"[parameters('storageId')]\",\"enabled\":\"true\",\"retentionPolicy\":{\"days\":\"0\",\"enabled\":\"false\"}}}]}}}]},\"parameters\":{\"storageId\":{\"value\":\"[parameters('storageId')]\"},\"networkWatcherRG\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherRG'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[4])]\"},\"networkWatcherName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - parameters('networkWatcherName'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[8])]\"},\"flowlogName\":{\"value\":\"[if(empty(coalesce(field('Microsoft.Network/networkSecurityGroups/flowLogs'))), - concat(field('name'), '-', resourceGroup().name, '-', 'flowlog'), split(first(field('Microsoft.Network/networkSecurityGroups/flowLogs[*].id')), - '/')[10])]\"},\"location\":{\"value\":\"[field('location')]\"},\"targetResource\":{\"value\":\"[concat(resourceGroup().id, - '/providers/Microsoft.Network/networkSecurityGroups/', field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0db34a60-64f4-4bf6-bd44-f95c16cf34b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1718 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1718\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0dced7ab-9ce5-4137-93aa-14c13e06ab17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0dced7ab-9ce5-4137-93aa-14c13e06ab17\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure File Sync to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Azure File Sync's internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"Audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"value\":\"AllowVirtualNetworksOnly\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e07b2e9-6cd9-4c40-9ccb-52817b95133b\"},{\"properties\":{\"displayName\":\"Authorized - IP ranges should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges\",\"exists\":\"false\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Function Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e60b895-3786-45da-8377-9c6b4b6ac5f9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Key Vault provides an additional layer of protection and security - intelligence by detecting unusual and potentially harmful attempts to access - or exploit key vault accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KeyVaults\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0e6763cc-5078-4e64-889d-ff4d9a839047\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MariaDB\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ec47710-77ff-4a3d-9181-6aa50af424d0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Windows VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ecd903d-91e7-4726-83d3-a229d7f2e293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1601 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1601\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ee79a0c-addf-4ce9-9b3c-d9576ed5e20e\"},{\"properties\":{\"displayName\":\"Configure - Batch accounts with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"batchAccount\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0ef5aac7-c064-427a-b87b-d47b3ddcaf73\"},{\"properties\":{\"displayName\":\"[Preview]: - Audit Azure Spring Cloud instances where distributed tracing is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"App - Platform\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"anyOf\":[{\"field\":\"Microsoft.AppPlatform/Spring/trace.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.AppPlatform/Spring/trace.state\",\"notEquals\":\"Succeeded\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f2d8593-4667-4932-acca-6a9f187af109\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1476 - Fire Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1476\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f3c4ac2-3e35-4906-a80b-473b12a622d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f3c4ac2-3e35-4906-a80b-473b12a622d7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1204 - Access Restrictions For Change | Review System Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1204\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f4f6750-d1ab-4a4c-8dfd-af3237682665\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f4f6750-d1ab-4a4c-8dfd-af3237682665\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1430 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1430\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f559588-5e53-4b14-a7c4-85d28ebc2234\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f559588-5e53-4b14-a7c4-85d28ebc2234\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1574 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1574\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0f935dab-83d6-47b8-85ef-68b8584161b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0f935dab-83d6-47b8-85ef-68b8584161b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1164 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1164\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fb8d3ce-9e96-481c-9c68-88d4e3019310\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fb8d3ce-9e96-481c-9c68-88d4e3019310\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1017 - Account Management | Inactivity Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1017\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fc3db37-e59a-48c1-84e9-1780cedb409e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fc3db37-e59a-48c1-84e9-1780cedb409e\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"count\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fda3595-9f2b-4592-8675-4231d6fa82fe\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Container registries\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fdf0491-d080-4575-b627-ad0e843cba0f\"},{\"properties\":{\"displayName\":\"CORS - should not allow every domain to access your API for FHIR\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"not\":{\"field\":\"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]\",\"notEquals\":\"*\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"0fea8f8a-4169-495d-8307-30ec335f387d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1087 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1087\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/100c82ba-42e9-4d44-a2ba-94b209248583\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"100c82ba-42e9-4d44-a2ba-94b209248583\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not contain the specified - certificates in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs that - do not contain the specified certificates in the Trusted Root Certification - Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints\",\"description\":\"A semicolon-separated list of - certificate thumbprints that should exist under the Trusted Root certificate - store (Cert:\\\\LocalMachine\\\\Root). e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsCertificateInTrustedRoot\"},\"CertificateThumbprints\":{\"value\":\"[parameters('CertificateThumbprints')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateThumbprints\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprints')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"106ccbe4-a791-4f33-a44a-06796944b8d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1554 - Vulnerability Scanning | Discoverable Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1554\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10984b4e-c93e-48d7-bf20-9c03b04e9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10984b4e-c93e-48d7-bf20-9c03b04e9eca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10c1859c-e1a7-4df3-ab97-a487fa8059f6\"},{\"properties\":{\"displayName\":\"Custom - subscription owner roles should not exist\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that no custom subscription owner roles exist.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/permissions.actions[*]\",\"notEquals\":\"*\"}}]},{\"anyOf\":[{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notIn\":[\"[concat(subscription().id,'/')]\",\"[subscription().id]\",\"/\"]}},{\"not\":{\"field\":\"Microsoft.Authorization/roleDefinitions/assignableScopes[*]\",\"notLike\":\"/providers/Microsoft.Management/*\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1230 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1230\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11158848-f679-4e9b-aa7b-9fb07d945071\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11158848-f679-4e9b-aa7b-9fb07d945071\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1432 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1432\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1140e542-b80d-4048-af45-3f7245be274b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1140e542-b80d-4048-af45-3f7245be274b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure IoT Hubs to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"114eec6e-5e59-4bad-999d-6eceeb39d582\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage or enable data encryption.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11566b39-f7f7-4b82-ab06-68d8700eb0a4\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"11ac78e3-31bc-4f0c-8434-37ab963cea07\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System settings' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"version\":\"1.*\",\"configurationParameter\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies\",\"description\":\"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12017595-5a75-4bb1-9d97-4c2c939ea3c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1655 - Voice Over Internet Protocol\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1655\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/121eab72-390e-4629-a7e2-6d6184f57c6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"121eab72-390e-4629-a7e2-6d6184f57c6b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Security' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"NetworkSecurityLANManagerAuthenticationLevel\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"NetworkSecurityLDAPClientSigningRequirements\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LAN Manager authentication level\",\"description\":\"Specify which - challenge-response authentication protocol is used for network logons. This - choice affects the level of authentication protocol used by clients, the level - of session security negotiated, and the level of authentication accepted by - servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: LDAP client signing requirements\",\"description\":\"Specify the - level of data signing that is requested on behalf of clients that issue LDAP - BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients\",\"description\":\"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers\",\"description\":\"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1221c620-d201-468c-81e7-2817e6107e84\"},{\"properties\":{\"displayName\":\"Allowlist - rules in your adaptive application control policy should be updated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center's adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"1234abcd-1b53-4fd4-9835-2c2fa3935313\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"123a3936-f020-408a-ba0c-47873faf1534\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Application Gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12430be1-6cc8-4527-a9a8-e3d38f250096\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1681 - Malicious Code Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1681\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12623e7e-4736-4b2e-b776-c1600f35f93a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12623e7e-4736-4b2e-b776-c1600f35f93a\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use Key Vault for storing secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"exists\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"PWD=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"Password=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"CredString=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"pwd=\"}]}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type\",\"equals\":\"SecureString\"}]},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type\",\"equals\":\"SecureString\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type\",\"equals\":\"SecureString\"},{\"allOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"MongoDbAtlas\",\"MongoDbV2\"]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type\",\"notEquals\":\"AzureKeyVaultSecret\"}]},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type\",\"equals\":\"SecureString\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type\",\"equals\":\"SecureString\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"127ef6d7-242f-43b3-9eef-947faf1725d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1240 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1240\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/129eb39f-d79a-4503-84cd-92f036b5e429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"129eb39f-d79a-4503-84cd-92f036b5e429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System objects'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemobjects\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12ae2d24-3805-4b37-9fa9-465968bfbcfa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1666 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1666\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12e30ee3-61e6-4509-8302-a871e8ebb91e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12e30ee3-61e6-4509-8302-a871e8ebb91e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WhitelistedApplication\"},\"installedApplication\":{\"value\":\"[parameters('installedApplication')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"installedApplication\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]bwhitelistedapp;Name\",\"value\":\"[parameters('installedApplication')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1347 - Identification And Authentication (Non-Org. Users) - | Acceptance Of PIV Creds. From Other Agys.\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1347\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/131a2706-61e9-4916-a164-00e052056462\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"131a2706-61e9-4916-a164-00e052056462\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1450 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1450\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/134d7a13-ba3e-41e2-b236-91bfcfa24e01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"134d7a13-ba3e-41e2-b236-91bfcfa24e01\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1184 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1184\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13579d0e-0ab0-4b26-b0fb-d586f6d7ed20\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure machines to receive the Qualys vulnerability assessment agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don't need a Qualys license or even a Qualys account - everything's handled - seamlessly inside Security Center. Machines which don't have the Qualys vulnerability - assessment agent deployed automatically receive the agent if this policy is - enabled.\",\"metadata\":{\"category\":\"Security Center\",\"preview\":true,\"version\":\"2.0.0-preview\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]},\"deployment\":{\"properties\":{\"mode\":\"Incremental\",\"template\":{\"contentVersion\":\"1.0.0.0\",\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"parameters\":{\"vmName\":{\"type\":\"String\"},\"resourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.compute/virtualmachines'))]\",\"type\":\"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"},{\"condition\":\"[equals(toLower(parameters('resourceType')), - toLower('microsoft.hybridcompute/machines'))]\",\"type\":\"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.Security/default')]\",\"apiVersion\":\"2020-01-01\"}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"resourceType\":{\"value\":\"[field('type')]\"}}}},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13ce0167-8ca6-4048-8e6b-f996402e3c1b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1085 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1085\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d117e0-38b0-4bbb-aaab-563be5dd10ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d117e0-38b0-4bbb-aaab-563be5dd10ba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1404 - Maintenance Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1404\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13d8f903-0cd6-449f-a172-50f6579c182b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13d8f903-0cd6-449f-a172-50f6579c182b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1695 - Information System Monitoring | Wireless Intrusion - Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1695\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/13fcf812-ec82-4eda-9b89-498de9efd620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"13fcf812-ec82-4eda-9b89-498de9efd620\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that contain certificates expiring within the specified number - of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"CertificateExpiration\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateStorePath\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"ExpirationLimitInDays\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"CertificateThumbprintsToInclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"CertificateThumbprintsToExclude\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"IncludeExpiredCertificates\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - store path\",\"description\":\"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is 'Cert:' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: 'Cert:\\\\LocalMachine', 'Cert:\\\\LocalMachine\\\\TrustedPublisher', - 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Expiration - limit in days\",\"description\":\"An integer indicating the number of days - within which to check for certificates that are expiring. For example, if - this value is 30, any certificate expiring within the next 30 days will cause - this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to include\",\"description\":\"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints to exclude\",\"description\":\"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - expired certificates\",\"description\":\"Must be 'true' or 'false'. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1417908b-4bff-46ee-a2a6-4acc899320ab\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group contains - any of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to exclude\",\"description\":\"A semicolon-separated list of members - that should be excluded in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToExclude\"},\"MembersToExclude\":{\"value\":\"[parameters('MembersToExclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToExclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\",\"value\":\"[parameters('MembersToExclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"144f1397-32f9-4598-8c88-118decc3ccba\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityWindowsAgent\":\"[concat('deployAzureSecurityWindowsAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityWindowsAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityWindowsAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1537496a-b1e8-482b-a06a-1cc2415cdc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1157 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1157\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/15495367-cf68-464c-bbc3-f53ca5227b7a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"15495367-cf68-464c-bbc3-f53ca5227b7a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1491 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1491\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1571dd40-dafc-4ef4-8f55-16eba27efc7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1571dd40-dafc-4ef4-8f55-16eba27efc7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1564 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1564\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/157f0ef9-143f-496d-b8f9-f8c8eeaad801\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"157f0ef9-143f-496d-b8f9-f8c8eeaad801\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a minimum password - age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16390df4-2f73-4b42-af13-c801066763df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1662 - Fail In Known State\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1662\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/165cb91f-7ea8-4ab7-beaf-8636b98c9d15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"165cb91f-7ea8-4ab7-beaf-8636b98c9d15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1684 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1684\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16bfdb59-db38-47a5-88a9-2e9371a638cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16bfdb59-db38-47a5-88a9-2e9371a638cf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16f9b37c-4408-4c30-bc17-254958f2e2d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1103 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1103\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/16feeb31-6377-437e-bbab-d7f73911896d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"16feeb31-6377-437e-bbab-d7f73911896d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1007 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1007\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17200329-bf6c-46d8-ac6d-abf4641c2add\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17200329-bf6c-46d8-ac6d-abf4641c2add\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1349 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Approved Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1349\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17641f70-94cd-4a5d-a613-3d1143e20e34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17641f70-94cd-4a5d-a613-3d1143e20e34\"},{\"properties\":{\"displayName\":\"Deploy - associations for a managed application\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed Application\"},\"parameters\":{\"targetManagedApplicationId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Managed - application ID\",\"description\":\"Resource ID of the managed application - to which resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the managed application.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetManagedApplicationId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetManagedApplicationId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetManagedApplicationId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetManagedApplicationId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetManagedApplicationId\":{\"value\":\"[parameters('targetManagedApplicationId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17763ad9-70c0-4794-9397-53d765932634\"},{\"properties\":{\"displayName\":\"[ASC - Private Preview] Deploy - Configure system-assigned managed identity to enable - Azure Monitor assignments on VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.2.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[if(contains(field('identity.type'), - 'UserAssigned'), concat(field('identity.type'), ',SystemAssigned'), 'SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17b3de92-f710-4cf4-aa55-0e7859f1ed7b\"},{\"properties\":{\"displayName\":\"Transparent - Data Encryption on SQL databases should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"enabled\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"17k78e20-9358-41c9-923c-fb736d382a12\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1325 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1325\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1845796a-7581-49b2-ae20-443121538e19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1845796a-7581-49b2-ae20-443121538e19\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1480 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1480\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18a767cc-1947-4338-a240-bc058c81164f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18a767cc-1947-4338-a240-bc058c81164f\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18adea5e-f416-4d0f-8aa8-d24321e3e274\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1369 - Incident Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1369\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/18cc35ed-a429-486d-8d59-cb47e87304ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"18cc35ed-a429-486d-8d59-cb47e87304ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1269 - Alternate Storage Site | Separation From Primary Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1269\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19b9439d-865d-4474-b17d-97d2702fdb66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19b9439d-865d-4474-b17d-97d2702fdb66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Logon-Logoff' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditGroupMembership\":\"Audit - Group Membership;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Group Membership\",\"description\":\"Specifies whether audit events are generated - when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"19be9779-c776-4dfa-8a15-a2fd5dc843d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1071 - Wireless Access | Restrict Configurations By Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1071\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a437f5b-9ad6-4f28-8861-de404d511ae4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a437f5b-9ad6-4f28-8861-de404d511ae4\"},{\"properties\":{\"displayName\":\"Azure - Monitor log profile should collect logs for categories 'write,' 'delete,' - and 'action'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that a log profile collects logs for categories 'write,' 'delete,' - and 'action'\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logprofiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Write\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Delete\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/categories[*]\",\"notEquals\":\"Action\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a4e592a-6a6e-44a5-9814-e36264ca96e7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Access to App Services should be restricted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"restrictAccessToAppServices\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1a833ff1-d297-4a0f-9944-888428f8e0ff\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1adadefe-5f21-44f7-b931-a59b54ccdb45\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance which doesn't have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b7aa243-30e4-4c9e-bca8-d0d3022b634a\"},{\"properties\":{\"displayName\":\"Public - network access on Azure SQL Database should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1b8ca024-1d5c-4dec-8995-b1a932b41780\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba\"},{\"properties\":{\"displayName\":\"Azure - Service Bus namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c06e275-d63d-4540-b761-71f364c2111d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c210e94-a481-4beb-95fa-1571b434fb04\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1072 - Wireless Access | Antennas / Transmission Power Levels\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1072\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ca29e41-34ec-4e70-aba9-6248aca18c31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ca29e41-34ec-4e70-aba9-6248aca18c31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1656 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1656\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cb067d5-c8b5-4113-a7ee-0a493633924b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cb067d5-c8b5-4113-a7ee-0a493633924b\"},{\"properties\":{\"displayName\":\"Public - network access on Azure Data Factory should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1592 - External Information System Services | Consistent Interests - Of Consumers And Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1592\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d01ba6c-289f-42fd-a408-494b355b6222\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d01ba6c-289f-42fd-a408-494b355b6222\"},{\"properties\":{\"displayName\":\"Azure - File Sync should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization's network, rather than through the internet-accessible - public endpoint. Creating a private endpoint by itself does not disable the - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d320205-c6a1-4ac6-873d-46224024e8e2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1088 - Security Awareness And Training Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1088\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d50f99d-1356-49c0-934a-45f742ba7783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d50f99d-1356-49c0-934a-45f742ba7783\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using no secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires no secrets. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d61c4d2-aef2-432b-87fc-7f96b019b7e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1538 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1538\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d7658b2-e827-49c3-a2ae-6d2bd0b45874\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d7658b2-e827-49c3-a2ae-6d2bd0b45874\"},{\"properties\":{\"displayName\":\"Virtual - machines should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicCompute/virtualMachines\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1d84d5fb-01f6-4d12-ba4f-4a26081d403d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1298 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1298\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1dc784b5-4895-4d27-9d40-a06b032bd1ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1dc784b5-4895-4d27-9d40-a06b032bd1ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1de7b11d-1870-41a5-8181-507e7c663cfb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1595 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1595\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e0414e7-6ef5-4182-8076-aa82fbb53341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e0414e7-6ef5-4182-8076-aa82fbb53341\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - a required tag and its value. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"equals\":\"[parameters('tagValue')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e30110a-5ceb-460c-a204-c1c3969c6d62\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Target sub resource the private endpoint - connects to\"},\"allowedValues\":[\"Dev\",\"Sql\",\"SqlOnDemand\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('targetSubResource')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"synapse-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9\"},{\"properties\":{\"displayName\":\"Key - vaults should have soft delete enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"exists\":\"false\"},{\"field\":\"Microsoft.KeyVault/vaults/enableSoftDelete\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d\"},{\"properties\":{\"displayName\":\"Azure - API for FHIR should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - API for FHIR should have at least one approved private endpoint connection. - Clients in a virtual network can securely access resources that have private - endpoint connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - for FHIR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HealthcareApis/services\"},{\"count\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1ee56206-5dd1-42ab-b02d-8aae8b1634ce\"},{\"properties\":{\"displayName\":\"An - Azure Active Directory administrator should be provisioned for SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/administrators\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f314764-cb73-4fc9-b863-8eca98ac36e9\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be encrypted with customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri\",\"exists\":\"false\"}]},{\"anyOf\":[{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"equals\":\"\"},{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName\",\"exists\":\"false\"}]},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f68a601-6e6d-4e42-babf-3f643a047ea2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f6e93e8-6b31-41b1-83f6-36e449a42579\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Shutdown'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Shutdown: Clear virtual memory pagefile\",\"description\":\"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsShutdown\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},\"ShutdownClearVirtualMemoryPagefile\":{\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"string\"},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"value\":\"[parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn')]\"},{\"name\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\",\"value\":\"[parameters('ShutdownClearVirtualMemoryPagefile')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f8c20ce-3414-4496-8b26-0e902a1541da\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri\",\"exists\":false},{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1f905d99-2ab7-462c-a6b0-f709acca6c8f\"},{\"properties\":{\"displayName\":\"Logic - Apps Integration Service Environment should be encrypted with customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/integrationServiceEnvironments\"},{\"field\":\"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption at host to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1616 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1616\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2006457a-48b3-4f7b-8d2e-1532287f9929\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2006457a-48b3-4f7b-8d2e-1532287f9929\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1650 - Public Key Infrastructure Certificates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1650\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201d3740-bd16-4baf-b4b8-7cda352228b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201d3740-bd16-4baf-b4b8-7cda352228b7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web ports should be restricted on Network Security Groups associated to your - VM\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure security - center has discovered that some of your virtual machines are running web applications, - and the NSGs associated to these virtual machines are overly permissive with - regards to the web application ports\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"unprotectedWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"201ea587-7c90-41c3-910f-c280ae01cfd6\"},{\"properties\":{\"displayName\":\"VM - Image Builder templates should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"VM - Image Builder\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.VirtualMachineImages/imageTemplates\"},{\"field\":\"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2154edb9-244f-4741-9970-660785bccdaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1181 - Baseline Configuration | Retention Of Previous Configurations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1181\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21839937-d241-4fa5-95c6-b669253d9ab9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21839937-d241-4fa5-95c6-b669253d9ab9\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Azure File Sync\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization's - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},{\"field\":\"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy\",\"notEquals\":\"AllowVirtualNetworksOnly\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a8cd35-125e-4d13-b82d-2e19b7208bb7\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21a9766a-82a5-4747-abb5-650b6dbba6d0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1111 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1111\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21de687c-f15e-4e51-bf8d-f35c8619965b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21de687c-f15e-4e51-bf8d-f35c8619965b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1596 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1596\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e25e01-0ae0-41be-919e-04ce92b8e8b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e25e01-0ae0-41be-919e-04ce92b8e8b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Audit'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21e2995e-683e-497a-9e81-2f42ad07050a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1426 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1426\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/21f639bc-f42b-46b1-8f40-7a2a389c291a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"21f639bc-f42b-46b1-8f40-7a2a389c291a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"224da9fe-0d38-4e79-adb3-0a6e2af942ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1399 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1399\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2256e638-eb23-480f-9e15-6cf1af0a76b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2256e638-eb23-480f-9e15-6cf1af0a76b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1221 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1221\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22589a07-0007-486a-86ca-95355081ae2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22589a07-0007-486a-86ca-95355081ae2a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Management'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"225e937e-d32e-4713-ab74-13ce95b3519a\"},{\"properties\":{\"displayName\":\"Management - ports should be closed on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bc303248-3d14-44c2-96a0-55f5c326b5fe\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22730e10-96f6-4aac-ad84-9383d35b5917\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1493 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1493\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22b469b3-fccf-42da-aa3b-a28e6fb113ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22b469b3-fccf-42da-aa3b-a28e6fb113ce\"},{\"properties\":{\"displayName\":\"Only - secure connections to your Azure Cache for Redis should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/enableNonSslPort\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"22bee202-a82f-4305-9a2a-6d7f44d4dedb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not restrict the minimum - password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MinimumPasswordLength\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23020aa6-1135-4be2-bae2-149982b06eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1256 - Contingency Plan | Identify Critical Assets\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1256\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/232ab24b-810b-4640-9019-74a7d0d6a980\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"232ab24b-810b-4640-9019-74a7d0d6a980\"},{\"properties\":{\"displayName\":\"Service - Bus should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"235359c5-7c52-4b82-9055-01c75cf9f60e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a minimum password age of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237b38db-ca4d-4259-9e47-7882441ca2c0\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Automation account so that it isn't accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Automation\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"value\":false}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1268 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1268\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/23f6e984-3053-4dfc-ab48-543b764781f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"23f6e984-3053-4dfc-ab48-543b764781f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1122 - Audit Review, Analysis, And Reporting | Permitted Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1122\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/243ec95e-800c-49d4-ba52-1fdd9f6b8b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"243ec95e-800c-49d4-ba52-1fdd9f6b8b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1231 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1231\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/244e0c05-cc45-4fe7-bf36-42dcf01f457d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"244e0c05-cc45-4fe7-bf36-42dcf01f457d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1082 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1082\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24d480ef-11a0-4b1b-8e70-4e023bf2be23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24d480ef-11a0-4b1b-8e70-4e023bf2be23\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a maximum password age - of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24dde96d-f0b1-425e-884f-4a1421e2dcdc\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"24fba194-95d6-48c0-aea7-f65bf859c598\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25763a0a-5783-4f14-969e-79d4933eb74b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1372 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1372\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/25b96717-c912-4c00-9143-4e487f411726\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"25b96717-c912-4c00-9143-4e487f411726\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1038 - Least Privilege | Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1038\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26692e88-71b7-4a5f-a8ac-9f31dd05bd8e\"},{\"properties\":{\"displayName\":\"Endpoint - protection solution should be installed on virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e71020c2-860c-3235-cd39-04f3f8c936d2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26a828e1-e88f-464e-bbb3-c134a282b9de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1649 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1649\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26d292cc-b0b8-4c29-9337-68abc758bf7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26d292cc-b0b8-4c29-9337-68abc758bf7b\"},{\"properties\":{\"displayName\":\"Metric - alert rules should be configured on Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - configuration of metric alert rules on Batch account to enable the required - metric\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"metricName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Metric - name\",\"description\":\"The metric name that an alert rule must be enabled - on\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/alertRules\",\"existenceScope\":\"Subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/alertRules/isEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.metricName\",\"equals\":\"[parameters('metricName')]\"},{\"field\":\"Microsoft.Insights/alertRules/condition.dataSource.resourceUri\",\"equals\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourcegroups/', resourceGroup().name, '/providers/Microsoft.Batch/batchAccounts/', - field('name'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7\"},{\"properties\":{\"displayName\":\"Configure - virtual machines to be onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1396 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1396\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/276af98f-4ff9-4e69-99fb-c9b2452fb85f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"276af98f-4ff9-4e69-99fb-c9b2452fb85f\"},{\"properties\":{\"displayName\":\"Flow - logs should be enabled for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkWatchers/flowLogs\"},{\"field\":\"Microsoft.Network/networkWatchers/flowLogs/enabled\",\"equals\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27960feb-a23c-4577-8d36-ef8b5f35e0be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1074 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1074\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/27a69937-af92-4198-9b86-08d355c7e59a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"27a69937-af92-4198-9b86-08d355c7e59a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1527 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1527\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2823de66-332f-4bfd-94a3-3eb036cd3b67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2823de66-332f-4bfd-94a3-3eb036cd3b67\"},{\"properties\":{\"displayName\":\"Deploy - default Microsoft IaaSAntimalware extension for Windows Server\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"ExclusionsPaths\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file paths or locations to exclude from scanning\"}},\"ExclusionsExtensions\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of file extensions to exclude from scanning\"}},\"ExclusionsProcesses\":{\"type\":\"string\",\"defaultValue\":\"\",\"metadata\":{\"description\":\"Semicolon - delimited list of process names to exclude from scanning\"}},\"RealtimeProtectionEnabled\":{\"type\":\"string\",\"defaultValue\":\"true\",\"metadata\":{\"description\":\"Indicates - whether or not real time protection is enabled (default is true)\"}},\"ScheduledScanSettingsIsEnabled\":{\"type\":\"string\",\"defaultValue\":\"false\",\"metadata\":{\"description\":\"Indicates - whether or not custom scheduled scan settings are enabled (default is false)\"}},\"ScheduledScanSettingsScanType\":{\"type\":\"string\",\"defaultValue\":\"Quick\",\"metadata\":{\"description\":\"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)\"}},\"ScheduledScanSettingsDay\":{\"type\":\"string\",\"defaultValue\":\"7\",\"metadata\":{\"description\":\"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)\"}},\"ScheduledScanSettingsTime\":{\"type\":\"string\",\"defaultValue\":\"120\",\"metadata\":{\"description\":\"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM.\"}}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/IaaSAntimalware')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security\",\"type\":\"IaaSAntimalware\",\"typeHandlerVersion\":\"1.3\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"AntimalwareEnabled\":true,\"RealtimeProtectionEnabled\":\"[parameters('RealtimeProtectionEnabled')]\",\"ScheduledScanSettings\":{\"isEnabled\":\"[parameters('ScheduledScanSettingsIsEnabled')]\",\"day\":\"[parameters('ScheduledScanSettingsDay')]\",\"time\":\"[parameters('ScheduledScanSettingsTime')]\",\"scanType\":\"[parameters('ScheduledScanSettingsScanType')]\"},\"Exclusions\":{\"Extensions\":\"[parameters('ExclusionsExtensions')]\",\"Paths\":\"[parameters('ExclusionsPaths')]\",\"Processes\":\"[parameters('ExclusionsProcesses')]\"}}}}]},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"RealtimeProtectionEnabled\":{\"value\":\"true\"},\"ScheduledScanSettingsIsEnabled\":{\"value\":\"true\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2835b622-407b-4114-9198-6f7064cbe0dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1342 - Authenticator Management | Hardware Token-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1342\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/283a4e29-69d5-4c94-b99e-29acf003c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"283a4e29-69d5-4c94-b99e-29acf003c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1436 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1436\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28aab8b4-74fd-4b7c-9080-5a7be525d574\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28aab8b4-74fd-4b7c-9080-5a7be525d574\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Sql/servers/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1224 - Information System Component Inventory | Updates During - Installations / Removals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1224\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28cfa30b-7f72-47ce-ba3b-eed26c8d2c82\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1148 - Security Assessments | Independent Assessors\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1148\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e62650-c7c2-4786-bdfa-17edc1673902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e62650-c7c2-4786-bdfa-17edc1673902\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1418 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1418\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/28e633fd-284e-4ea7-88b4-02ca157ed713\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"28e633fd-284e-4ea7-88b4-02ca157ed713\"},{\"properties\":{\"displayName\":\"Azure - Defender for App Service should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for App Service leverages the scale of the cloud, and the visibility - that Azure has as a cloud provider, to monitor for common web app attacks.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"AppServices\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2913021d-f2fd-4f3d-b958-22354e2bdbcb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1634 - Boundary Protection | Prevent Unauthorized Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1634\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/292a7c44-37fa-4c68-af7c-9d836955ded2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"292a7c44-37fa-4c68-af7c-9d836955ded2\"},{\"properties\":{\"displayName\":\"Service - Bus Premium namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"},{\"not\":{\"field\":\"Microsoft.ServiceBus/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"295fc8b1-dc9f-4f53-9c61-3f313ceab40a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - User Account Control'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"29829ec2-489d-4925-81b7-bda06b1718e0\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a0e14a6-b0a6-4fab-991a-187a4f81c498\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access using virtual network rules\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"count\":{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]\"},\"greaterOrEquals\":1}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1219 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1219\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a39ac75-622b-4c88-9a3f-45b7373f7ef7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a39ac75-622b-4c88-9a3f-45b7373f7ef7\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Policy Change' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditAuthenticationPolicyChange\":\"Audit - Authentication Policy Change;ExpectedValue\",\"AuditAuthorizationPolicyChange\":\"Audit - Authorization Policy Change;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authentication Policy Change\",\"description\":\"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Authorization Policy Change\",\"description\":\"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2a7a701e-dff3-4da9-9ec5-42cb98594c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1274 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1274\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2aee175f-cd16-4825-939a-a85349d96210\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2aee175f-cd16-4825-939a-a85349d96210\"},{\"properties\":{\"displayName\":\"Synapse - workspace auditing settings should have action groups configured to capture - critical activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b18f286-371e-4b80-9887-04759970c0d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1603 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1603\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b909c26-162f-47ce-8e15-0c1f55632eac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b909c26-162f-47ce-8e15-0c1f55632eac\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2b9ad585-36bc-4615-b300-fd4435808332\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2bdd0062-9d75-436e-89df-487dd8e4b3c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1434 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1434\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c18f06b-a68d-41c3-8863-b8cd3acb5f8f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1343 - Authenticator Management | Expiration Of Cached Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1343\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c251a55-31eb-4e53-99c6-e9c43c393ac2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c251a55-31eb-4e53-99c6-e9c43c393ac2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1388 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1388\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c7c575a-d4c5-4f6f-bd49-dee97a8cba55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1344 - Authenticator Feedback\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1344\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c895fe7-2d8e-43a2-838c-3a533a5b355e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c895fe7-2d8e-43a2-838c-3a533a5b355e\"},{\"properties\":{\"displayName\":\"SSH - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows SSH access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"22\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),22)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),22)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"22\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fab\"},{\"properties\":{\"displayName\":\"Unattached - disks should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any unattached disk without encryption enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/diskState\",\"equals\":\"Unattached\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/disks/encryptionSettingsCollection.enabled\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2c89a2e5-7285-40fe-afe0-ae8654b92fb2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1593 - External Information System Services | Processing, - Storage, And Service Location\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1593\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cd0a426-b5f5-4fe0-9539-a6043cdbc6fa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1546 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1546\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce1ea7e-4038-4e53-82f4-63e8859333c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce1ea7e-4038-4e53-82f4-63e8859333c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1414 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1414\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ce63a52-e47b-4ae2-adbb-6e40d967f9e6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1679 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1679\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2cf42a28-193e-41c5-98df-7688e7ef0a88\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2cf42a28-193e-41c5-98df-7688e7ef0a88\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1068 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1068\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d045bca-a0fd-452e-9f41-4ec33769717c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d045bca-a0fd-452e-9f41-4ec33769717c\"},{\"properties\":{\"displayName\":\"App - Service should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any App Service not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/virtualNetworkConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d21331d-a4c2-4def-a9ad-ee4e1e023beb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1704 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1704\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d44b6fa-1134-4ea6-ad4e-9edb68f65429\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d44b6fa-1134-4ea6-ad4e-9edb68f65429\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not store passwords using reversible - encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d60d3b7-aa10-454c-88a8-de39d99d17c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that allow remote connections from accounts - without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d67222d-05fd-4526-a171-2ee132ad9e83\"},{\"properties\":{\"displayName\":\"Public - network access on Azure IoT Hub should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"field\":\"Microsoft.Devices/IotHubs/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure IoT Hub should use customer-managed key to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},{\"count\":{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"lessOrEquals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54\"},{\"properties\":{\"displayName\":\"Managed - workspace virtual network on Azure Synapse workspaces should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetwork\",\"notEquals\":\"default\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2d9dbfa3-927b-4cf0-9d0f-08747f971650\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1077 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1077\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2dad3668-797a-412e-a798-07d3849a7a79\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2dad3668-797a-412e-a798-07d3849a7a79\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1149 - Security Assessments | Specialized Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1149\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e1b855b-a013-481a-aeeb-2bcb129fd35d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e1b855b-a013-481a-aeeb-2bcb129fd35d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1497 - System Security Plan | Plan / Coordinate With Other - Organizational Entities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1497\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2e3c5583-1729-4d36-8771-59c32f090a22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2e3c5583-1729-4d36-8771-59c32f090a22\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1000 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1000\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2ef3cc79-733e-48ed-ab6f-7bf439e9b406\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2ef3cc79-733e-48ed-ab6f-7bf439e9b406\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1519 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1519\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f13915a-324c-4ab8-b45c-2eefeeefb098\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f13915a-324c-4ab8-b45c-2eefeeefb098\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - System objects' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f262ace-812a-4fd0-b731-b38ba9e9708d\"},{\"properties\":{\"displayName\":\"[Preview]: - Network traffic data collection agent should be installed on Windows virtual - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.\",\"metadata\":{\"version\":\"1.0.1-preview\",\"category\":\"Monitoring\",\"preview\":\"true\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable Dependency Agent for Windows - VMs monitoring\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2f2ee1de-44aa-4762-b6bd-0893fc3f306d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1144 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1144\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fa15ff1-a693-4ee4-b094-324818dc9a51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fa15ff1-a693-4ee4-b094-324818dc9a51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1090 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1090\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fb740e5-cbc7-4d10-8686-d1bf826652b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fb740e5-cbc7-4d10-8686-d1bf826652b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForWebApplication\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2fde8a98-6892-426a-83ba-050e640c0ce0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Access'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30040dab-4e75-4456-8273-14b8f75d91d9\"},{\"properties\":{\"displayName\":\"Azure - Defender for Storage should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Storage provides detections of unusual and potentially harmful - attempts to access or exploit storage accounts.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"StorageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"308fbb08-4ab8-4e67-9b29-592e93fb94fa\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cache for Redis resource so that it's - not accessible over the public internet. This helps protect the cache against - data leakage risks.\",\"metadata\":{\"category\":\"Cache\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17\"],\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-06-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30b3dfa5-a70d-4c8e-bed6-0083858f663d\"},{\"properties\":{\"displayName\":\"Audit - Windows machines missing any of specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToInclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToInclude\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to include\",\"description\":\"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not joined to the specified - domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Domain Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDomainMembership\"},\"DomainName\":{\"value\":\"[parameters('DomainName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DomainName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[DomainMembership]WindowsDomainMembership;DomainName\",\"value\":\"[parameters('DomainName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"315c850a-272d-4502-8935-b79010405970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1042 - Least Privilege | Auditing Use Of Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1042\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"319dc4f0-0fed-4ac9-8fc3-7aeddee82c07\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1698 - Information System Monitoring | Individuals Posing - Greater Risk\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1698\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/31b752c1-05a9-432a-8fce-c39b56550119\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"31b752c1-05a9-432a-8fce-c39b56550119\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics Agent should be enabled for listed virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope\",\"description\":\"Example value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32133ab0-ee4b-4b44-98d6-042180979d50\"},{\"properties\":{\"displayName\":\"API - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"324c7761-08db-4474-9661-d1039abc92ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1587 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1587\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32820956-9c6d-4376-934c-05cd8525be7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32820956-9c6d-4376-934c-05cd8525be7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1333 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1333\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3298d6bf-4bc6-4278-a95d-f7ef3ac6e594\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the specified services - are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and 'Running'. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Service names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the services that should be installed and 'Running'. - e.g. 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsServiceStatus\"},\"ServiceName\":{\"value\":\"[parameters('ServiceName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ServiceName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\",\"value\":\"[parameters('ServiceName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32b1e4d4-6cd5-47b4-a935-169da8a5c262\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1445 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1445\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32d07d59-2716-4972-b37b-214a67ac4a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32d07d59-2716-4972-b37b-214a67ac4a37\"},{\"properties\":{\"displayName\":\"Azure - SQL Database should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/servers/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"32e6bbec-16b6-44c2-be37-c5b672d103cf\"},{\"properties\":{\"displayName\":\"Deploy - the Linux Guest Configuration extension to enable Guest Configuration assignments - on Linux VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"331e8ea8-378a-410f-a2e5-ae22f38bb0da\"},{\"properties\":{\"displayName\":\"MySQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3375856c-3824-4e0e-ae6a-79e011dd4c47\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Audit' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit: - Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"33936777-f2ac-45aa-82ec-07958ec9ade4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1282 - Telecommunications Services | Single Points Of Failure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1282\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34042a97-ec6d-4263-93d2-8c1c46823b2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34042a97-ec6d-4263-93d2-8c1c46823b2a\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to an existing recovery - services vault in the same location\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally include - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"vaultLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Location (Specify the location of the VMs that you want to protect)\",\"description\":\"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral\",\"strongType\":\"location\"}},\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"backupPolicyId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)\",\"description\":\"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/\",\"strongType\":\"Microsoft.RecoveryServices/vaults/backupPolicies\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"field\":\"location\",\"equals\":\"[parameters('vaultLocation')]\"},{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[concat('DeployProtection-',uniqueString(parameters('protectedItems')))]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 4))]\",\"subscriptionId\":\"[first(skip(split(parameters('backupPolicyId'), - '/'), 2))]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"backupPolicyId\":{\"type\":\"String\"},\"fabricName\":{\"type\":\"String\"},\"protectionContainers\":{\"type\":\"String\"},\"protectedItems\":{\"type\":\"String\"},\"sourceResourceId\":{\"type\":\"String\"}},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"name\":\"[concat(first(skip(split(parameters('backupPolicyId'), - '/'), 8)), '/', parameters('fabricName'), '/',parameters('protectionContainers'), - '/', parameters('protectedItems'))]\",\"apiVersion\":\"2016-06-01\",\"properties\":{\"protectedItemType\":\"Microsoft.Compute/virtualMachines\",\"policyId\":\"[parameters('backupPolicyId')]\",\"sourceResourceId\":\"[parameters('sourceResourceId')]\"}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"[parameters('fabricName')]\"},\"protectionContainers\":{\"value\":\"[parameters('protectionContainers')]\"},\"protectedItems\":{\"value\":\"[parameters('protectedItems')]\"},\"sourceResourceId\":{\"value\":\"[parameters('sourceResourceId')]\"}}}}]},\"parameters\":{\"backupPolicyId\":{\"value\":\"[parameters('backupPolicyId')]\"},\"fabricName\":{\"value\":\"Azure\"},\"protectionContainers\":{\"value\":\"[concat('iaasvmcontainer;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"protectedItems\":{\"value\":\"[concat('vm;iaasvmcontainerv2;', - resourceGroup().name, ';' ,field('name'))]\"},\"sourceResourceId\":{\"value\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', resourceGroup().name, '/providers/Microsoft.Compute/virtualMachines/',field('name'))]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"345fa903-145c-4fe1-8bcd-93ec2adccde8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid232\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3470477a-b35a-49db-aca5-1073d04524fe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1151 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1151\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/347e3b69-7fb7-47df-a8ef-71a1a7b44bca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"347e3b69-7fb7-47df-a8ef-71a1a7b44bca\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should allow outbound data traffic only to approved targets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3484ce98-c0c5-4c83-994b-c5ac24785218\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1412 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1412\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3492d949-0dbb-4589-88b3-7b59601cc764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3492d949-0dbb-4589-88b3-7b59601cc764\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1475 - Emergency Lighting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1475\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a63848-30cf-4081-937e-ce1a1c885501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a63848-30cf-4081-937e-ce1a1c885501\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1060 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1060\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34a987fd-2003-45de-a120-014956581f2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34a987fd-2003-45de-a120-014956581f2b\"},{\"properties\":{\"displayName\":\"Storage - accounts should restrict network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Network - access to storage accounts should be restricted. Configure network rules so - only applications from allowed networks can access the storage account. To - allow connections from specific internet or on-premises clients, access can - be granted to traffic from specific Azure virtual networks or to public internet - IP address ranges\",\"metadata\":{\"version\":\"1.1.1\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34c877ad-507e-4c82-993e-3452a6e0ad3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1341 - Authenticator Management | Multiple Information System - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1341\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34cb7e92-fe4c-4826-b51e-8cd203fa5d35\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34cb7e92-fe4c-4826-b51e-8cd203fa5d35\"},{\"properties\":{\"displayName\":\"Resource - logs in Logic Apps should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"34f95f76-5386-4de7-b824-0d8478470c9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1210 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1210\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3502c968-c490-4570-8167-1476f955e9b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3502c968-c490-4570-8167-1476f955e9b8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have a maximum password - age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MaximumPasswordAge\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"356a906e-05e5-4625-8729-90771e0ee934\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Object Access' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditDetailedFileShare\":\"Audit - Detailed File Share;ExpectedValue\",\"AuditFileShare\":\"Audit File Share;ExpectedValue\",\"AuditFileSystem\":\"Audit - File System;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File Share\",\"description\":\"Specifies whether to audit events related to - file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35781875-8026-4628-b19b-f6efb4d88a1d\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1659 - Architecture And Provisioning For Name / Address Resolution - Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1659\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35a4102f-a778-4a2e-98c2-971056288df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35a4102f-a778-4a2e-98c2-971056288df8\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Firewall Properties' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"version\":\"1.*\",\"configurationParameter\":{\"WindowsFirewallDomainUseProfileSettings\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"WindowsFirewallDomainBehaviorForOutboundConnections\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallDomainApplyLocalFirewallRules\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallDomainDisplayNotifications\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPrivateUseProfileSettings\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"WindowsFirewallPrivateBehaviorForOutboundConnections\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPrivateApplyLocalFirewallRules\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPrivateDisplayNotifications\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallPublicUseProfileSettings\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"WindowsFirewallPublicBehaviorForOutboundConnections\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"WindowsFirewallPublicApplyLocalFirewallRules\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"WindowsFirewallPublicDisplayNotifications\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"WindowsFirewallDomainAllowUnicastResponse\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"WindowsFirewallPrivateAllowUnicastResponse\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"WindowsFirewallPublicAllowUnicastResponse\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Domain): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Private): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Use profile settings\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall (Public): Display notifications\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Domain: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Private: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Windows - Firewall: Public: Allow unicast response\",\"description\":\"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35d9882c-993d-44e6-87d2-db66ce21b636\"},{\"properties\":{\"displayName\":\"Gateway - subnets should not be configured with a network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},{\"field\":\"name\",\"equals\":\"GatewaySubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"35f9c03a-cc27-418e-9c0c-539ff999d010\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1043 - Least Privilege | Prohibit Non-Privileged Users From - Executing Privileged Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1043\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361a77f6-0f9c-4748-8eec-bc13aaaa2455\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361a77f6-0f9c-4748-8eec-bc13aaaa2455\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection on Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection on Storage Accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"storageAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('storageAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"storageAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"361c2074-3595-4e5d-8cab-4f21dffc835c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1313 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1313\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36220f5b-79a1-4cdb-8c74-2d2449f9a510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36220f5b-79a1-4cdb-8c74-2d2449f9a510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1630 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1630\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3643717a-3897-4bfd-8530-c7c96b26b2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3643717a-3897-4bfd-8530-c7c96b26b2a0\"},{\"properties\":{\"displayName\":\"Automation - account variables should be encrypted\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is important to enable encryption of Automation account variable assets when - storing sensitive data\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts/variables\"},{\"field\":\"Microsoft.Automation/automationAccounts/variables/isEncrypted\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3657f5a0-770e-44a3-b44e-9431ba1e9735\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1339 - Authenticator Management | Protection Of Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1339\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/367ae386-db7f-4167-b672-984ff86277c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"367ae386-db7f-4167-b672-984ff86277c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1685 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1685\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36b0ef30-366f-4b1b-8652-a3511df11f53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36b0ef30-366f-4b1b-8652-a3511df11f53\"},{\"properties\":{\"displayName\":\"Deploy - Threat Detection on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures that Threat Detection is enabled on SQL Servers.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36d49e87-48c4-4f2e-beed-ba4ed02b71f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Security'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos\",\"description\":\"Specifies - the encryption types that Kerberos is allowed to use.\"}},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LAN Manager authentication level\",\"description\":\"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers.\"}},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: LDAP client signing requirements\",\"description\":\"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients\",\"description\":\"Specifies which behaviors are allowed by - clients for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services. - See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information.\"}},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers\",\"description\":\"Specifies which behaviors are allowed by - servers for applications using the NTLM Security Support Provider (SSP). The - SSP Interface (SSPI) is used by applications that need authentication services.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue', - '=', parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'), - ',', 'Network security: LAN Manager authentication level;ExpectedValue', '=', - parameters('NetworkSecurityLANManagerAuthenticationLevel'), ',', 'Network - security: LDAP client signing requirements;ExpectedValue', '=', parameters('NetworkSecurityLDAPClientSigningRequirements'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) clients;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'), - ',', 'Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue', '=', parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkSecurity\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos\":{\"type\":\"string\"},\"NetworkSecurityLANManagerAuthenticationLevel\":{\"type\":\"string\"},\"NetworkSecurityLDAPClientSigningRequirements\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients\":{\"type\":\"string\"},\"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityConfigureEncryptionTypesAllowedForKerberos')]\"},{\"name\":\"Network - security: LAN Manager authentication level;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLANManagerAuthenticationLevel')]\"},{\"name\":\"Network - security: LDAP client signing requirements;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityLDAPClientSigningRequirements')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients')]\"},{\"name\":\"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue\",\"value\":\"[parameters('NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36e17963-7202-494a-80c3-f508211c826b\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid topics to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/topics/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36ea4b4b-0f7f-4a54-89fa-ab18f555a172\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/domains/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"domain\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36f4658a-848a-467b-881c-e6fa20cf75fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1557\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/36fbe499-f2f2-41b6-880e-52d7ea1d94a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"36fbe499-f2f2-41b6-880e-52d7ea1d94a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Interactive Logon'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsInteractiveLogon\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3750712b-43d0-478e-9966-d2c26f6141b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1624 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1624\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37d079e3-d6aa-4263-a069-dd7ac6dd9684\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37d079e3-d6aa-4263-a069-dd7ac6dd9684\"},{\"properties\":{\"displayName\":\"Storage - accounts should be migrated to new Azure Resource Manager resources\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.ClassicStorage/storageAccounts\",\"Microsoft.Storage/StorageAccounts\"]},{\"value\":\"[field('type')]\",\"equals\":\"Microsoft.ClassicStorage/storageAccounts\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"37e0d2fe-28a5-43d6-a273-67d37d1f5606\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1335 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1335\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/382016f3-d4ba-4e15-9716-55077ec4dc2a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"382016f3-d4ba-4e15-9716-55077ec4dc2a\"},{\"properties\":{\"displayName\":\"Resource - logs in IoT Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"3.0.1\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"}},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"383856f8-de7f-44a2-81fc-e5135b5c2aa4\"},{\"properties\":{\"displayName\":\"Deploy - the Windows Guest Configuration extension to enable Guest Configuration assignments - on Windows VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"385f5831-96d4-41db-9a3c-cd3af78aaae6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1081 - Information Sharing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1081\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3867f2a9-23bb-4729-851f-c3ad98580caf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3867f2a9-23bb-4729-851f-c3ad98580caf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1522 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1522\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38b470cc-f939-4a15-80e0-9f0c74f2e2c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38b470cc-f939-4a15-80e0-9f0c74f2e2c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1416 - Nonlocal Maintenance | Document Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1416\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/38dfd8a3-5290-4099-88b7-4081f4c4d8ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"38dfd8a3-5290-4099-88b7-4081f4c4d8ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1397 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1397\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391af4ab-1117-46b9-b2c7-78bbd5cd995b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391af4ab-1117-46b9-b2c7-78bbd5cd995b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1556 - Vulnerability Scanning | Automated Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1556\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/391ff8b3-afed-405e-9f7d-ef2f8168d5da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"391ff8b3-afed-405e-9f7d-ef2f8168d5da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL Managed Instance should contain an - email address for security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1232 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1232\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/396ba986-eac1-4d6d-85c4-d3fda6b78272\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"396ba986-eac1-4d6d-85c4-d3fda6b78272\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1246 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1246\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/398eb61e-8111-40d5-a0c9-003df28f1753\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"398eb61e-8111-40d5-a0c9-003df28f1753\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399b2637-a50f-4f95-96f8-3a145476eb15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1680 - Malicious Code Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1680\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/399cd6ee-0e18-41db-9dea-cde3bd712f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"399cd6ee-0e18-41db-9dea-cde3bd712f38\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1228 - Information System Component Inventory | Accountability - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1228\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/39c54140-5902-4079-8bb5-ad31936fe764\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"39c54140-5902-4079-8bb5-ad31936fe764\"},{\"properties\":{\"displayName\":\"Synapse - managed private endpoints should only connect to resources in approved Azure - Active Directory tenants\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"allowedTenantIds\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"List - of Allowed Tenant Ids for private endpoint creation\",\"description\":\"This - parameter defines the list of Allowed Tenant Ids that are allowed to create - managed private endpoints in the workspaces\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]\",\"notIn\":\"[parameters('allowedTenantIds')]\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a003702-13d2-4679-941b-937e58c443f0\"},{\"properties\":{\"displayName\":\"Infrastructure - encryption should be enabled for Azure Database for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/infrastructureEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a58212a-c829-4f13-9872-6371df2fd0b4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1039 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1039\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a7b9de4-a8a2-4672-914d-c5f6752aa7f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1648 - Collaborative Computing Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1648\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3a9eb14b-495a-4ebb-933c-ce4ef5264e32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3a9eb14b-495a-4ebb-933c-ce4ef5264e32\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Control - Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Control Panel' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa2661b-02d7-4ba6-99bc-dc36b10489fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1315 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1315\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3aa87116-f1a1-4edb-bfbf-14e036f8d454\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3aa87116-f1a1-4edb-bfbf-14e036f8d454\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Pod Security Policies should be defined on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3abeb944-26af-43ee-b83d-32aaf060fb94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1548 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1548\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3afe6c78-6124-4d95-b85c-eb8c0c9539cb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3afe6c78-6124-4d95-b85c-eb8c0c9539cb\"},{\"properties\":{\"displayName\":\"Configure - Azure Synapse workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Dev\"],\"requestMessage\":\"Auto - approved by policy assignment\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b3b0c27-08d2-4b32-879d-19930bee3266\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1266 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1266\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b4a3eb2-c25d-40bf-ad41-5094b6f59cee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1003 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1003\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b68b179-3704-4ff7-b51d-7d65374d165d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b68b179-3704-4ff7-b51d-7d65374d165d\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Security operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Security operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Security Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Security/policies/write\",\"Microsoft.Security/securitySolutions/write\",\"Microsoft.Security/securitySolutions/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Security\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3b980d31-7904-4bb7-8575-5665739a8052\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Dependency agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentWindows\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentWindows\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3be22e3b-d919-47aa-805e-8985dbeb0ad9\"},{\"properties\":{\"displayName\":\"PostgreSQL - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c14b034-bcb6-4905-94e7-5b8e98a47b65\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Log Analytics agent to be enabled on Windows virtual machine scale - sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Log Analytics workspace is used to - receive performance data. If this workspace is outside of the scope of the - assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\",\"vmExtensionTypeHandlerVersion\":\"1.0\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c1b3629-c8f8-4bf6-862c-037cb9094038\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your virtual machine scale sets should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8941d121-f740-35f6-952c-6561d2b38d36\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1621 - Resource Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1621\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cb9f731-744a-4691-a481-ca77b0411538\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cb9f731-744a-4691-a481-ca77b0411538\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1521 - Personnel Termination | Automated Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1521\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cbddf9c-a3aa-4330-a0f5-4c0c1f1862e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1127 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1127\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ce328db-aef3-48ed-9f81-2ab7cf839c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ce328db-aef3-48ed-9f81-2ab7cf839c66\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on virtual machines with no identities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"SystemAssigned\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3cf2ab00-13f1-4d0c-8971-2ac904541a7e\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have extra accounts in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembers\",\"version\":\"1.*\",\"configurationParameter\":{\"Members\":\"[LocalGroup]AdministratorsGroup;Members\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members\",\"description\":\"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2\"},\"allowedValues\":[]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Search Services to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Search Services in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Search/searchServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d5da587-71bd-41f5-ac95-dd3330c2d58d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Devices'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d7b154e-2700-4c8c-9e46-cb65ac1578c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy default Log Analytics Agent for Ubuntu VMs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Compute\",\"deprecated\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Log Analytics workspace\",\"description\":\"Select Log Analytics workspace - from dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\",\"16.04-LTS\",\"16.04.0-LTS\",\"14.04.2-LTS\",\"12.04.5-LTS\"]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('vmName'),'/omsPolicy')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2017-12-01\",\"properties\":{\"publisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"type\":\"OmsAgentForLinux\",\"typeHandlerVersion\":\"1.4\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - monitoring for Linux VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38\"},{\"properties\":{\"displayName\":\"App - Configuration should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3d9f5e4c-9947-4579-9539-2a7695fbc187\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1385 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1385\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e495e65-8663-49ca-9b38-9f45e800bc58\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e495e65-8663-49ca-9b38-9f45e800bc58\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell modules - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn't available - in a location specified by the environment variable PSModulePath.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellModules\",\"version\":\"1.*\",\"configurationParameter\":{\"Modules\":\"[PowerShellModules]PowerShellModules1;Modules\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Modules\",\"description\":\"A semicolon-separated list of the names of the - PowerShell modules that should be installed. You may also specify a specific - version of a module that should be installed by including a comma after the - module name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e4e2bd5-15a2-4628-b3e1-58977e9793f3\"},{\"properties\":{\"displayName\":\"Azure - Monitor solution 'Security and Audit' must be deployed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that Security and Audit is deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.OperationsManagement/solutions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.OperationsManagement/solutions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"name\",\"like\":\"Security(*)\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e596b57-105f-48a6-be97-03e9243bad6e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1160 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1160\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3e797ca6-2aa8-4333-b335-7036f1110c05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3e797ca6-2aa8-4333-b335-7036f1110c05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1545 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1545\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f4b171a-a56b-4328-8112-32cf7f947ee1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f4b171a-a56b-4328-8112-32cf7f947ee1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1179 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1179\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3f9ce557-c8ab-4e6c-bb2c-9b8ed002c46c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported PHP Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPHP\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3fe37002-5d00-4b37-a301-da09e3a0ca66\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Network Access' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"version\":\"1.*\",\"configurationParameter\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"NetworkAccessSharesThatCanBeAccessedAnonymously\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths\",\"description\":\"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Network - access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1561 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1561\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40364c3f-c331-4e29-b1e3-2fbe998ba2f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40364c3f-c331-4e29-b1e3-2fbe998ba2f5\"},{\"properties\":{\"displayName\":\"Secure - transfer to storage accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - requirement of Secure transfer in your storage account. Secure transfer is - an option that forces your storage account to accept requests only from secure - connections (HTTPS). Use of HTTPS ensures authentication between the server - and the service and protects data in transit from network layer attacks such - as man-in-the-middle, eavesdropping, and session-hijacking\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"allOf\":[{\"value\":\"[requestContext().apiVersion]\",\"less\":\"2019-04-01\"},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"404c3081-a854-4457-ae30-26a93ef643f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1100 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1100\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4057863c-ca7d-47eb-b1e0-503580cba8a4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4057863c-ca7d-47eb-b1e0-503580cba8a4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1637 - Boundary Protection | Fail Secure\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1637\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4075bedc-c62a-4635-bede-a01be89807f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4075bedc-c62a-4635-bede-a01be89807f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always use classic logon\",\"description\":\"Specifies whether to force the - user to log on to the computer using the classic logon screen. This setting - only works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Boot-Start Driver Initialization Policy\",\"description\":\"Specifies which - boot-start drivers are initialized based on a classification determined by - an Early Launch Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable Windows NTP Client\",\"description\":\"Specifies whether the Windows - NTP Client is enabled. Enabling the Windows NTP Client allows your computer - to synchronize its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesSystem\"},\"AlwaysUseClassicLogon\":{\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},\"BootStartDriverInitializationPolicy\":{\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},\"EnableWindowsNTPClient\":{\"value\":\"[parameters('EnableWindowsNTPClient')]\"},\"TurnOnConveniencePINSignin\":{\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AlwaysUseClassicLogon\":{\"type\":\"string\"},\"BootStartDriverInitializationPolicy\":{\"type\":\"string\"},\"EnableWindowsNTPClient\":{\"type\":\"string\"},\"TurnOnConveniencePINSignin\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Always - use classic logon;ExpectedValue\",\"value\":\"[parameters('AlwaysUseClassicLogon')]\"},{\"name\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"value\":\"[parameters('BootStartDriverInitializationPolicy')]\"},{\"name\":\"Enable - Windows NTP Client;ExpectedValue\",\"value\":\"[parameters('EnableWindowsNTPClient')]\"},{\"name\":\"Turn - on convenience PIN sign-in;ExpectedValue\",\"value\":\"[parameters('TurnOnConveniencePINSignin')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40917425-69db-4018-8dae-2a0556cef899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1202 - Access Restrictions For Change\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1202\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40a2a83b-74f2-4c02-ae65-f460a5d2792a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40a2a83b-74f2-4c02-ae65-f460a5d2792a\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"count\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40cec1dd-a100-4920-b15b-3024fe8901ab\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the containing subscription when any - resource missing this tag is created or updated. Existing resources can be - remediated by triggering a remediation task. If the tag exists with a different - value it will not be changed.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40df99da-1232-49b1-a39a-6da8d878f469\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1438 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1438\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/40fcc635-52a2-4dbc-9523-80a1f4aa1de6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"40fcc635-52a2-4dbc-9523-80a1f4aa1de6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1365 - Incident Handling | Continuity Of Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1365\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4116891d-72f7-46ee-911c-8056cc8dcbd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4116891d-72f7-46ee-911c-8056cc8dcbd5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1022 - Account Management | Shared / Group Account Credential - Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1022\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/411f7e2d-9a0b-4627-a0b9-1700432db47d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"411f7e2d-9a0b-4627-a0b9-1700432db47d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1464 - Monitoring Physical Access | Intrusion Alarms / Surveillance - Equipment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1464\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41256567-1795-4684-b00b-a1308ce43cac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41256567-1795-4684-b00b-a1308ce43cac\"},{\"properties\":{\"displayName\":\"Azure - Monitor should collect activity logs from all regions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiacentral2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"australiasoutheast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"brazilsouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"canadaeast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"centralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"eastus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"francesouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japaneast\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"japanwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreacentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"koreasouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"northeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricanorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southafricawest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"southeastasia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaecentral\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uaenorth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"uksouth\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"ukwest\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westcentralus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westeurope\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westindia\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"westus2\"}},{\"not\":{\"field\":\"Microsoft.Insights/logProfiles/locations[*]\",\"notEquals\":\"global\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9\"},{\"properties\":{\"displayName\":\"Temp - disks and cache for agent node pools in Azure Kubernetes Service clusters - should be encrypted at host\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"count\":{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"\"},{\"field\":\"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost\",\"equals\":\"false\"}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41425d9f-d1a5-499a-9932-f8ed8453932c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1263 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1263\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/41472613-3b05-49f6-8fe8-525af113ce17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"41472613-3b05-49f6-8fe8-525af113ce17\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1096 - Role-Based Security Training | Practical Exercises\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1096\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/420c1477-aa43-49d0-bd7e-c4abdd9addff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"420c1477-aa43-49d0-bd7e-c4abdd9addff\"},{\"properties\":{\"displayName\":\"Audit - Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPendingReboot\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4221adbc-5c0f-474f-88b7-037a99e6114c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1260 - Contingency Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1260\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42254fc4-2738-4128-9613-72aaa4f0d9c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42254fc4-2738-4128-9613-72aaa4f0d9c3\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should use the specified mode for Azure Front Door - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - the use of 'Detection' or 'Prevention' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Mode - Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"425bea59-a659-4cbb-8d31-34499bd030b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1694 - Information System Monitoring | Analyze Communications - Traffic Anomalies\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1694\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/426c4ac9-ff17-49d0-acd7-a13c157081c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"426c4ac9-ff17-49d0-acd7-a13c157081c0\"},{\"properties\":{\"displayName\":\"Resource - logs in Batch accounts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"428256e6-1fac-4f48-a757-df34c2b3336d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Detailed Tracking'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Process Termination\",\"description\":\"Specifies whether audit events - are generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\"},\"AuditProcessTermination\":{\"value\":\"[parameters('AuditProcessTermination')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditProcessTermination\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Process Termination;ExpectedValue\",\"value\":\"[parameters('AuditProcessTermination')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a07bbf-ffcf-459a-b4b1-30ecd118a505\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1174 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1174\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/42a9a714-8fbb-43ac-b115-ea12d2bd652f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"42a9a714-8fbb-43ac-b115-ea12d2bd652f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1137 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1137\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4344df62-88ab-4637-b97b-bcaf2ec97e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4344df62-88ab-4637-b97b-bcaf2ec97e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1367 - Incident Handling | Insider Threats - Specific Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1367\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/435b2547-6374-4f87-b42d-6e8dbe6ae62a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"435b2547-6374-4f87-b42d-6e8dbe6ae62a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1552 - Vulnerability Scanning | Update By Frequency / Prior - To New Scan / When Identified\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1552\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43684572-e4f1-4642-af35-6b933bc506da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43684572-e4f1-4642-af35-6b933bc506da\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - System settings'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies\",\"description\":\"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue', '=', parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsSystemsettings\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue\",\"value\":\"[parameters('SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"437a1f8f-8552-47a8-8b12-a2fee3269dd5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Logon' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditCredentialValidation\":\"Audit - Credential Validation;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Credential Validation\",\"description\":\"Specifies whether audit events are - generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1544 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1544\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/43ced7c9-cd53-456b-b0da-2522649a4271\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"43ced7c9-cd53-456b-b0da-2522649a4271\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1398 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1398\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"443e8f3d-b51a-45d8-95a7-18b0e42f4dc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor permissive network access in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"permissiveNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44452482-524f-4bf4-b852-0bff7cc4a3ed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1066 - Remote Access | Disconnect / Disable Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1066\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4455c2e8-c65d-4acf-895e-304916f90b36\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4455c2e8-c65d-4acf-895e-304916f90b36\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1720 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1720\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44b9a7cd-f36a-491a-a48b-6d04ae7c4221\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44b9a7cd-f36a-491a-a48b-6d04ae7c4221\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1334 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1334\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44bfdadc-8c2e-4c30-9c99-f005986fabcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44bfdadc-8c2e-4c30-9c99-f005986fabcd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1604 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1604\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44dbba23-0b61-478e-89c7-b3084667782f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44dbba23-0b61-478e-89c7-b3084667782f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1712 - Software, Firmware, And Information Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1712\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/44e543aa-41db-42aa-98eb-8a5eb1db53f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"44e543aa-41db-42aa-98eb-8a5eb1db53f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1310 - Device Identification And Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1310\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/450d7ede-823d-4931-a99d-57f6a38807dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"450d7ede-823d-4931-a99d-57f6a38807dc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1559 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1559\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45692294-f074-42bd-ac54-16f1a3c07554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45692294-f074-42bd-ac54-16f1a3c07554\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1578 - Acquisition Process | Functions / Ports / Protocols - / Services In Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1578\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45b7b644-5f91-498e-9d89-7402532d3645\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45b7b644-5f91-498e-9d89-7402532d3645\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1565 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1565\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/45ce2396-5c76-4654-9737-f8792ab3d26b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"45ce2396-5c76-4654-9737-f8792ab3d26b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1337 - Authenticator Management | In-Person Or Trusted Third-Party - Registration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1337\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/463e5220-3f79-4e24-a63f-343e4096cd22\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"463e5220-3f79-4e24-a63f-343e4096cd22\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use a Private Link enabled SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"field\":\"Microsoft.SignalRService/SignalR/sku.tier\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464a1620-21b5-448d-8ce6-d4ac6d1bc49a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require SQL Server version 12.0\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures all SQL servers use version 12.0. This policy is deprecated - because it is no longer possible to create an Azure SQL server with any version - other than 12.0.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"not\":{\"field\":\"Microsoft.Sql/servers/version\",\"equals\":\"12.0\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1346 - Identification And Authentication (Non-Organizational - Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1346\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/464dc8ce-2200-4720-87a5-dc5952924cc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"464dc8ce-2200-4720-87a5-dc5952924cc6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46544d7b-1f0d-46f5-81da-5c1351de1b06\"},{\"properties\":{\"displayName\":\"Require - automatic OS image patching on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade\",\"notEquals\":\"True\"},{\"field\":\"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade\",\"notEquals\":\"True\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f0161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1368 - Incident Handling | Correlation With External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1368\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/465f32da-0ace-4603-8d1b-7be5a3a702de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"465f32da-0ace-4603-8d1b-7be5a3a702de\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use customer owned storage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]\"},\"less\":1},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedStorage\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"46aa9b05-0e60-4eae-a88b-1e9d374fa515\"},{\"properties\":{\"displayName\":\"[Preview]: - IoT Hub device provisioning service data should be encrypted using customer-managed - keys (CMK)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Internet - of Things\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier\",\"notequals\":\"\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47031206-ce96-41f8-861b-6a915f3de284\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1062 - Remote Access | Protection Of Confidentiality / Integrity - Using Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1062\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4708723f-e099-4af1-bbf9-b6df7642e444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4708723f-e099-4af1-bbf9-b6df7642e444\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn't exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/Redis\"},{\"field\":\"Microsoft.Cache/Redis/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"470baccb-7e51-4549-8b1a-3e5be069f663\"},{\"properties\":{\"displayName\":\"Storage - accounts should have infrastructure encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4733ea7b-a883-42fe-8cac-97454c2a9e4a\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB key based metadata write access should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"notEquals\":true}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess\",\"value\":true}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4750c32b-89c0-46af-bfcb-2e4541a818d5\"},{\"properties\":{\"displayName\":\"Auto - provisioning of the Log Analytics agent should be enabled on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"475aae12-b88a-4572-8b36-9b712b2b3a17\"},{\"properties\":{\"displayName\":\"Adaptive - application controls for defining safe applications should be enabled on your - machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"35f45c95-27cf-4e52-891f-8390d1de5828\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47a6b606-51aa-4496-8bb7-64b11cf66adc\"},{\"properties\":{\"displayName\":\"Configure - Cognitive Services accounts to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Cognitive Services resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Disabled\",\"Modify\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2017-04-18')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.CognitiveServices/accounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1359 - Incident Response Testing | Coordination With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1359\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47bc7ea0-7d13-4f7c-a154-b903f7194253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47bc7ea0-7d13-4f7c-a154-b903f7194253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1165 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1165\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/47e10916-6c9e-446b-b0bd-ff5fd439d79d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"47e10916-6c9e-446b-b0bd-ff5fd439d79d\"},{\"properties\":{\"displayName\":\"Private - endpoints for Guest Configuration assignments should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, 'EnablePrivateNetworkGC'. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Guest Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\"},{\"field\":\"id\",\"contains\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"anyof\":[{\"field\":\"[concat('tags[', - 'EnablePrivateNeworkGC', ']')]\",\"equals\":\"TRUE\"},{\"field\":\"[concat('tags[', - 'EnablePrivateNetworkGC', ']')]\",\"equals\":\"TRUE\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"480d0f91-30af-4a76-9afb-f5710ac52b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1048 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1048\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/483e7ca9-82b3-45a2-be97-b93163a0deb7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"483e7ca9-82b3-45a2-be97-b93163a0deb7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1033 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1033\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48540f01-fc11-411a-b160-42807c68896e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48540f01-fc11-411a-b160-42807c68896e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1477 - Fire Protection | Detection Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1477\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4862a63c-6c74-4a9d-a221-89af3c374503\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4862a63c-6c74-4a9d-a221-89af3c374503\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1484 - Water Damage Protection | Automation Support\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1484\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/486b006a-3653-45e8-b41c-a052d3e05456\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"486b006a-3653-45e8-b41c-a052d3e05456\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects an API app from common attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48893b84-a2c8-4d9a-badf-835d5d1b7d53\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for PostgreSQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48af4db5-9b8b-401c-8e74-076be876a430\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1669 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1669\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/48f2f62b-5743-4415-a143-288adc0e078d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"48f2f62b-5743-4415-a143-288adc0e078d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - User Account Control' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"version\":\"1.*\",\"configurationParameter\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"UACDetectApplicationInstallationsAndPromptForElevation\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"UACRunAllAdministratorsInAdminApprovalMode\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of the elevation prompt for administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"UAC: - Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"492a29ed-d143-4f03-b6a4-705ce081b463\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1376 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1376\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/493a95f3-f2e3-47d0-af02-65e6d6decc2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"493a95f3-f2e3-47d0-af02-65e6d6decc2f\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496223c3-ad65-4ecd-878a-bae78737e9ed\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for Data factories\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"groupId\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - group Id that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - group Id\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"},\"groupId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupId\":[\"[parameters('groupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"},\"groupId\":{\"value\":\"[parameters('groupId')]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"496ca26b-f669-4322-a1ad-06b7b5e41882\"},{\"properties\":{\"displayName\":\"Add - system-assigned managed identity to enable Guest Configuration assignments - on VMs with a user-assigned identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"value\":\"[requestContext().apiVersion]\",\"greaterOrEquals\":\"2018-10-01\"},{\"field\":\"identity.type\",\"contains\":\"UserAssigned\"},{\"field\":\"identity.type\",\"notContains\":\"SystemAssigned\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"identity.type\",\"value\":\"[concat(field('identity.type'), - ',SystemAssigned')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"497dff13-db2a-4c0f-8603-28fa3b331ab6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Audit'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Audit'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits\",\"description\":\"Audits - if the system will shut down when unable to log Security events.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAudit\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit: - Shut down system immediately if unable to log security audits;ExpectedValue', - '=', parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAudit\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue\",\"value\":\"[parameters('AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498b810c-59cd-4222-9338-352ba146ccf3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1329 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1329\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/498f6234-3e20-4b6a-a880-cbd646d973bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"498f6234-3e20-4b6a-a880-cbd646d973bd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1638 - Boundary Protection | Dynamic Isolation / Segregation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1638\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49b99653-32cd-405d-a135-e7d60a9aae1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49b99653-32cd-405d-a135-e7d60a9aae1f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Appends - the specified tag and value when any resource group which is missing this - tag is created or updated. Does not modify the tags of resource groups created - before this policy was applied until those resource groups are changed. New - 'modify' effect policies are available that support remediation of tags on - existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1294 - Information System Backup | Transfer To Alternate Storage - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1294\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/49dbe627-2c1e-438c-979e-dd7a39bbf81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"49dbe627-2c1e-438c-979e-dd7a39bbf81d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1218 - Least Functionality | Prevent Program Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1218\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a1d0394-b9f5-493e-9e83-563fd0ac4df8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a1d0394-b9f5-493e-9e83-563fd0ac4df8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1677 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1677\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4a248e1e-040f-43e5-bff2-afc3a57a3923\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4a248e1e-040f-43e5-bff2-afc3a57a3923\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1094 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1094\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b1853e0-8973-446b-b567-09d901d31a09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b1853e0-8973-446b-b567-09d901d31a09\"},{\"properties\":{\"displayName\":\"Azure - Event Grid topics should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid topic instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"},{\"count\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4b90e17e-8448-49db-875e-bd83fb6f804f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1114 - Response To Audit Processing Failures | Real-Time Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1114\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c090801-59bc-4454-bb33-e0455133486a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c090801-59bc-4454-bb33-e0455133486a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1364 - Incident Handling | Dynamic Reconfiguration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1364\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c615c2a-dc83-4dda-8220-abce7b50c9bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c615c2a-dc83-4dda-8220-abce7b50c9bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1661 - Session Authenticity | Invalidate Session Identifiers - At Logout\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1661\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4c643c9a-1be7-4016-a5e7-e4bada052920\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4c643c9a-1be7-4016-a5e7-e4bada052920\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1373 - Incident Reporting | Automated Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1373\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4cca950f-c3b7-492a-8e8f-ea39663c14f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4cca950f-c3b7-492a-8e8f-ea39663c14f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1632 - Boundary Protection | Prevent Split Tunneling For Remote - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1632\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ce9073a-77fa-48f0-96b1-87aa8e6091c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ce9073a-77fa-48f0-96b1-87aa8e6091c2\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have a maximum password age of 70 days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MaximumPasswordAge\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MaximumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ceb8dc2-559c-478b-a15b-733fbf1e3738\"},{\"properties\":{\"displayName\":\"Function - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d0bc837-6eff-477e-9ecd-33bf8d4212a5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d1c04de-2172-403f-901b-90608c35c721\"},{\"properties\":{\"displayName\":\"FTPS - should be required in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1155 - System Interconnections | Restrictions On External - System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1155\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d33f9f1-12d0-46ad-9fbd-8f8046694977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d33f9f1-12d0-46ad-9fbd-8f8046694977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1156 - Plan Of Action And Milestones\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1156\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d52e864-9a3b-41ee-8f03-520815fe5378\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d52e864-9a3b-41ee-8f03-520815fe5378\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1312 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1312\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4d6a5968-9eef-4c18-8534-376790ab7274\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4d6a5968-9eef-4c18-8534-376790ab7274\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machines if the VM Image (OS) is in the - list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.6\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee\"},{\"properties\":{\"displayName\":\"Azure - Defender for servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for servers provides real-time threat protection for server workloads - and generates hardening recommendations as well as alerts about suspicious - activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4da35fc9-c9e7-4960-aec9-797fe7d9051d\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4daddf25-4823-43d4-88eb-2419eb6dcc08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1394 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1394\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4db56f68-3f50-45ab-88f3-ca46f5379a94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4db56f68-3f50-45ab-88f3-ca46f5379a94\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1702 - Information System Monitoring | Indicators Of Compromise\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1702\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4dfc0855-92c4-4641-b155-a55ddd962362\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4dfc0855-92c4-4641-b155-a55ddd962362\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1001 - Access Control Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1001\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e26f8c3-4bf3-4191-b8fc-d888805101b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e26f8c3-4bf3-4191-b8fc-d888805101b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1083 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1083\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e319cb6-2ca3-4a58-ad75-e67f484e50ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e319cb6-2ca3-4a58-ad75-e67f484e50ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1579 - Acquisition Process | Use Of Approved Piv Products\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1579\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e54c7ef-7457-430b-9a3e-ef8881d4a8e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1247 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1247\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e666db5-b2ef-4b06-aac6-09bfce49151b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e666db5-b2ef-4b06-aac6-09bfce49151b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1196 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1196\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e7f4ea4-dd62-44f6-8886-ac6137cf52b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1134 - Protection Of Audit Information | Access By Subset - Of Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1134\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e95f70e-181c-4422-9da2-43079710c789\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e95f70e-181c-4422-9da2-43079710c789\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1267 - Alternate Storage Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1267\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4e97ba1d-be5d-4953-8da4-0cccf28f4805\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4e97ba1d-be5d-4953-8da4-0cccf28f4805\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1192 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1192\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ebd97f7-b105-4f50-8daf-c51465991240\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ebd97f7-b105-4f50-8daf-c51465991240\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints that connect to Batch - accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"batchAccount\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"batchAccount-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec38ebc-381f-45ee-81a4-acbc4be878f8\"},{\"properties\":{\"displayName\":\"Azure - data factories should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"field\":\"Microsoft.DataFactory/factories/encryption.vaultBaseUrl\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ec52d6d-beb7-40c4-9a9e-fe753254690e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1139 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1139\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4ed62522-de00-4dda-9810-5205733d2f34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4ed62522-de00-4dda-9810-5205733d2f34\"},{\"properties\":{\"displayName\":\"A - maximum of 3 owners should be designated for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f11b553-d42e-4e3a-89be-32ca364cad4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1442 - Media Sanitization | Nondestructive Techniques\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1442\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f26049b-2c5a-4841-9ff3-d48a26aae475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f26049b-2c5a-4841-9ff3-d48a26aae475\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1182 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1182\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f34f554-da4b-4786-8d66-7915c90893da\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f34f554-da4b-4786-8d66-7915c90893da\"},{\"properties\":{\"displayName\":\"Subscriptions - should have a contact email address for security issues\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/email\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7\"},{\"properties\":{\"displayName\":\"Add - a tag to resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4f9dc7db-30c1-420c-b61a-e1d640128d26\"},{\"properties\":{\"displayName\":\"[Preview]: - Storage account public access should be disallowed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.\",\"metadata\":{\"version\":\"2.0.1-preview\",\"category\":\"Storage\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"The effect determines what happens when the policy - rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/allowBlobPublicAccess\",\"equals\":\"false\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751\"},{\"properties\":{\"displayName\":\"A - vulnerability assessment solution should be enabled on your virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center's - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"ffff0522-1e88-47fc-8382-2a80ba848f5d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"501541f7-f7e7-4cd6-868c-4190fdad3ac9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1485 - Delivery And Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1485\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50301354-95d0-4a11-8af5-8039ecf6d38b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50301354-95d0-4a11-8af5-8039ecf6d38b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1646 - Cryptographic Key Establishment And Management | Asymmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1646\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/506814fa-b930-4b10-894e-a45b98c40e1a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"506814fa-b930-4b10-894e-a45b98c40e1a\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center regulatory compliance\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\",\"preview - \":true},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"regulatoryComplianceStandards\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - standards names\",\"description\":\"For all compliance standards, leave it - empty. For specific compliance standards, enter a list of standards names - separated by semicolons (';'). Compliance standards names are available through - the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"regulatoryComplianceControlStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Compliance - control states\",\"description\":\"Determines compliance control states.\"},\"allowedValues\":[\"Failed\",\"Passed\",\"Skipped\",\"Unsupported\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center regulatory compliance assessment is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center regulatory compliance - assessment is created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets\",\"exists\":false},{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"equals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"less\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceControlStates')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\",\"name\":\"regulatoryComplianceControlState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.state\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceControlState')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceControlStates'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"equals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[parameters('regulatoryComplianceStandards')]\"},{\"count\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\",\"name\":\"regulatoryComplianceStandard\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"id\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('regulatoryComplianceStandard')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('regulatoryComplianceStandards'))]\"}]},{\"allOf\":[{\"value\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"notEquals\":0},{\"value\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"notEquals\":4},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('regulatoryComplianceStandards'),parameters('regulatoryComplianceControlStates'))]\"},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\"},\"equals\":\"[mul(2,mul(length(parameters('regulatoryComplianceStandards')),length(parameters('regulatoryComplianceControlStates'))))]\"}]}]}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"regulatoryComplianceStandards\":{\"type\":\"array\"},\"regulatoryComplianceControlStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"regulatoryComplianceStandardsLength\":\"[length(parameters('regulatoryComplianceStandards'))]\",\"regulatoryComplianceControlStatesLength\":\"[length(parameters('regulatoryComplianceControlStates'))]\",\"regulatoryComplianceStandardsLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsLength'), - 0), 1, variables('regulatoryComplianceStandardsLength'))]\",\"regulatoryComplianceControlStatesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceControlStatesLength'), - 0), 1, variables('regulatoryComplianceControlStatesLength'))]\",\"stateMap\":{\"Failed\":\"failed\",\"Passed\":\"passed\",\"Skipped\":\"skipped\",\"Unsupported\":\"unsupported\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center regulatory - compliance assessment is created or triggered\":\"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered\"},\"doesAllStatesSelected\":\"[if(equals(length(parameters('regulatoryComplianceControlStates')),length(variables('stateMap'))),bool('true'),bool('false'))]\",\"doesAllStandardsSelected\":\"[if(equals(variables('regulatoryComplianceStandardsLength'),0),bool('true'),bool('false'))]\",\"allRegulatoryComplianceRuleSets\":[],\"customStandardsOrCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsOrCustomStateRuleSetsArr\",\"count\":\"[if(not(variables('doesAllStandardsSelected')),variables('regulatoryComplianceStandardsLength'),if(not(variables('doesAllStatesSelected')),variables('regulatoryComplianceControlStatesLength'),1))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(not(variables('doesAllStandardsSelected')),'id',if(not(variables('doesAllStatesSelected')),'properties.state',json('null')))]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[copyIndex('customStandardsOrCustomStateRuleSetsArr')],json('null')))]\",\"operator\":\"[if(not(variables('doesAllStandardsSelected')),'Contains',if(not(variables('doesAllStatesSelected')),'Equals',json('null')))]\"}]}}]},\"customStandardsAndCustomStateRuleSets\":{\"copy\":[{\"name\":\"customStandardsAndCustomStateRuleSetsArr\",\"count\":\"[if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),mul(variables('regulatoryComplianceStandardsLength'),variables('regulatoryComplianceControlStatesLength')),1)]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStandardsSelected')),parameters('regulatoryComplianceStandards')[mod(div(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength')), variables('regulatoryComplianceStandardsLength'))],json('null'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.state\",\"propertyType\":\"string\",\"expectedValue\":\"[if(not(variables('doesAllStatesSelected')),parameters('regulatoryComplianceControlStates')[mod(copyIndex('customStandardsAndCustomStateRuleSetsArr'), - variables('regulatoryComplianceControlStatesLength'))],json('null'))]\",\"operator\":\"Equals\"}]}}]},\"sourceRuleSets\":\"[if(and(variables('doesAllStandardsSelected'),variables('doesAllStatesSelected')),variables('allRegulatoryComplianceRuleSets'),if(and(not(variables('doesAllStandardsSelected')),not(variables('doesAllStatesSelected'))),variables('customStandardsAndCustomStateRuleSets').customStandardsAndCustomStateRuleSetsArr,variables('customStandardsOrCustomStateRuleSets').customStandardsOrCustomStateRuleSetsArr))]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"RegulatoryComplianceAssessment\",\"ruleSets\":\"[variables('sourceRuleSets')]\"}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"regulatoryComplianceStandards\":{\"value\":\"[parameters('regulatoryComplianceStandards')]\"},\"regulatoryComplianceControlStates\":{\"value\":\"[parameters('regulatoryComplianceControlStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"509122b9-ddd9-47ba-a5f1-d0dac20be63c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1566 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1566\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50ad3724-e2ac-4716-afcc-d8eabd97adb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50ad3724-e2ac-4716-afcc-d8eabd97adb9\"},{\"properties\":{\"displayName\":\"A - custom IPsec/IKE policy must be applied to all Azure virtual network gateway - connections\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"IPsecEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Encryption\",\"description\":\"IPsec Encryption\"}},\"IPsecIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IPsec - Integrity\",\"description\":\"IPsec Integrity\"}},\"IKEEncryption\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Encryption\",\"description\":\"IKE Encryption\"}},\"IKEIntegrity\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"IKE - Integrity\",\"description\":\"IKE Integrity\"}},\"DHGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"DH - Group\",\"description\":\"DH Group\"}},\"PFSGroup\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"PFS - Group\",\"description\":\"PFS Group\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/connections\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption\",\"notIn\":\"[parameters('IPsecEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity\",\"notIn\":\"[parameters('IPsecIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption\",\"notIn\":\"[parameters('IKEEncryption')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity\",\"notIn\":\"[parameters('IKEIntegrity')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].dhGroup\",\"notIn\":\"[parameters('DHGroup')]\"},{\"field\":\"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup\",\"notIn\":\"[parameters('PFSGroup')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50b83b09-03da-41c1-b656-c293c914862b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1248 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1248\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/50fc602d-d8e0-444b-a039-ad138ee5deb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"50fc602d-d8e0-444b-a039-ad138ee5deb0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1386 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1386\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5120193e-91fd-4f9d-bc6d-194f94734065\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5120193e-91fd-4f9d-bc6d-194f94734065\"},{\"properties\":{\"displayName\":\"Bot - Service should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/isCmekEnabled\",\"notEquals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"51522a96-0869-4791-82f3-981000c2c67f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1352 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1352\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/518cb545-bfa8-43f8-a108-3b7d5037469a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"518cb545-bfa8-43f8-a108-3b7d5037469a\"},{\"properties\":{\"displayName\":\"Azure - Defender for Kubernetes should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Kubernetes provides real-time threat protection for containerized - environments and generates alerts for suspicious activities.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"KubernetesService\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"523b5cd1-3e23-492f-a539-13118b6d1e3a\"},{\"properties\":{\"displayName\":\"Synapse - workspaces with SQL auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your Synapse workspace' SQL auditing to storage account destination to at - least 90 days. Confirm that you are meeting the necessary retention rules - for the regions in which you are operating. This is sometimes required for - compliance with regulatory standards.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"529ea018-6afc-4ed4-95bd-7c9ee47b00bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1642 - Network Disconnect\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1642\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53397227-5ee3-4b23-9e5e-c8a767ce6928\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53397227-5ee3-4b23-9e5e-c8a767ce6928\"},{\"properties\":{\"displayName\":\"Connection - throttling should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"connection_throttling\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5345bb39-67dc-4960-a1bf-427e16b9a0bd\"},{\"properties\":{\"displayName\":\"Azure - SignalR Service should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Azure SignalR Service - resource instead of the entire service, you'll reduce your data leakage risks. - Learn more about private links at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53503636-bcc9-4748-9663-5348217f160f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1467 - Visitor Access Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1467\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5350cbf9-8bdd-4904-b22a-e88be84ca49d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5350cbf9-8bdd-4904-b22a-e88be84ca49d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1183 - Baseline Configuration | Configure Systems, Components, - Or Devices For High-Risk Areas\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1183\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5352e3e0-e63a-452e-9e5f-9c1d181cff9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5352e3e0-e63a-452e-9e5f-9c1d181cff9c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1029 - Information Flow Enforcement | Security Policy Filters\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1029\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53ac8f8e-c2b5-4d44-8a2d-058e9ced9b69\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1270 - Alternate Storage Site | Recovery Time / Point Objectives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1270\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/53c76a39-2097-408a-b237-b279f7b4614d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"53c76a39-2097-408a-b237-b279f7b4614d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1040 - Least Privilege | Review Of User Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1040\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/54205576-cec9-463f-ba44-b4b3f5d0a84c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"54205576-cec9-463f-ba44-b4b3f5d0a84c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1015 - Account Management | Disable Inactive Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1015\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/544a208a-9c3f-40bc-b1d1-d7e144495c14\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"544a208a-9c3f-40bc-b1d1-d7e144495c14\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1026 - Account Management | Disable Accounts For High-Risk - Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1026\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55419419-c597-4cd4-b51e-009fd2266783\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55419419-c597-4cd4-b51e-009fd2266783\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1045 - Unsuccessful Logon Attempts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1045\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"554d2dd6-f3a8-4ad5-b66f-5ce23bd18892\"},{\"properties\":{\"displayName\":\"[Preview]: - Firewall should be enabled on Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Key - vault's firewall prevents unauthorized traffic from reaching your key vault - and provides an additional layer of protection for your secrets. Enable the - firewall to make sure that only traffic from allowed networks can access your - key vault.\",\"metadata\":{\"version\":\"1.0.2-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"55615ac9-af46-4a59-874e-391cc3dfb490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1523 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1523\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5577a310-2551-49c8-803b-36e0d5e55601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5577a310-2551-49c8-803b-36e0d5e55601\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1113 - Response To Audit Processing Failures | Audit Storage - Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1113\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/562afd61-56be-4313-8fe4-b9564aa4ba7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"562afd61-56be-4313-8fe4-b9564aa4ba7d\"},{\"properties\":{\"displayName\":\"Web - Application Firewall (WAF) should be enabled for Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66\"},{\"properties\":{\"displayName\":\"Azure - Automation accounts should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.Keyvault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56a5ee18-2ae6-4810-86f7-18e39ce5629b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1212 - Configuration Settings | Automated Central Management - / Application / Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1212\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56d970ee-4efc-49c8-8a4e-5916940d784c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56d970ee-4efc-49c8-8a4e-5916940d784c\"},{\"properties\":{\"displayName\":\"IP - firewall rules on Azure Synapse workspaces should be removed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces/firewallrules\"},{\"field\":\"name\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"56fd377d-098c-4f02-8406-81eb055902b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1403 - Controlled Maintenance | Automated Maintenance Activities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1403\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/57149289-d52b-4f40-9fe6-5233c1ef80f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"57149289-d52b-4f40-9fe6-5233c1ef80f7\"},{\"properties\":{\"displayName\":\"CORS - should not allow every resource to access your Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]\",\"notEquals\":\"*\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5744710e-cc2f-4ee8-8809-3b11e89f4bc9\"},{\"properties\":{\"displayName\":\"Windows - web servers should be configured to use secure communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AuditSecureProtocol\",\"version\":\"1.*\",\"configurationParameter\":{\"MinimumTLSVersion\":\"[SecureWebServer]s1;MinimumTLSVersion\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - TLS version\",\"description\":\"The minimum TLS protocol version that should - be enabled. Windows web servers with lower TLS versions will be marked as - non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5752e6d6-1206-46d8-8ab1-ecc2f71a8112\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1162 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1162\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5770f3d6-8c2b-4f6f-bf0e-c8c8fc36d592\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1054 - Session Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1054\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5807e1b4-ba5e-4718-8689-a0ca05a191b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5807e1b4-ba5e-4718-8689-a0ca05a191b2\"},{\"properties\":{\"displayName\":\"Configure - disk access resources with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disk access resources in this region are validated and private endpoints are - created in this region.\"}},\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[concat('pe','-',field('name'))]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[parameters('name')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2019-11-01\",\"location\":\"[parameters('location')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"disks\"]}}],\"manualPrivateLinkServiceConnections\":[]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Detailed Tracking' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditProcessTermination\":\"Audit - Process Termination;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditProcessTermination\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Process Termination\",\"description\":\"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Process Termination;ExpectedValue', '=', parameters('AuditProcessTermination')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58383b73-94a9-4414-b382-4146eb02611b\"},{\"properties\":{\"displayName\":\"CosmosDB - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your CosmosDB account, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58440f8a-10c5-4151-bdce-dfbaad4a20b7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1584 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1584\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5864522b-ff1d-4979-a9f8-58bee1fb174c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5864522b-ff1d-4979-a9f8-58bee1fb174c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1547 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1547\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58abf9b8-c6d4-4b4b-bfb9-fe98fe295f52\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which Windows Serial Console is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsSerialConsole\",\"version\":\"1.*\",\"configurationParameter\":{\"EMSPortNumber\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"EMSBaudRate\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Port Number\",\"description\":\"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"EMS - Baud Rate\",\"description\":\"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c460e9-7573-4bb2-9676-339c2f2486bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1573 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1573\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58c93053-7b98-4cf0-b99f-1beb985416c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58c93053-7b98-4cf0-b99f-1beb985416c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure Function app is using the latest version of TLS encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"58d94fc1-a072-47c2-bd37-9cdb38e77453\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1063 - Remote Access | Managed Access Control Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1063\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/593ce201-54b2-4dd0-b34f-c308005d7780\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"593ce201-54b2-4dd0-b34f-c308005d7780\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1463 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1463\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/59721f87-ae25-4db0-a2a4-77cc5b25d495\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"59721f87-ae25-4db0-a2a4-77cc5b25d495\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1425 - Timely Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1425\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5983d99c-f39b-4c32-a3dc-170f19f6941b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5983d99c-f39b-4c32-a3dc-170f19f6941b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1512 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1512\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a8324ad-f599-429b-aaed-f9c6e8c987a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a8324ad-f599-429b-aaed-f9c6e8c987a8\"},{\"properties\":{\"displayName\":\"Operating - system version should be the most current version for your cloud service roles\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/domainNames/slots/roles\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8bc390da-9eb6-938d-25ed-44a35d9bcc9d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5a913c68-0590-402c-a531-e57e19379da3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have a minimum password age - of 1 day\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordAge\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa11bbc-5c76-4302-80e5-aba46a4282e7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1032 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1032\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aa85661-d618-46b8-a20f-ca40a86f0751\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aa85661-d618-46b8-a20f-ca40a86f0751\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not restrict the minimum password - length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5aebc8d1-020d-4037-89a0-02043a7524ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1555 - Vulnerability Scanning | Privileged Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1555\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5afa8cab-1ed7-4e40-884c-64e0ac2059cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5afa8cab-1ed7-4e40-884c-64e0ac2059cc\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"EnforcePasswordHistory\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b054a0d-39e2-4d53-bea3-9734cad2c69b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1205 - Access Restrictions For Change | Signed Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1205\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b070cab-0fb8-4e48-ad29-fc90b4c2797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b070cab-0fb8-4e48-ad29-fc90b4c2797c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1005 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1005\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b626abc-26d4-4e22-9de8-3831818526b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b626abc-26d4-4e22-9de8-3831818526b1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1105 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1105\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b73f57b-587d-4470-a344-0b0ae805f459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b73f57b-587d-4470-a344-0b0ae805f459\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b842acb-0fe7-41b0-9f40-880ec4ad84d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1433 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1433\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b879b41-2728-41c5-ad24-9ee2c37cbe65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b879b41-2728-41c5-ad24-9ee2c37cbe65\"},{\"properties\":{\"displayName\":\"Container - registries should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.\",\"metadata\":{\"version\":\"1.1.2\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/encryption.status\",\"notEquals\":\"enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580\"},{\"properties\":{\"displayName\":\"Ensure - WEB app has 'Client Certificates (Incoming client certificates)' set to 'On'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb220d9-2698-4ee4-8404-b9c30c9df609\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the remote connection status - does not match the specified one\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Remote Host Name\",\"description\":\"Specifies the Domain Name System (DNS) - name or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Port\",\"description\":\"The TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Should connect to remote host\",\"description\":\"Must be 'True' or 'False'. - 'True' indicates that the virtual machine should be able to establish a connection - with the remote host specified, so the machine will be non-compliant if it - cannot establish a connection. 'False' indicates that the virtual machine - should not be able to establish a connection with the remote host specified, - so the machine will be non-compliant if it can establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsRemoteConnection\"},\"host\":{\"value\":\"[parameters('host')]\"},\"port\":{\"value\":\"[parameters('port')]\"},\"shouldConnect\":{\"value\":\"[parameters('shouldConnect')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"host\":{\"type\":\"string\"},\"port\":{\"type\":\"string\"},\"shouldConnect\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"value\":\"[parameters('host')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"value\":\"[parameters('port')]\"},{\"name\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\",\"value\":\"[parameters('shouldConnect')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bb36dda-8a78-4df9-affd-4f05a8612a8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1551 - Vulnerability Scanning | Update Tool Capability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1551\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5bbda922-0172-4095-89e6-5b4a0bf03af7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5bbda922-0172-4095-89e6-5b4a0bf03af7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Network Security'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Network Security'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkSecurity\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c028d2a-1889-45f6-b821-31f42711ced8\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be enabled in virtual machine scale sets for listed - virtual machine images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1671 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1671\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5bbef7-a316-415b-9b38-29753ce8e698\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5bbef7-a316-415b-9b38-29753ce8e698\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1067 - Wireless Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1067\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c5e54f6-0127-44d0-8b61-f31dc8dd6190\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c5e54f6-0127-44d0-8b61-f31dc8dd6190\"},{\"properties\":{\"displayName\":\"External - accounts with write permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"04e7147b-0deb-9796-2e5c-0336343ceb3d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5c607a2e-c700-4744-8254-d77e7c9eb5e4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1483 - Water Damage Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1483\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5cb81060-3c8a-4968-bcdc-395a1801f6c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5cb81060-3c8a-4968-bcdc-395a1801f6c1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1362 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1362\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5d169442-d6ef-439b-8dca-46c2c3248214\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5d169442-d6ef-439b-8dca-46c2c3248214\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1014 - Account Management | Removal Of Temporary / Emergency - Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1014\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5dee936c-8037-4df1-ab35-6635733da48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5dee936c-8037-4df1-ab35-6635733da48c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1665 - Process Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1665\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df3a55c-8456-44d4-941e-175f79332512\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df3a55c-8456-44d4-941e-175f79332512\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Function App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForFunctionApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5df82f4f-773a-4a2d-97a2-422a806f1a55\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/flexibleServers\"},{\"field\":\"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1251 - Contingency Plan | Coordinate With Related Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1251\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e2b3730-8c14-4081-8893-19dbb5de7348\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e2b3730-8c14-4081-8893-19dbb5de7348\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported .NET Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestDotNet\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e393799-e3ca-4e43-a9a5-0ec4648a57d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1116 - Audit Review, Analysis, And Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1116\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5e47bc51-35d1-44b8-92af-e2f2d8b67635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5e47bc51-35d1-44b8-92af-e2f2d8b67635\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1208 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1208\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ea87673-d06b-456f-a324-8abcee5c159f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ea87673-d06b-456f-a324-8abcee5c159f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in India data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: West India, South India, - Central India\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"westindia\",\"southindia\",\"centralindia\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54\"},{\"properties\":{\"displayName\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"15*\"}]}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-12-sp*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"sles-15-sp*\"}]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"gen1\",\"gen2\"]}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"UbuntuServer\",\"0001-com-ubuntu-server-focal\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18_04*lts-gen2\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20_04*lts-gen2\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\",\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\",\"vmExtensionTypeHandlerVersion\":\"1.13\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2018-06-01\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069\"},{\"properties\":{\"displayName\":\"[Preview]: - Private endpoint should be configured for Key Vault\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Key - Vault\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.KeyVault/vaults/privateEndpointConnections[*]\"},\"equals\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0bc445-3935-4915-9981-011aa2b46147\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should use user-assigned managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"anyOf\":[{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"exists\":false},{\"field\":\"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0c7d88-c7de-45b8-ac49-db49e72eaa78\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in Azure Container Registry images should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers' security posture and protect them from attacks.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"dbd0cb49-b563-45e7-9724-889e799fa648\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f0f936f-2f01-4bf5-b6be-d423792fa562\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1576 - Acquisition Process | Design / Implementation Information - For Security Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1576\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f18c885-ade3-48c5-80b1-8f9216019c18\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f18c885-ade3-48c5-80b1-8f9216019c18\"},{\"properties\":{\"displayName\":\"External - accounts with read permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f76cf89-fbf2-47fd-a3f4-b891fa780b60\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux machines to automatically install the Azure Security - agent\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"deploymentScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureSecurityLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/Publisher\",\"equals\":\"Microsoft.Azure.Security.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"in\":[\"Succeeded\",\"Provisioning - succeeded\"]}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"location\":\"eastus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"resourceGroup\":{\"value\":\"[resourceGroup().name]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmName\":{\"value\":\"[field('name')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{\"pairedLocations\":{\"australiacentral\":\"australiacentral\",\"australiaeast\":\"australiaeast\",\"australiasoutheast\":\"australiasoutheast\",\"centralindia\":\"centralindia\",\"centralus\":\"centralus\",\"eastasia\":\"eastasia\",\"eastus2euap\":\"eastus2euap\",\"eastus\":\"eastus\",\"eastus2\":\"eastus2\",\"germanywestcentral\":\"germanywestcentral\",\"japaneast\":\"japaneast\",\"northcentralus\":\"northcentralus\",\"northeurope\":\"northeurope\",\"southcentralus\":\"southcentralus\",\"southeastasia\":\"southeastasia\",\"uksouth\":\"uksouth\",\"westcentralus\":\"westcentralus\",\"westeurope\":\"westeurope\",\"westus\":\"westus\",\"westus2\":\"westus2\"},\"locationLongNameToShortMap\":{\"australiacentral\":\"CAU\",\"australiaeast\":\"EAU\",\"australiasoutheast\":\"SEAU\",\"centralindia\":\"CIN\",\"centralus\":\"CUS\",\"eastasia\":\"EA\",\"eastus2euap\":\"eus2p\",\"eastus\":\"EUS\",\"eastus2\":\"EUS2\",\"germanywestcentral\":\"DEWC\",\"japaneast\":\"EJP\",\"northcentralus\":\"NCUS\",\"northeurope\":\"NEU\",\"southcentralus\":\"SCUS\",\"southeastasia\":\"SEA\",\"uksouth\":\"SUK\",\"westcentralus\":\"WCUS\",\"westeurope\":\"WEU\",\"westus\":\"WUS\",\"westus2\":\"WUS2\"},\"locationCode\":\"[variables('locationLongNameToShortMap')[variables('pairedLocations')[parameters('location')]]]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"defaultRGName\":\"[concat('DefaultResourceGroup-', - variables('locationCode'))]\",\"defaultRGLocation\":\"[variables('pairedLocations')[parameters('location')]]\",\"workspaceName\":\"[concat('defaultWorkspace-', - variables('subscriptionId'),'-', variables('locationCode'))]\",\"dcrName\":\"[concat('Microsoft-Security-', - variables('locationCode'), '-dcr')]\",\"dcrId\":\"[concat('/subscriptions/', - variables('subscriptionId'), '/resourceGroups/', variables('defaultRGName'), - '/providers/Microsoft.Insights/dataCollectionRules/', variables('dcrName'))]\",\"dcraName\":\"[concat(parameters('vmName'),'/Microsoft.Insights/Security-RulesAssociation')]\",\"deployAzureSecurityLinuxAgent\":\"[concat('deployAzureSecurityLinuxAgent-', - uniqueString(deployment().name))]\",\"deployDefaultAscResourceGroup\":\"[concat('deployDefaultAscResourceGroup-', - uniqueString(deployment().name))]\",\"deployDataCollectionRulesAssociation\":\"[concat('deployDataCollectionRulesAssociation-', - uniqueString(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployAzureSecurityLinuxAgent')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', 'AzureSecurityLinuxAgent')]\",\"apiVersion\":\"2019-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Security.Monitoring\",\"type\":\"AzureSecurityLinuxAgent\",\"typeHandlerVersion\":\"2.0\",\"autoUpgradeMinorVersion\":\"true\",\"settings\":{},\"protectedsettings\":{}}}]}}},{\"type\":\"Microsoft.Resources/resourceGroups\",\"name\":\"[variables('defaultRGName')]\",\"apiVersion\":\"2019-05-01\",\"location\":\"[variables('defaultRGLocation')]\"},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDefaultAscResourceGroup')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[variables('defaultRGName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"defaultRGLocation\":{\"value\":\"[variables('defaultRGLocation')]\"},\"workspaceName\":{\"value\":\"[variables('workspaceName')]\"},\"dcrName\":{\"value\":\"[variables('dcrName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"defaultRGLocation\":{\"type\":\"string\"},\"workspaceName\":{\"type\":\"string\"},\"dcrName\":{\"type\":\"string\"}},\"variables\":{\"securitySolution\":{\"Name\":\"[Concat('Security', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"Security\"},\"securityCenterFreeSolution\":{\"Name\":\"[Concat('SecurityCenterFree', - '(', parameters('workspaceName'), ')')]\",\"GalleryName\":\"SecurityCenterFree\"}},\"resources\":[{\"type\":\"Microsoft.OperationalInsights/workspaces\",\"name\":\"[parameters('workspaceName')]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"properties\":{\"sku\":{\"name\":\"pernode\"},\"retentionInDays\":30,\"features\":{\"searchVersion\":1}}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securitySolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securitySolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securitySolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.OperationsManagement/solutions\",\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"apiVersion\":\"2015-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\"},\"plan\":{\"name\":\"[variables('securityCenterFreeSolution').Name]\",\"publisher\":\"Microsoft\",\"product\":\"[Concat('OMSGallery/', - variables('securityCenterFreeSolution').GalleryName)]\",\"promotionCode\":\"\"}},{\"type\":\"Microsoft.Insights/dataCollectionRules\",\"name\":\"[parameters('dcrName')]\",\"apiVersion\":\"2019-11-01-preview\",\"location\":\"[parameters('defaultRGLocation')]\",\"dependsOn\":[\"[parameters('workspaceName')]\"],\"properties\":{\"description\":\"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.\",\"dataSources\":{\"windowsEventLogs\":[{\"name\":\"RomeDetectionEventDataSource\",\"streams\":[\"Microsoft-RomeDetectionEvent\"],\"scheduledTransferPeriod\":\"PT5M\",\"xPathQueries\":[\"Security!*\",\"Microsoft-Windows-AppLocker/EXE - and DLL!*\"]}],\"syslog\":[{\"name\":\"SyslogDataSource\",\"streams\":[\"Microsoft-Syslog\"],\"facilityNames\":[\"kern\",\"auth\",\"authpriv\",\"cron\",\"user\",\"daemon\",\"syslog\",\"local0\"],\"logLevels\":[\"Debug\",\"Critical\",\"Emergency\"]}],\"extensions\":[{\"extensionName\":\"AzureSecurityLinuxAgent\",\"name\":\"AscLinuxDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"time\",\"frequency\":\"PT8H\"},{\"name\":\"antimalware\",\"frequency\":\"PT8H\"},{\"name\":\"codeintegrity\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Ubuntu\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Linux\"}]},{\"name\":\"docker\",\"frequency\":\"P1D\",\"options\":[{\"name\":\"Baseline\",\"value\":\"Azure.Docker.Linux\"},{\"name\":\"AscBaseline\",\"value\":\"OMS.Docker.Linux\"}]}]}},{\"extensionName\":\"AzureSecurityWindowsAgent\",\"name\":\"AsaWindowsDataSource\",\"streams\":[\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-ProcessInvestigator\",\"Microsoft-ProtectionStatus\",\"Microsoft-SecurityBaselineSummary\"],\"extensionSettings\":{\"scanners\":[{\"name\":\"heartbeat\",\"frequency\":\"PT1H\"},{\"name\":\"baseline\",\"frequency\":\"P1D\"},{\"name\":\"antimalware\",\"frequency\":\"P1D\"},{\"name\":\"processinvestigator\",\"frequency\":\"PT1H\"}]}}]},\"destinations\":{\"logAnalytics\":[{\"workspaceResourceId\":\"[resourceId('Microsoft.OperationalInsights/workspaces/', - parameters('workspaceName'))]\",\"name\":\"LogAnalyticsDest\"}]},\"dataFlows\":[{\"streams\":[\"Microsoft-Syslog\",\"Microsoft-OperationLog\",\"Microsoft-SecurityBaseline\",\"Microsoft-SecurityBaselineSummary\",\"Microsoft-RomeDetectionEvent\",\"Microsoft-ProcessInvestigator\",\"Microsoft-Auditd\",\"Microsoft-ProtectionStatus\",\"Microsoft-Heartbeat\"],\"destinations\":[\"LogAnalyticsDest\"]}]}}]}},\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups', - variables('defaultRGName'))]\"]},{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('deployDataCollectionRulesAssociation')]\",\"apiVersion\":\"2020-06-01\",\"resourceGroup\":\"[parameters('resourceGroup')]\",\"dependsOn\":[\"[variables('deployDefaultAscResourceGroup')]\"],\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"vmName\":{\"value\":\"[parameters('vmName')]\"},\"dcrId\":{\"value\":\"[variables('dcrId')]\"},\"dcraName\":{\"value\":\"[variables('dcraName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"vmName\":{\"type\":\"string\"},\"dcrId\":{\"type\":\"string\"},\"dcraName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations\",\"name\":\"[parameters('dcraName')]\",\"apiVersion\":\"2019-11-01-preview\",\"properties\":{\"description\":\"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.\",\"dataCollectionRuleId\":\"[parameters('dcrId')]\"}}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5f8eb305-9c9f-4abe-9bb0-df220d9faba2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Windows virtual machines on which the Windows Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"2.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforWindows\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5fc23db3-dd4d-4c56-bcc7-43626243e601\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"5ffd78d9-436d-4b41-a421-5baa819e3008\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1663 - Protection Of Information At Rest\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1663\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60171210-6dde-40af-a144-bf2670518bfa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60171210-6dde-40af-a144-bf2670518bfa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Object Access'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60aeaf73-a074-417a-905f-7ce9df0ff77b\"},{\"properties\":{\"displayName\":\"Storage - Accounts should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60d21c4f-21a3-4d94-85f4-b924e6aeeda4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows web servers that are not using secure communication - protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"60ffe3e2-4604-4460-8f22-0f1da058266c\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Data Security on SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Data Security on SQL Servers. This includes turning - on Threat Detection and Vulnerability Assessment. It will automatically create - a storage account in the same region and resource group as the SQL server - to store scan results, with a 'sqlva' prefix.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/securityAlertPolicies.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"serverResourceGroupName\":\"[resourceGroup().name]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - variables('serverResourceGroupName'), parameters('location'))]\",\"storageName\":\"[tolower(concat('sqlva', - variables('uniqueStorage')))]\"},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[variables('storageName')]\",\"apiVersion\":\"2019-04-01\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"StorageV2\",\"properties\":{}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"apiVersion\":\"2017-03-01-preview\",\"properties\":{\"state\":\"Enabled\",\"emailAccountAdmins\":true}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"apiVersion\":\"2018-06-01-preview\",\"properties\":{\"storageContainerPath\":\"[concat(reference(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName'))).primaryEndpoints.blob, 'vulnerability-assessment')]\",\"storageAccountAccessKey\":\"[listKeys(resourceId('Microsoft.Storage/storageAccounts', - variables('storageName')), '2018-02-01').keys[0].value]\",\"recurringScans\":{\"isEnabled\":true,\"emailSubscriptionAdmins\":true,\"emails\":[]}},\"dependsOn\":[\"[concat('Microsoft.Storage/storageAccounts/', - variables('storageName'))]\",\"[concat('Microsoft.Sql/servers/', parameters('serverName'), - '/securityAlertPolicies/Default')]\"]}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6134c3db-786f-471e-87bc-8f479dc890f6\"},{\"properties\":{\"displayName\":\"Configure - time zone on Windows machines.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"]},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"SetWindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"SetWindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"assignmentType\":\"DeployAndAutoCorrect\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6141c932-9384-44c6-a395-59e4c057d7c9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints for App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"configurationStores\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"614ffa75-862c-456e-ad8b-eaa1b0844b07\"},{\"properties\":{\"displayName\":\"Bot - Service endpoint should be a valid HTTPS URI\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Bot - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.BotService/botServices\"},{\"field\":\"Microsoft.BotService/botServices/endpoint\",\"notLike\":\"https://*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6164527b-e1ee-4882-8673-572f425f5e0a\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should have the ClusterProtectionLevel property set to EncryptAndSign\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service - Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].name\",\"notEquals\":\"Security\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name\",\"notEquals\":\"ClusterProtectionLevel\"},{\"field\":\"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value\",\"notEquals\":\"EncryptAndSign\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"617c02be-7f02-4efd-8836-3180d47b6c68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1110 - Audit Storage Capacity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1110\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6182bfa7-0f2a-43f5-834a-a2ddf31c13c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1415 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1415\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a1dd98-b259-4840-abd5-fbba7ee0da83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a1dd98-b259-4840-abd5-fbba7ee0da83\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61a4d60b-7326-440e-8051-9f94394d4dd1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1153 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1153\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/61cf3125-142c-4754-8a16-41ab4d529635\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"61cf3125-142c-4754-8a16-41ab4d529635\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System objects'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System objects'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemobjects\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"620e58b5-ac75-49b4-993f-a9d4f0459636\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the Log Analytics agent is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsLogAnalyticsAgentConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"WorkspaceId\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Connected - workspace IDs\",\"description\":\"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6265018c-d7e2-432f-a75d-094d5f6f4465\"},{\"properties\":{\"displayName\":\"Modify - Azure SignalR Service resources to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - improve the security of Azure SignalR Service resource, ensure that it isn't - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},{\"anyOf\":[{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]\"},\"greater\":0}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"Audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.defaultAction\",\"value\":\"Deny\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow\",\"value\":[]}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62a3ae95-8169-403e-a2d2-b82141448092\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1682 - Malicious Code Protection | Nonsignature-Based Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1682\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/62b638c5-29d7-404b-8d93-f21e4b1ce198\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"62b638c5-29d7-404b-8d93-f21e4b1ce198\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1660 - Session Authenticity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1660\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63096613-ce83-43e5-96f4-e588e8813554\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63096613-ce83-43e5-96f4-e588e8813554\"},{\"properties\":{\"displayName\":\"Audit - Windows machines network connectivity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsRemoteConnection\",\"version\":\"1.*\",\"configurationParameter\":{\"host\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;host\",\"port\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;port\",\"shouldConnect\":\"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"host\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Remote - Host Name\",\"description\":\"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine.\"}},\"port\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Port\",\"description\":\"The - TCP port number on the remote host name.\"}},\"shouldConnect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Should - connect to remote host\",\"description\":\"The machine will be non-compliant - if it can't establish a connection.\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsRemoteConnection\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsRemoteConnection]WindowsRemoteConnection1;host', - '=', parameters('host'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;port', - '=', parameters('port'), ',', '[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect', - '=', parameters('shouldConnect')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630ac30f-a234-4533-ac2d-e0df77acda51\"},{\"properties\":{\"displayName\":\"Authentication - to Linux machines should require SSH keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"LinuxNoPasswordForSSH\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"LinuxNoPasswordForSSH\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"630c64f9-8b6b-4c64-b511-6544ceff6fd6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1002 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1002\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/632024c2-8079-439d-a7f6-90af1d78cc65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"632024c2-8079-439d-a7f6-90af1d78cc65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1498 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1498\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/633988b9-cf2f-4323-8394-f0d2af9cd6e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"633988b9-cf2f-4323-8394-f0d2af9cd6e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1177 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1177\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"63dbc7a8-e20b-4d38-b857-a7f6c0cd94bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1185 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1185\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6420cd73-b939-43b7-9d99-e8688fea053c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6420cd73-b939-43b7-9d99-e8688fea053c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Devices'. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Devices: Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsDevices\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\",\"value\":\"[parameters('DevicesAllowedToFormatAndEjectRemovableMedia')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6481cc21-ed6e-4480-99dd-ea7c5222e897\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"field\":\"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"64d314f6-6062-4780-a861-c23e8951bee5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1441 - Media Sanitization | Equipment Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1441\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6519d7f3-e8a2-4ff3-a935-9a9497152ad7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6519d7f3-e8a2-4ff3-a935-9a9497152ad7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1558 - Vulnerability Scanning | Correlate Scanning Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1558\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65592b16-4367-42c5-a26e-d371be450e17\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65592b16-4367-42c5-a26e-d371be450e17\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit missing blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"True\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"655cb504-bcee-4362-bd4c-402e6aa38759\"},{\"properties\":{\"displayName\":\"Azure - Defender for SQL servers on machines should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServerVirtualMachines\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6581d072-105e-4418-827f-bd446d56421b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1261 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1261\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/65aeceb5-a59c-4cb1-8d82-9c474be5d431\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"65aeceb5-a59c-4cb1-8d82-9c474be5d431\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"664346d9-be92-43fb-a219-d595eeb76a90\"},{\"properties\":{\"displayName\":\"Service - principals should be used to protect your subscriptions instead of management - certificates\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"2acd365d-e8b5-4094-bce4-244b7c51d67c\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6646a0bd-e110-40ca-bb97-84fcee63c414\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1444 - Media Use | Prohibit Use Without Owner\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1444\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/666143df-f5e0-45bd-b554-135f0f93e44e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"666143df-f5e0-45bd-b554-135f0f93e44e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1319 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1319\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/66f7ae57-5560-4fc5-85c9-659f204e7a42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"66f7ae57-5560-4fc5-85c9-659f204e7a42\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should enable data encryption with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"field\":\"Microsoft.CognitiveServices/accounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"},{\"count\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*]\",\"where\":{\"field\":\"Microsoft.CognitiveServices/accounts/capabilities[*].name\",\"equals\":\"CustomerManagedKey\"}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67121cc7-ff39-4ab8-b7e3-95b84dab487d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1628 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1628\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67de62b4-a737-4781-8861-3baed3c35069\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67de62b4-a737-4781-8861-3baed3c35069\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - Network' for guest logons, simultaneous connections, network bridge, - ICS, and multicast name resolution. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"version\":\"1.*\",\"configurationParameter\":{\"EnableInsecureGuestLogons\":\"Enable - insecure guest logons;ExpectedValue\",\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"TurnOffMulticastNameResolution\":\"Turn - off multicast name resolution;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - insecure guest logons\",\"description\":\"Specifies whether the SMB client - will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"67e010c1-640d-438e-a3a5-feaccb533a98\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked service resource type should be in allow list\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"allowedLinkedServiceResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed linked service resource types\",\"description\":\"The list of allowed - linked service resource types.\"},\"allowedValues\":[\"AdlsGen2CosmosStructuredStream\",\"AdobeExperiencePlatform\",\"AdobeIntegration\",\"AmazonRedshift\",\"AmazonS3\",\"AzureBlobFS\",\"AzureBlobStorage\",\"AzureDataExplorer\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureDataShare\",\"AzureFileStorage\",\"AzureKeyVault\",\"AzureMariaDB\",\"AzureMySql\",\"AzurePostgreSql\",\"AzureSearch\",\"AzureSqlDatabase\",\"AzureSqlDW\",\"AzureSqlMI\",\"AzureTableStorage\",\"Cassandra\",\"CommonDataServiceForApps\",\"CosmosDb\",\"CosmosDbMongoDbApi\",\"Db2\",\"DynamicsCrm\",\"FileServer\",\"FtpServer\",\"GitHub\",\"GoogleCloudStorage\",\"Hdfs\",\"Hive\",\"HttpServer\",\"Informix\",\"Kusto\",\"MicrosoftAccess\",\"MySql\",\"Netezza\",\"Odata\",\"Odbc\",\"Office365\",\"Oracle\",\"PostgreSql\",\"Salesforce\",\"SalesforceServiceCloud\",\"SapBw\",\"SapHana\",\"SapOpenHub\",\"SapTable\",\"Sftp\",\"SharePointOnlineList\",\"Snowflake\",\"SqlServer\",\"Sybase\",\"Teradata\",\"HDInsightOnDemand\",\"HDInsight\",\"AzureDataLakeAnalytics\",\"AzureBatch\",\"AzureFunction\",\"AzureML\",\"AzureMLService\",\"MongoDb\",\"GoogleBigQuery\",\"Impala\",\"ServiceNow\",\"Dynamics\",\"AzureDatabricks\",\"AmazonMWS\",\"SapCloudForCustomer\",\"SapEcc\",\"Web\",\"MongoDbAtlas\",\"HBase\",\"Spark\",\"Phoenix\",\"PayPal\",\"Marketo\",\"Responsys\",\"SalesforceMarketingCloud\",\"Presto\",\"Square\",\"Xero\",\"Jira\",\"Magento\",\"Shopify\",\"Concur\",\"Hubspot\",\"Zoho\",\"Eloqua\",\"QuickBooks\",\"Couchbase\",\"Drill\",\"Greenplum\",\"MariaDB\",\"Vertica\",\"MongoDbV2\",\"OracleServiceCloud\",\"GoogleAdWords\",\"RestService\",\"DynamicsAX\",\"AzureDataCatalog\",\"AzureDatabricksDeltaLake\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"notIn\":\"[parameters('allowedLinkedServiceResourceTypes')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6809a3d0-d354-42fb-b955-783d207c62a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1377 - Incident Response Assistance | Coordination With External - Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1377\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68434bd1-e14b-4031-9edb-a4adf5f84a67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68434bd1-e14b-4031-9edb-a4adf5f84a67\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the Log Analytics agent - is not connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Connected workspace IDs\",\"description\":\"A semicolon-separated list of - the workspace IDs that the Log Analytics agent should be connected to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId', - '=', parameters('WorkspaceId')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsLogAnalyticsAgentConnection\"},\"WorkspaceId\":{\"value\":\"[parameters('WorkspaceId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WorkspaceId\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId\",\"value\":\"[parameters('WorkspaceId')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68511db2-bd02-41c4-ae6b-1900a012968a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1597 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1597\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68b250ec-2e4f-4eee-898a-117a9fda7016\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68b250ec-2e4f-4eee-898a-117a9fda7016\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1588 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1588\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68ebae26-e0e0-4ecb-8379-aabf633b51e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68ebae26-e0e0-4ecb-8379-aabf633b51e9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1070 - Wireless Access | Disable Wireless Networking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1070\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/68f837d0-8942-4b1e-9b31-be78b247bda8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"68f837d0-8942-4b1e-9b31-be78b247bda8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1727 - Memory Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1727\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/697175a7-9715-4e89-b98b-c6f605888fa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"697175a7-9715-4e89-b98b-c6f605888fa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1652 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1652\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6998e84a-2d29-4e10-8962-76754d4f772d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6998e84a-2d29-4e10-8962-76754d4f772d\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"MicrosoftMonitoringAgent\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"MicrosoftMonitoringAgent\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69af7d4a-7b18-4044-93a9-2651498ef203\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified members in the Administrators group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AdministratorsGroupMembersToExclude\",\"version\":\"1.*\",\"configurationParameter\":{\"MembersToExclude\":\"[LocalGroup]AdministratorsGroup;MembersToExclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MembersToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Members - to exclude\",\"description\":\"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToExclude', - '=', parameters('MembersToExclude')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1699 - Information System Monitoring | Privileged Users\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1699\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69c7bee8-bc19-4129-a51e-65a7b39d3e7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69c7bee8-bc19-4129-a51e-65a7b39d3e7c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1696 - Information System Monitoring | Correlate Monitoring - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1696\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/69d2a238-20ab-4206-a6dc-f302bf88b1b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"69d2a238-20ab-4206-a6dc-f302bf88b1b8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1244 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1244\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a13a8f8-c163-4b1b-8554-d63569dab937\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a13a8f8-c163-4b1b-8554-d63569dab937\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1019 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1019\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a3ee9b2-3977-459c-b8ce-2db583abd9f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a3ee9b2-3977-459c-b8ce-2db583abd9f7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which Windows Defender Exploit - Guard is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available\",\"description\":\"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to 'Non-Compliant' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to 'Compliant' will make these machines compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDefenderExploitGuard\"},\"NotAvailableMachineState\":{\"value\":\"[parameters('NotAvailableMachineState')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NotAvailableMachineState\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\",\"value\":\"[parameters('NotAvailableMachineState')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2015-05-01-preview\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit IP restrictions configuration for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"ConfigureIPRestrictions\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8450e2-6c61-43b4-be65-62e3a197bffe\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1211 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1211\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6a8b9dc8-6b00-4701-aa96-bba3277ebf50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6a8b9dc8-6b00-4701-aa96-bba3277ebf50\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure WEB app is using the latest version of TLS encryption \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ad61431-88ce-4357-a0e1-6da43f292bd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1653 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1653\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1c00a7-7fd0-42b0-8c5b-c45f6fa1f71b\"},{\"properties\":{\"displayName\":\"Deprecated - accounts should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"00c6d40b-e990-6acf-d4f3-471e747a27c4\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b1cbf55-e8b6-442f-ba4c-7246b6381474\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Service Bus to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Service Bus in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b51af03-9277-49a9-a3f8-1c69c9ff7403\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1031 - Separation Of Duties\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1031\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6b93a801-fe25-4574-a60d-cb22acffae00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6b93a801-fe25-4574-a60d-cb22acffae00\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL servers on machine should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.HybridCompute/machines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"f97aa83c-9b63-4f9a-99f6-b22c4398f936\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d\"},{\"properties\":{\"displayName\":\"Not - allowed resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesNotAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that cannot be deployed.\",\"displayName\":\"Not allowed - resource types\",\"strongType\":\"resourceTypes\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesNotAllowed')]\"},{\"value\":\"[field('type')]\",\"exists\":true}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c112d4e-5bc7-47ae-a041-ea2d9dccd749\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1338 - Authenticator Management | Automated Support For Password - Strength Determination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1338\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c59a207-6aed-41dc-83a2-e1ff66e4a4db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c59a207-6aed-41dc-83a2-e1ff66e4a4db\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Kubernetes Service to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Azure Kubernetes Service should be connected to\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AllMetrics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-apiserver\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-apiserver - - Enabled\",\"description\":\"Whether to stream kube-apiserver logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit - - Enabled\",\"description\":\"Whether to stream kube-audit logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-controller-manager\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-controller-manager - - Enabled\",\"description\":\"Whether to stream kube-controller-manager logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-scheduler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-scheduler - - Enabled\",\"description\":\"Whether to stream kube-scheduler logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"cluster-autoscaler\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"cluster-autoscaler - - Enabled\",\"description\":\"Whether to stream cluster-autoscaler logs to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"kube-audit-admin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"kube-audit-admin - - Enabled\",\"description\":\"Whether to stream kube-audit-admin logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"guard\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"guard - - Enabled\",\"description\":\"Whether to stream guard logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AllMetrics\":{\"type\":\"string\"},\"kube-apiserver\":{\"type\":\"string\"},\"kube-audit\":{\"type\":\"string\"},\"kube-controller-manager\":{\"type\":\"string\"},\"kube-scheduler\":{\"type\":\"string\"},\"cluster-autoscaler\":{\"type\":\"string\"},\"kube-audit-admin\":{\"type\":\"string\"},\"guard\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetrics')]\"}],\"logs\":[{\"category\":\"kube-apiserver\",\"enabled\":\"[parameters('kube-apiserver')]\"},{\"category\":\"kube-audit\",\"enabled\":\"[parameters('kube-audit')]\"},{\"category\":\"kube-controller-manager\",\"enabled\":\"[parameters('kube-controller-manager')]\"},{\"category\":\"kube-scheduler\",\"enabled\":\"[parameters('kube-scheduler')]\"},{\"category\":\"cluster-autoscaler\",\"enabled\":\"[parameters('cluster-autoscaler')]\"},{\"category\":\"kube-audit-admin\",\"enabled\":\"[parameters('kube-audit-admin')]\"},{\"category\":\"guard\",\"enabled\":\"[parameters('guard')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"guard\":{\"value\":\"[parameters('guard')]\"},\"AllMetrics\":{\"value\":\"[parameters('AllMetrics')]\"},\"kube-apiserver\":{\"value\":\"[parameters('kube-apiserver')]\"},\"kube-audit\":{\"value\":\"[parameters('kube-audit')]\"},\"kube-scheduler\":{\"value\":\"[parameters('kube-scheduler')]\"},\"kube-controller-manager\":{\"value\":\"[parameters('kube-controller-manager')]\"},\"cluster-autoscaler\":{\"value\":\"[parameters('cluster-autoscaler')]\"},\"kube-audit-admin\":{\"value\":\"[parameters('kube-audit-admin')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6c66c325-74c8-42fd-a286-a74b0e2939d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1304 - Identification And Authentication (Org. Users) | Local - Access To Non-Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1304\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6ca71be3-16cb-4d39-8b50-7f8fd5e2f11b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1437 - Media Transport | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1437\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d1eb6ed-bf13-4046-b993-b9e2aef0f76c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1171 - Penetration Testing | Independent Penetration Agent - Or Team\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1171\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d4820bc-8b61-4982-9501-2123cb776c00\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d4820bc-8b61-4982-9501-2123cb776c00\"},{\"properties\":{\"displayName\":\"Function - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1643 - Cryptographic Key Establishment And Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1643\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8d492c-dd7a-46f7-a723-fa66a425b87c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8d492c-dd7a-46f7-a723-fa66a425b87c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1291 - Information System Backup | Testing For Reliability - / Integrity\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1291\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6d8fd073-9c85-4ee2-a9d0-2e4ec9eb8912\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1175 - Configuration Management Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1175\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dab4254-c30d-4bb7-ae99-1d21586c063c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dab4254-c30d-4bb7-ae99-1d21586c063c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1651 - Mobile Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1651\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6db63528-c9ba-491c-8a80-83e1e6977a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6db63528-c9ba-491c-8a80-83e1e6977a50\"},{\"properties\":{\"displayName\":\"Configure - Azure Automation accounts with private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint group id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"automationAccounts-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6dd01e4f-1be1-4e80-9d0b-d109e04cb064\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with default workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6df2fee6-a9ed-4fef-bced-e13be1b25f1c\"},{\"properties\":{\"displayName\":\"Email - notification for high severity alerts should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/alertNotifications\",\"notEquals\":\"Off\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e2593d9-add6-4083-9c9b-4b7d2188c899\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1586 - External Information System Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1586\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e3b2fbd-8f37-4766-a64d-3f37703dcb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e3b2fbd-8f37-4766-a64d-3f37703dcb51\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1536 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1536\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e40d9de-2ad4-4cb5-8945-23143326a502\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e40d9de-2ad4-4cb5-8945-23143326a502\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1530 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1530\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6e8f9566-29f1-49cd-b61f-f8628a3cf993\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6e8f9566-29f1-49cd-b61f-f8628a3cf993\"},{\"properties\":{\"displayName\":\"Storage - accounts should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6edd7eda-6dd8-40f7-810d-67160c639cd9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1460 - Access Control For Output Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1460\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f3ce1bb-4f77-4695-8355-70b08d54fdda\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f3ce1bb-4f77-4695-8355-70b08d54fdda\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1320 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1320\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f54c732-71d4-4f93-a696-4e373eca3a77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f54c732-71d4-4f93-a696-4e373eca3a77\"},{\"properties\":{\"displayName\":\"Configure - diagnostic settings for storage accounts to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"category\":\"Storage\",\"version\":\"1.3.0\"},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the storage account should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"servicesToDeploy\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Storage - services to deploy\",\"description\":\"List of Storage services to deploy\"},\"allowedValues\":[\"storageAccounts\",\"blobServices\",\"fileServices\",\"tableServices\",\"queueServices\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"StorageDelete\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageDelete - - Enabled\",\"description\":\"Whether to stream StorageDelete logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageWrite\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageWrite - - Enabled\",\"description\":\"Whether to stream StorageWrite logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"StorageRead\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"StorageRead - - Enabled\",\"description\":\"Whether to stream StorageRead logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Transaction\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Transaction - - Enabled\",\"description\":\"Whether to stream Transaction logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"servicesToDeploy\":{\"type\":\"array\"},\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Transaction\":{\"type\":\"string\"},\"StorageRead\":{\"type\":\"string\"},\"StorageWrite\":{\"type\":\"string\"},\"StorageDelete\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'blobServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'fileServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'tableServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'queueServices')]\",\"type\":\"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/default/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"StorageRead\",\"enabled\":\"[parameters('StorageRead')]\"},{\"category\":\"StorageWrite\",\"enabled\":\"[parameters('StorageWrite')]\"},{\"category\":\"StorageDelete\",\"enabled\":\"[parameters('StorageDelete')]\"}]}},{\"condition\":\"[contains(parameters('servicesToDeploy'), - 'storageAccounts')]\",\"type\":\"Microsoft.Storage/storageAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Transaction\",\"enabled\":\"[parameters('Transaction')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"Transaction\":{\"value\":\"[parameters('Transaction')]\"},\"StorageDelete\":{\"value\":\"[parameters('StorageDelete')]\"},\"StorageWrite\":{\"value\":\"[parameters('StorageWrite')]\"},\"StorageRead\":{\"value\":\"[parameters('StorageRead')]\"},\"servicesToDeploy\":{\"value\":\"[parameters('servicesToDeploy')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6f8f98a4-f108-47cb-8e98-91a0d85cd474\"},{\"properties\":{\"displayName\":\"Storage - accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fac406b-40ca-413b-bf8e-0bf964659c25\"},{\"properties\":{\"displayName\":\"Workbooks - should be saved to storage accounts that you control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Audit, - Deny, or Disable the execution of this policy\"},\"allowedValues\":[\"deny\",\"audit\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"microsoft.insights/workbooks\"},{\"field\":\"microsoft.insights/workbooks/storageUri\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fc8115b-2008-441f-8c61-9b722c1e537f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they'll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/topics\"},{\"field\":\"kind\",\"notEquals\":\"AzureArc\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventGrid/topics/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"topic\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1141 - Audit Generation | Changes By Authorized Individuals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1141\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fdefbf4-93e7-4513-bc95-c1858b7093e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fdefbf4-93e7-4513-bc95-c1858b7093e0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Server'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7008174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"OS - and data disks should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"value\":\"[length(field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"exists\":\"true\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]'))]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"anyOf\":[{\"count\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]\",\"where\":{\"value\":\"[length(current('Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId'))]\",\"notEquals\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"exists\":\"true\"}}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"exists\":\"False\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"exists\":\"true\"}}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"702dd420-7fcc-42c5-afe8-4026edd20fe0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Components'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Send file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow Telemetry\",\"description\":\"Specifies configuration of the amount - of diagnostic and usage data reported to Microsoft. The data is transmitted - securely and sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow unencrypted traffic\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) service sends and receives unencrypted messages - over the network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always install with elevated privileges\",\"description\":\"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Always prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Automatically send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Default consent\",\"description\":\"Specifies setting of the default - consent handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Configure Windows SmartScreen\",\"description\":\"Specifies how to manage - the behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow Digest authentication\",\"description\":\"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Disallow WinRM from storing RunAs credentials\",\"description\":\"Specifies - whether the Windows Remote Management (WinRM) service will not allow RunAs - credentials to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Do not allow passwords to be saved\",\"description\":\"Specifies whether to - prevent Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Security: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set client connection encryption level\",\"description\":\"Specifies whether - to require the use of a specific encryption level to secure communications - between client computers and RD Session Host servers during Remote Desktop - Protocol (RDP) connections. This policy only applies when you are using native - RDP encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Set the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Setup: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - System: Specify the maximum log file size (KB)\",\"description\":\"Specifies - the maximum size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off Data Execution Prevention for Explorer\",\"description\":\"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Specify the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsComponents\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},\"AllowIndexingOfEncryptedFiles\":{\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},\"AllowTelemetry\":{\"value\":\"[parameters('AllowTelemetry')]\"},\"AllowUnencryptedTraffic\":{\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},\"AlwaysInstallWithElevatedPrivileges\":{\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},\"AlwaysPromptForPasswordUponConnection\":{\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},\"ConfigureDefaultConsent\":{\"value\":\"[parameters('ConfigureDefaultConsent')]\"},\"ConfigureWindowsSmartScreen\":{\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},\"DisallowDigestAuthentication\":{\"value\":\"[parameters('DisallowDigestAuthentication')]\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},\"DoNotAllowPasswordsToBeSaved\":{\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},\"SetClientConnectionEncryptionLevel\":{\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},\"SetTheDefaultBehaviorForAutoRun\":{\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"string\"},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"string\"},\"AllowTelemetry\":{\"type\":\"string\"},\"AllowUnencryptedTraffic\":{\"type\":\"string\"},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"string\"},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"string\"},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"string\"},\"ConfigureDefaultConsent\":{\"type\":\"string\"},\"ConfigureWindowsSmartScreen\":{\"type\":\"string\"},\"DisallowDigestAuthentication\":{\"type\":\"string\"},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"string\"},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"string\"},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SetClientConnectionEncryptionLevel\":{\"type\":\"string\"},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"string\"},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"string\"},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"string\"},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Send - file samples when further analysis is required;ExpectedValue\",\"value\":\"[parameters('SendFileSamplesWhenFurtherAnalysisIsRequired')]\"},{\"name\":\"Allow - indexing of encrypted files;ExpectedValue\",\"value\":\"[parameters('AllowIndexingOfEncryptedFiles')]\"},{\"name\":\"Allow - Telemetry;ExpectedValue\",\"value\":\"[parameters('AllowTelemetry')]\"},{\"name\":\"Allow - unencrypted traffic;ExpectedValue\",\"value\":\"[parameters('AllowUnencryptedTraffic')]\"},{\"name\":\"Always - install with elevated privileges;ExpectedValue\",\"value\":\"[parameters('AlwaysInstallWithElevatedPrivileges')]\"},{\"name\":\"Always - prompt for password upon connection;ExpectedValue\",\"value\":\"[parameters('AlwaysPromptForPasswordUponConnection')]\"},{\"name\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('ApplicationSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"value\":\"[parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports')]\"},{\"name\":\"Configure - Default consent;ExpectedValue\",\"value\":\"[parameters('ConfigureDefaultConsent')]\"},{\"name\":\"Configure - Windows SmartScreen;ExpectedValue\",\"value\":\"[parameters('ConfigureWindowsSmartScreen')]\"},{\"name\":\"Disallow - Digest authentication;ExpectedValue\",\"value\":\"[parameters('DisallowDigestAuthentication')]\"},{\"name\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"value\":\"[parameters('DisallowWinRMFromStoringRunAsCredentials')]\"},{\"name\":\"Do - not allow passwords to be saved;ExpectedValue\",\"value\":\"[parameters('DoNotAllowPasswordsToBeSaved')]\"},{\"name\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SecuritySpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Set - client connection encryption level;ExpectedValue\",\"value\":\"[parameters('SetClientConnectionEncryptionLevel')]\"},{\"name\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"value\":\"[parameters('SetTheDefaultBehaviorForAutoRun')]\"},{\"name\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SetupSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"value\":\"[parameters('SystemSpecifyTheMaximumLogFileSizeKB')]\"},{\"name\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"value\":\"[parameters('TurnOffDataExecutionPreventionForExplorer')]\"},{\"name\":\"Specify - the interval to check for definition updates;ExpectedValue\",\"value\":\"[parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7040a231-fb65-4412-8c0a-b365f4866c24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1254 - Contingency Plan | Resume All Missions / Business Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1254\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/704e136a-4fe0-427c-b829-cd69957f5d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"704e136a-4fe0-427c-b829-cd69957f5d2b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7066131b-61a6-4917-a7e4-72e8983f0aa6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1509 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1509\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70792197-9bfc-4813-905a-bd33993e327f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70792197-9bfc-4813-905a-bd33993e327f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1541 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1541\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/70f6af82-7be6-44aa-9b15-8b9231b2e434\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"70f6af82-7be6-44aa-9b15-8b9231b2e434\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1691 - Information System Monitoring | Automated Tools For - Real-Time Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1691\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71475fb4-49bd-450b-a1a5-f63894c24725\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71475fb4-49bd-450b-a1a5-f63894c24725\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1481 - Temperature And Humidity Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1481\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/717a1c78-a267-4f56-ac58-ee6c54dc4339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"717a1c78-a267-4f56-ac58-ee6c54dc4339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1129 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1129\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/71bb965d-4047-4623-afd4-b8189a58df5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"71bb965d-4047-4623-afd4-b8189a58df5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1395 - System Maintenance Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1395\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7207a023-a517-41c5-9df2-09d4c6845a05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7207a023-a517-41c5-9df2-09d4c6845a05\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the DSC configuration is not - compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7227ebe5-9ff7-47ab-b823-171cd02fb90f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Network'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7229bd6a-693d-478a-87f0-1dc1af06f3b8\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7238174a-fd10-4ef0-817e-fc820a951d73\"},{\"properties\":{\"displayName\":\"Ensure - that 'PHP version' is the latest, if used as a part of the WEB app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - PHP version\",\"description\":\"Latest supported PHP version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7261b898-8a84-4db8-9e04-18527132abb3\"},{\"properties\":{\"displayName\":\"[Preview]: - Windows machines should meet requirements of the Azure Security Center baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureWindowsBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureWindowsBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that allow re-use of the previous - 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"EnforcePasswordHistory\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726671ac-c4de-4908-8c7d-6043ae62e3b6\"},{\"properties\":{\"displayName\":\"Add - a tag to resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"726aca4c-86e9-4b04-b0c5-073027359532\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Synapse workspace, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"count\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72d11df1-dd8a-41f7-8925-b05b960ebafc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1524 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1524\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/72f1cb4e-2439-4fe8-88ea-b8671ce3c268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"72f1cb4e-2439-4fe8-88ea-b8671ce3c268\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1393 - Information Spillage Response | Exposure To Unauthorized - Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1393\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/731856d8-1598-4b75-92de-7d46235747c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"731856d8-1598-4b75-92de-7d46235747c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1101 - Audit And Accountability Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1101\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7327b708-f0e0-457d-9d2a-527fcc9c9a65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7327b708-f0e0-457d-9d2a-527fcc9c9a65\"},{\"properties\":{\"displayName\":\"Configure - App Configuration to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for App Configuration so that it isn't accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greater(requestContext().apiVersion, - '2019-10-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73290fa2-dfa7-4bbb-945d-a5e23b75df2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1456 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1456\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/733ba9e3-9e7c-440a-a7aa-6196a90a2870\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"733ba9e3-9e7c-440a-a7aa-6196a90a2870\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center recommendations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"For all recommendations, leave empty. For specific - recommendations, enter a list of recommendation IDs separated by semicolons - (';'). Recommendation IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Determines recommendation severities. Example: - High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"recommendationStates\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - states\",\"description\":\"Determines recommendation states. Recommendations - with unhealthy state require your attention to resolve. When a recommendation - state is healthy, it no longer applies to the resource as Security Center - detects it as healthy. A recommendation is not-applicable if, for example, - it was disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;\"},\"allowedValues\":[\"Healthy\",\"Unhealthy\",\"Not - Applicable\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Recommendation is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Recommendation is - created or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(if(equals(length(parameters('recommendationNames')),0),array('Microsoft.Security/assessments'),parameters('recommendationNames')),parameters('recommendationSeverities'),if(contains(parameters('recommendationStates'),'Not - Applicable'),union(parameters('recommendationStates'), array('notapplicable')),parameters('recommendationStates')))]\"},{\"count\":{\"value\":\"[parameters('recommendationSeverities')]\",\"name\":\"recommendationSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.metadata.severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationSeverity')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationSeverities'))]\"},{\"count\":{\"value\":\"[parameters('recommendationStates')]\",\"name\":\"recommendationState\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"properties.status.code\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[replace(current('recommendationState'), - ' ','')]\"}]}},\"equals\":\"[mul(max(1,length(parameters('recommendationNames'))),length(parameters('recommendationSeverities')))]\"}},\"equals\":\"[length(parameters('recommendationStates'))]\"},{\"count\":{\"value\":\"[parameters('recommendationNames')]\",\"name\":\"recommendationName\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"name\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('recommendationName')]\"}]}},\"equals\":\"[mul(length(parameters('recommendationSeverities')),length(parameters('recommendationStates')))]\"}},\"equals\":\"[length(parameters('recommendationNames'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"recommendationStates\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"recommendationStatesLength\":\"[length(parameters('recommendationStates'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"recommendationStatesLengthIfEmpty\":\"[if(equals(variables('recommendationStatesLength'), - 0), 1, variables('recommendationStatesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty'))]\",\"totalRuleCombinationsForOneRecommendationSeverity\":\"[variables('recommendationStatesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationState\":1,\"stateMap\":{\"Healthy\":\"healthy\",\"Unhealthy\":\"unhealthy\",\"Not - Applicable\":\"notapplicable\"},\"triggerMap\":{\"Manual (Incoming HTTP request)\":\"manual\",\"When - an Azure Security Center Recommendation is created or triggered\":\"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center recommendations via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Assessments\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'), - mul(variables('recommendationSeveritiesLengthIfEmpty'),variables('recommendationStatesLengthIfEmpty')))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'type', 'name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), 'Microsoft.Security/assessments', parameters('recommendationNames')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationName')), variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationSeverity')), variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"},{\"propertyJPath\":\"properties.status.code\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('stateMap')[parameters('recommendationStates')[mod(div(copyIndex('ruleSets'), - variables('totalRuleCombinationsForOneRecommendationState')), variables('recommendationStatesLength'))]]]\",\"operator\":\"Contains\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"recommendationStates\":{\"value\":\"[parameters('recommendationStates')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73d6ab6c-2475-4850-afd6-43795f3492ef\"},{\"properties\":{\"displayName\":\"API - Management service should use a SKU that supports virtual networks\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for Azure API Management service.\",\"displayName\":\"Allowed - SKUs\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Isolated\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"not\":{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"73ef9241-5d81-4cd4-b483-8443d1730fe5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1581 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1581\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/742b549b-7a25-465f-b83c-ea1ffb4f4e0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"742b549b-7a25-465f-b83c-ea1ffb4f4e0e\"},{\"properties\":{\"displayName\":\"Storage - accounts should be limited by allowed SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Restrict - the set of storage account SKUs that your organization can deploy.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the audit policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of SKUs that can be specified for storage accounts.\",\"displayName\":\"Allowed - SKUs\",\"strongType\":\"StorageSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7433c107-6db4-4ad1-b57a-a76dce0154a1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1631 - Boundary Protection | Deny By Default / Allow By Exception\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1631\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74ae9b8e-e7bb-4c9c-992f-c535282f7a2c\"},{\"properties\":{\"displayName\":\"Ensure - that 'Python version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"WindowsPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Windows Python version\",\"description\":\"Latest supported Python version - for App Services\",\"deprecated\":true}},\"LinuxPythonLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Linux - Latest Python version\",\"description\":\"Latest supported Python version - for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PYTHON\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PYTHON|', - parameters('LinuxPythonLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c3584d-afae-46f7-a20a-6f8adba71a16\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for Batch accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"74c5a0ae-5e48-4738-b093-65e23a060488\"},{\"properties\":{\"displayName\":\"Public - IP addresses should have resource logs enabled for Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Diagnostic - setting name\",\"description\":\"Profile name for the Azure diagnostic settings - resource\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The target Log Analytics workspace - for the diagnostic settings\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Logs\",\"description\":\"Enable Logs - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Metrics\",\"description\":\"Enable Metrics - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/publicIPAddresses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('LogsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('MetricsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('name'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"DDoSProtectionNotifications\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationFlowLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DDoSMitigationReports\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('name'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"name\":{\"value\":\"[field('name')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752154a7-1e0f-45c6-a880-ac75a7e4f648\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1417 - Nonlocal Maintenance | Comparable Security / Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1417\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7522ed84-70d5-4181-afc0-21e50b1b6d0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7522ed84-70d5-4181-afc0-21e50b1b6d0e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit enabling of diagnostic logs in App Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites/config\"},{\"field\":\"name\",\"equals\":\"web\"},{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"752c6934-9bcc-4749-b004-655e676ae2ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1468 - Visitor Access Records | Automated Records Maintenance - / Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1468\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75603f96-80a1-4757-991d-5a1221765ddd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75603f96-80a1-4757-991d-5a1221765ddd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1053 - Session Lock | Pattern-Hiding Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1053\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7582b19c-9dba-438e-aed8-ede59ac35ba3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7582b19c-9dba-438e-aed8-ede59ac35ba3\"},{\"properties\":{\"displayName\":\"Configure - Azure Migrate resources to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Migrate\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"Default\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/assessmentProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.Migrate/migrateProjects\"},{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId\",\"contains\":\"Microsoft.OffAzure/masterSites\"}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"default-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7590a335-57cf-4c95-babd-ecbc8fafeb1f\"},{\"properties\":{\"displayName\":\"Private - endpoint should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7595c971-233d-4bcf-bd18-596129188c49\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1459 - Access Control For Transmission Medium\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1459\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"75cc73c7-5cdb-479d-a06f-7b4d0dbb1da0\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Vulnerabilities should be remediated by a Vulnerability Assessment solution\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"71992a2a-d168-42e0-b10e-6b45fa2ecddb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"760a85ff-6162-42b3-8d70-698e268f648c\"},{\"properties\":{\"displayName\":\"Deploy - Dependency agent for Linux virtual machine scale sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.\",\"metadata\":{\"version\":\"1.3.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of VM images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude')]\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\",\"vmExtensionTypeHandlerVersion\":\"9.7\"},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"apiVersion\":\"2018-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"typeHandlerVersion\":\"[variables('vmExtensionTypeHandlerVersion')]\",\"autoUpgradeMinorVersion\":true}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for: ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"765266ab-e40e-4c61-bcb2-5a5275d0b7c0\"},{\"properties\":{\"displayName\":\"Private - endpoint connections on Azure SQL Database should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7698e800-9299-47a6-b3b6-5a0fee576eed\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1055 - Session Termination| User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1055\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/769efd9b-3587-4e22-90ce-65ddcd5bd969\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"769efd9b-3587-4e22-90ce-65ddcd5bd969\"},{\"properties\":{\"displayName\":\"Audit - delegation of scopes to a managing tenant\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - delegation of scopes to a managing tenant via Azure Lighthouse.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Lighthouse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationAssignments\"},{\"value\":\"true\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76bed37b-484f-430f-a009-fd7592dff818\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1058 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1058\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76e85d08-8fbb-4112-a1c1-93521e6a9254\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76e85d08-8fbb-4112-a1c1-93521e6a9254\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1508 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1508\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/76f500cc-4bca-4583-bda1-6d084dc21086\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"76f500cc-4bca-4583-bda1-6d084dc21086\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1423 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1423\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7741669e-d4f6-485a-83cb-e70ce7cbbc20\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7741669e-d4f6-485a-83cb-e70ce7cbbc20\"},{\"properties\":{\"displayName\":\"Azure - subscriptions should have a log profile for Activity Log\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"field\":\"Microsoft.Insights/logProfiles/categories\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7796937f-307b-4598-941c-67d3a05ebfe7\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory should use a Git repository for source control\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"exists\":\"false\"},{\"field\":\"Microsoft.DataFactory/factories/repoConfiguration.repositoryName\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77d40665-3120-4348-b539-3192ec808307\"},{\"properties\":{\"displayName\":\"Virtual - network firewall rule on Azure SQL Database should be enabled to allow traffic - from the specified subnet\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"subnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - ID\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\",\"description\":\"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"equals\":\"[parameters('subnetId')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77e8b146-0078-4fb2-b002-e112381199f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1336 - Authenticator Management | Pki-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1336\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/77f56280-e367-432a-a3b9-8ca2aa636a26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"77f56280-e367-432a-a3b9-8ca2aa636a26\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your Azure Cache for Redis instances, data leakage risks are reduced. Learn - more at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Cache/redis/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7803067c-7d34-46e3-8c79-0ca68fc4036d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1258 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1258\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7814506c-382c-4d33-a142-249dd4a0dbff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7814506c-382c-4d33-a142-249dd4a0dbff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1178 - Baseline Configuration | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1178\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7818b8f4-47c6-441a-90ae-12ce04e99893\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7818b8f4-47c6-441a-90ae-12ce04e99893\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1057 - Permitted Actions Without Identification Or Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1057\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78255758-6d45-4bf0-a005-7016bc03b13c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78255758-6d45-4bf0-a005-7016bc03b13c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1700 - Information System Monitoring | Unauthorized Network - Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1700\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7831b4ba-c3f4-4cb1-8c11-ef8d59438cd5\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"amlworkspace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7838fd83-5cbb-4b5d-888c-bfa240972597\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1010 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1010\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/784663a8-1eb0-418a-a98c-24d19bc1bb62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"784663a8-1eb0-418a-a98c-24d19bc1bb62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1216 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1216\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7894fe6a-f5cb-44c8-ba90-c3f254ff9484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7894fe6a-f5cb-44c8-ba90-c3f254ff9484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1639 - Boundary Protection | Isolation Of Information System - Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1639\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/78e8e649-50f6-4fe3-99ac-fedc2e63b03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"78e8e649-50f6-4fe3-99ac-fedc2e63b03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1647 - Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1647\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/791cfc15-6974-42a0-9f4c-2d4b82f4a78c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"791cfc15-6974-42a0-9f4c-2d4b82f4a78c\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your CosmosDB account - isn't exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"797b37f7-06b8-444c-b1ad-fc62867f335a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1510 - Position Risk Designation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1510\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79da5b09-0e7e-499e-adda-141b069c7998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79da5b09-0e7e-499e-adda-141b069c7998\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1384 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1384\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/79fbc228-461c-4a45-9004-a865ca0728a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"79fbc228-461c-4a45-9004-a865ca0728a7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EMSPortNumber\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Port Number\",\"description\":\"An integer indicating the COM port to - be used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"1\",\"2\",\"3\",\"4\"]},\"EMSBaudRate\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - EMS Baud Rate\",\"description\":\"An integer indicating the baud rate to be - used for the Emergency Management Services (EMS) console redirection. For - more information on EMS settings, please visit https://aka.ms/gcpolwsc\"},\"allowedValues\":[\"9600\",\"19200\",\"38400\",\"57600\",\"115200\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber', - '=', parameters('EMSPortNumber'), ',', '[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate', - '=', parameters('EMSBaudRate')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsSerialConsole\"},\"EMSPortNumber\":{\"value\":\"[parameters('EMSPortNumber')]\"},\"EMSBaudRate\":{\"value\":\"[parameters('EMSBaudRate')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EMSPortNumber\":{\"type\":\"string\"},\"EMSBaudRate\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber\",\"value\":\"[parameters('EMSPortNumber')]\"},{\"name\":\"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate\",\"value\":\"[parameters('EMSBaudRate')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a031c68-d6ab-406e-a506-697a19c634b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1093 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1093\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a0bdeeb-15f4-47e8-a1da-9f769f845fdf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1708 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1708\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a1e2c88-13de-4959-8ee7-47e3d74f1f48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a1e2c88-13de-4959-8ee7-47e3d74f1f48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1289 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1289\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a724864-956a-496c-b778-637cb1d762cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a724864-956a-496c-b778-637cb1d762cf\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints connected to App Configuration\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"configurationStores\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-azconfig-io\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a860e27-9ca2-4fc6-822d-c2d248c300df\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1687 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1687\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a87fc7f-301e-49f3-ba2a-4d74f424fa97\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a87fc7f-301e-49f3-ba2a-4d74f424fa97\"},{\"properties\":{\"displayName\":\"Allow - managing tenant ids to onboard through Azure Lighthouse\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Lighthouse\"},\"parameters\":{\"listOfAllowedTenants\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - tenants\",\"description\":\"List of the tenants IDs that can be onboarded - through Azure Lighthouse\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ManagedServices/registrationDefinitions\"},{\"not\":{\"field\":\"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId\",\"in\":\"[parameters('listOfAllowedTenants')]\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7a8a51a3-ad87-4def-96f3-65a1839242b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1061 - Remote Access | Automated Monitoring / Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1061\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ac22808-a2e8-41c4-9d46-429b50738914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ac22808-a2e8-41c4-9d46-429b50738914\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1492 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1492\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ad5f307-e045-46f7-8214-5bdb7e973737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ad5f307-e045-46f7-8214-5bdb7e973737\"},{\"properties\":{\"displayName\":\"Azure - Attestation providers should use private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Attestation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Attestation/attestationProviders\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint\",\"exists\":\"true\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b256a2d-058b-41f8-bed9-3f870541c40a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1636 - Boundary Protection | Isolation Of Security Tools / - Mechanisms / Support Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1636\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7b694eed-7081-43c6-867c-41c76c961043\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7b694eed-7081-43c6-867c-41c76c961043\"},{\"properties\":{\"displayName\":\"Resource - logs in Virtual Machine Scale Sets should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.\",\"metadata\":{\"version\":\"2.0.1\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"includeAKSClusters\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - AKS Clusters\",\"description\":\"Whether to include AKS Clusters to resource - logs extension - True or False\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":true}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"value\":\"[parameters('includeAKSClusters')]\",\"equals\":false},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notEquals\":\"microsoft-aks\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notEquals\":\"aks\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"aks*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"IaaSDiagnostics\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Diagnostics\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"equals\":\"LinuxDiagnostic\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"in\":[\"Microsoft.OSTCExtensions\",\"Microsoft.Azure.Diagnostics\"]}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c1b1214-f927-48bf-8882-84f0af6588b1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Require blob encryption for storage accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Storage\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/enableBlobEncryption\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1143 - Security Assessment And Authorization Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1143\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7c6de11b-5f51-4f7c-8d83-d2467c8a816e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7c6de11b-5f51-4f7c-8d83-d2467c8a816e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1051 - Session Lock\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1051\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7cac6ee9-b58b-40c8-a5ce-f0efc3d9b339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1279 - Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1279\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d00bcd6-963d-4c02-ad8e-b45fa50bf3b0\"},{\"properties\":{\"displayName\":\"Azure - Cache for Redis should reside within a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Cache\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Cache/redis\"},{\"field\":\"Microsoft.Cache/Redis/subnetId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d092e0a-7acd-40d2-a975-dca21cae48c4\"},{\"properties\":{\"displayName\":\"Both - operating systems and data disks in Azure Kubernetes Service clusters should - be encrypted by customer-managed keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Encrypting - OS and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"'Audit' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. 'Deny' blocks the non-compliant resource creation or update. - 'Disabled' turns off the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"exists\":\"False\"},{\"field\":\"Microsoft.ContainerService/managedClusters/diskEncryptionSetID\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d7be79c-23ba-4033-84dd-45e2a5ccdd67\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},{\"field\":\"Microsoft.ServiceBus/namespaces/sku.tier\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d890f7f-100c-473d-baa1-2777e2266535\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1109 - Content Of Audit Records | Centralized Management Of - Planned Audit Record Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1109\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7d9ffa23-ad92-4d0d-b1f4-7db274cc2aec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1201 - Security Impact Analysis | Separate Test Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1201\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7daef997-fdd3-461b-8807-a608a6dd70f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7daef997-fdd3-461b-8807-a608a6dd70f1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1471 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1471\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7dd0e9ce-1772-41fb-a50a-99977071f916\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7dd0e9ce-1772-41fb-a50a-99977071f916\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e56b49b-5990-4159-a734-511ea19b731c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1011 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1011\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e6a54f3-883f-43d5-87c4-172dfd64a1f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e6a54f3-883f-43d5-87c4-172dfd64a1f5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that have not restarted within the specified - number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7e84ba44-6d03-46fd-950e-5efa5a1112fa\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure SQL Database server to Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the server should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"logAnalyticsWorkspaceId\":{\"type\":\"string\"}},\"variables\":{\"diagnosticSettingsName\":\"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1\"},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"name\":\"[concat(parameters('serverName'),'/master/microsoft.insights/',variables('diagnosticSettingsName'))]\",\"apiVersion\":\"2017-05-01-preview\",\"properties\":{\"name\":\"[variables('diagnosticSettingsName')]\",\"workspaceId\":\"[parameters('logAnalyticsWorkspaceId')]\",\"logs\":[{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":true,\"retentionPolicy\":{\"days\":0,\"enabled\":false}}]}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[concat('Microsoft.Sql/servers/', - parameters('serverName'),'/databases/master/providers/microsoft.insights/diagnosticSettings/', - variables('diagnosticSettingsName'))]\"],\"properties\":{\"state\":\"Enabled\",\"isAzureMonitorTargetEnabled\":true}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"logAnalyticsWorkspaceId\":{\"value\":\"[parameters('logAnalyticsWorkspaceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ea8a143-05e3-4553-abfe-f56bef8b0b70\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1692 - Information System Monitoring | Inbound And Outbound - Communications Traffic\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1692\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ecda928-9df4-4dd7-8f44-641a91e470e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ecda928-9df4-4dd7-8f44-641a91e470e8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordMustMeetComplexityRequirements\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1191 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1191\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f26a61b-a74d-467c-99cf-63644db144f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f26a61b-a74d-467c-99cf-63644db144f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1520 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1520\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f2c513b-eb16-463b-b469-c10e5fa94f0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f2c513b-eb16-463b-b469-c10e5fa94f0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1126 - Audit Reduction And Report Generation | Automatic Processing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1126\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f37f71b-420f-49bf-9477-9c0196974ecf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f37f71b-420f-49bf-9477-9c0196974ecf\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Privilege Use'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c\"},{\"properties\":{\"displayName\":\"Audit - diagnostic setting\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - diagnostic setting for selected resource types\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfResourceTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - Types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypes')]\"},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7f89b1eb-583c-429a-8828-af049802c1d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1117 - Audit Review, Analysis, And Reporting | Process Integration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1117\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fbfe680-6dbb-4037-963c-a621c5635902\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fbfe680-6dbb-4037-963c-a621c5635902\"},{\"properties\":{\"displayName\":\"Azure - Defender for Azure SQL Database servers should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"SqlServers\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2\"},{\"properties\":{\"displayName\":\"SQL - Auditing settings should have Action-Groups configured to capture critical - activities\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"FAILED_DATABASE_AUTHENTICATION_GROUP\"}},{\"not\":{\"field\":\"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]\",\"notEquals\":\"BATCH_COMPLETED_GROUP\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7ff426e2-515f-405a-91c8-4f2333442eb5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1703 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1703\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/804faf7d-b687-40f7-9f74-79e28adf4205\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"804faf7d-b687-40f7-9f74-79e28adf4205\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1303 - Identification And Authentication (Org. Users) | Local - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1303\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80ca0a27-918a-4604-af9e-723a27ee51e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80ca0a27-918a-4604-af9e-723a27ee51e8\"},{\"properties\":{\"displayName\":\"Deploy - - Configure suppression rules for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.\",\"metadata\":{\"category\":\"Security - Center\",\"version\":\"1.0.0\"},\"parameters\":{\"alertType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - Type\",\"description\":\"Enter the alert type field of the alert you would - like to suppress. Alert type could be queried via alerts api or PowerShell, - learn more at https://aka.ms/asc-alertsPwoershell\"}},\"suppressionRuleName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Rule - name\",\"description\":\"Rule names must begin with a letter or a number, - be between 2 and 50 characters, and contain no symbols other than dashes ( - - ) or underscores ( _ )\"}},\"state\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"State\"},\"allowedValues\":[\"Enabled\",\"Disabled\"]},\"reason\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Reason\"},\"allowedValues\":[\"The - severity of the alert should be lower\",\"The alert detecting too many normal - activities\",\"The alert is too noisy - hitting on the same resources too - many times\",\"The resource isn't relevant for me to monitor\",\"The alert - detecting normal activity on specific entity\",\"The alert isn't actionable - - not clear how to investigate the threat\",\"Other\"]},\"comment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Comment\"}},\"expirationDate\":{\"type\":\"DateTime\",\"metadata\":{\"displayName\":\"Expiration - date\"}},\"entityOneType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entityOneOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entityOneValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"First - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}},\"entitySecondType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity type\",\"description\":\"To refine the suppression rules to suppress - alerts only for specific entities, enter the type of the entity you would - like to suppress. Only alerts containing all of the entities defined in the - rule will be suppressed (alerts without entities will be suppressed entirely).\"},\"allowedValues\":[\"User - account - name\",\"User account - AAD user ID\",\"User account - UPN suffix\",\"Azure - resource ID\",\"File - name\",\"File - directory\",\"File hash\",\"Host - - name\",\"Host - Azure ID\",\"Host - DNS Domain\",\"Host - OMS agent ID\",\"IP - address\",\"Malware - name\",\"Malware - category\",\"Process - command line\",\"\"]},\"entitySecondOp\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity operation\"},\"allowedValues\":[\"Equals\",\"Contains\",\"\"]},\"entitySecondValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Second - entity value\",\"description\":\"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely).\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"name\":\"[parameters('suppressionRuleName')]\",\"existenceScope\":\"subscription\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"location\":\"centralus\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"alertType\":{\"type\":\"String\"},\"suppressionRuleName\":{\"type\":\"String\"},\"state\":{\"type\":\"String\"},\"reason\":{\"type\":\"String\"},\"comment\":{\"type\":\"String\"},\"expirationDate\":{\"type\":\"String\"},\"entityOneType\":{\"type\":\"String\"},\"entityOneOp\":{\"type\":\"String\"},\"entityOneValue\":{\"type\":\"String\"},\"entitySecondType\":{\"type\":\"String\"},\"entitySecondOp\":{\"type\":\"String\"},\"entitySecondValue\":{\"type\":\"String\"}},\"variables\":{\"reasonToEnum\":{\"The - severity of the alert should be lower\":\"AlertSeverityTooHigh\",\"The alert - detecting too many normal activities\":\"FalsePositive\",\"The alert is too - noisy - hitting on the same resources too many times\":\"Noise\",\"The resource - isn't relevant for me to monitor\":\"NotRelevant\",\"The alert detecting normal - activity on specific entity\":\"SpecificEntityFalsePositive\",\"The alert - isn't actionable - not clear how to investigate the threat\":\"Unclear\",\"Other\":\"Other\"},\"entityNameToType\":{\"User - account - name\":\"entities.account.name\",\"User account - AAD user ID\":\"entities.account.aaduserid\",\"User - account - UPN suffix\":\"entities.account.upnsuffix\",\"Azure resource ID\":\"entities.azureresource.resourceid\",\"File - - name\":\"entities.file.name\",\"File - directory\":\"entities.file.directory\",\"File - hash\":\"entities.filehash.value\",\"Host - name\":\"entities.host.hostname\",\"Host - - Azure ID\":\"entities.host.azureid\",\"Host - DNS Domain\":\"entities.host.dnsdomain\",\"Host - - OMS agent ID\":\"entities.host.omsagentid\",\"IP address\":\"entities.ip.address\",\"Malware - - name\":\"entities.malware.name\",\"Malware - category\":\"entities.malware.category\",\"Process - - command line: \":\"entities.process.commandline\"},\"entityOperationNameToOperation\":{\"Equals\":\"in\",\"Contains\":\"contains\"}},\"resources\":[{\"type\":\"Microsoft.Security/alertsSuppressionRules\",\"apiVersion\":\"2019-01-01-preview\",\"name\":\"[parameters('suppressionRuleName')]\",\"location\":\"centralus\",\"properties\":{\"alertType\":\"[parameters('alertType')]\",\"state\":\"[parameters('state')]\",\"reason\":\"[variables('reasonToEnum')[parameters('reason')]]\",\"comment\":\"[parameters('comment')]\",\"expirationDateUtc\":\"[parameters('expirationDate')]\",\"suppressionAlertsScope\":\"[if(and(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue')))), - null(), json(concat('{ \\\"allOf\\\": [', if(or(empty(parameters('entityOneType')), - empty(parameters('entityOneOp')), empty(parameters('entityOneValue'))), '', - concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entityOneType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entityOneOp')], - '\\\":', if(equals(parameters('entityOneOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entityOneValue'), '\\\"', if(equals(parameters('entityOneOp'), - 'Equals'), ']', ''), ' }', if(or(empty(parameters('entitySecondType')), empty(parameters('entitySecondOp')), - empty(parameters('entitySecondValue'))), '', ', '))), if(or(empty(parameters('entitySecondType')), - empty(parameters('entitySecondOp')), empty(parameters('entitySecondValue'))), - '', concat(' { \\\"field\\\": \\\"', variables('entityNameToType')[parameters('entitySecondType')], - '\\\", \\\"', variables('entityOperationNameToOperation')[parameters('entitySecondOp')], - '\\\":', if(equals(parameters('entitySecondOp'), 'Equals'), '[', ''), ' \\\"', - parameters('entitySecondValue'), '\\\"', if(equals(parameters('entitySecondOp'), - 'Equals'), ']', ''), ' } ')), '] }')))]\"}}]},\"parameters\":{\"alertType\":{\"value\":\"[parameters('alertType')]\"},\"suppressionRuleName\":{\"value\":\"[parameters('suppressionRuleName')]\"},\"state\":{\"value\":\"[parameters('state')]\"},\"reason\":{\"value\":\"[parameters('reason')]\"},\"comment\":{\"value\":\"[parameters('comment')]\"},\"expirationDate\":{\"value\":\"[parameters('expirationDate')]\"},\"entityOneType\":{\"value\":\"[parameters('entityOneType')]\"},\"entityOneOp\":{\"value\":\"[parameters('entityOneOp')]\"},\"entityOneValue\":{\"value\":\"[parameters('entityOneValue')]\"},\"entitySecondType\":{\"value\":\"[parameters('entitySecondType')]\"},\"entitySecondOp\":{\"value\":\"[parameters('entitySecondOp')]\"},\"entitySecondValue\":{\"value\":\"[parameters('entitySecondValue')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"80e94a21-c6cd-4c95-a2c7-beb5704e61c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1505 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1505\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/813a10a7-3943-4fe3-8678-00dc52db5490\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"813a10a7-3943-4fe3-8678-00dc52db5490\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1614 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1614\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8154e3b3-cc52-40be-9407-7756581d71f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8154e3b3-cc52-40be-9407-7756581d71f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'User Rights Assignment'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on locally\",\"description\":\"Specifies which - users or groups can interactively log on to the computer. Users who attempt - to log on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the system time\",\"description\":\"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may change the time zone\",\"description\":\"Specifies - which users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may create a token object\",\"description\":\"Specifies - which users and groups are permitted to create an access token, which may - provide elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied local logon\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - User and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users and groups that may shut down the system\",\"description\":\"Specifies - which users and groups who are logged on locally to the computers in your - environment are permitted to shut down the operating system with the Shut - Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Users or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_UserRightsAssignment\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"string\"},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"string\"},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"string\"},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"string\"},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"string\"},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"string\"},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"string\"},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"string\"},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"string\"},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"string\"},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Access - this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork')]\"},{\"name\":\"Allow - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnLocally')]\"},{\"name\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Deny - access to this computer from the network;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork')]\"},{\"name\":\"Manage - auditing and security log;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog')]\"},{\"name\":\"Back - up files and directories;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories')]\"},{\"name\":\"Change - the system time;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheSystemTime')]\"},{\"name\":\"Change - the time zone;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayChangeTheTimeZone')]\"},{\"name\":\"Create - a token object;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayCreateATokenObject')]\"},{\"name\":\"Deny - log on as a batch job;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob')]\"},{\"name\":\"Deny - log on as a service;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService')]\"},{\"name\":\"Deny - log on locally;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLocalLogon')]\"},{\"name\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices')]\"},{\"name\":\"Force - shutdown from a remote system;ExpectedValue\",\"value\":\"[parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem')]\"},{\"name\":\"Restore - files and directories;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories')]\"},{\"name\":\"Shut - down the system;ExpectedValue\",\"value\":\"[parameters('UsersAndGroupsThatMayShutDownTheSystem')]\"},{\"name\":\"Take - ownership of files or other objects;ExpectedValue\",\"value\":\"[parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"815dcc9f-6662-43f2-9a03-1b83e9876f24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1308 - Identification And Authentication (Org. Users) | Remote - Access - Separate Device\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1308\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81817e1c-5347-48dd-965a-40159d008229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81817e1c-5347-48dd-965a-40159d008229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1287 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1287\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/819dc6da-289d-476e-8500-7e341ef8677d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"819dc6da-289d-476e-8500-7e341ef8677d\"},{\"properties\":{\"displayName\":\"Azure - Data Explorer encryption at rest should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyName\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81e74cea-30fd-40d5-802f-d72103c2aaaa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1213 - Configuration Settings | Respond To Unauthorized Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1213\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/81f11e32-a293-4a58-82cd-134af52e2318\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"81f11e32-a293-4a58-82cd-134af52e2318\"},{\"properties\":{\"displayName\":\"Geo-redundant - backup should be enabled for Azure Database for MySQL\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82339799-d096-41ae-8538-b108becf0970\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1168 - Continuous Monitoring | Independent Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1168\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82409f9e-1f32-4775-bf07-b99d53a91b06\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82409f9e-1f32-4775-bf07-b99d53a91b06\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1448 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1448\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/825d6494-e583-42f2-a3f2-6458e6f0004f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"825d6494-e583-42f2-a3f2-6458e6f0004f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1452 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1452\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/82c76455-4d3f-4e09-a654-22e592107e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"82c76455-4d3f-4e09-a654-22e592107e74\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - System' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AuditOtherSystemEvents\":\"Audit - Other System Events;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Audit - Other System Events\",\"description\":\"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8316fa92-d69c-4810-8124-62414f560dcf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1262 - Contingency Plan Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1262\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/831e510e-db41-4c72-888e-a0621ab62265\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"831e510e-db41-4c72-888e-a0621ab62265\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1008 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1008\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8356cfc6-507a-4d20-b818-08038011cd07\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8356cfc6-507a-4d20-b818-08038011cd07\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines with a given tag to a new recovery services - vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally include virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"inclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Name\",\"description\":\"Name of the tag to use for including - VMs in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"inclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Inclusion Tag Values\",\"description\":\"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"field\":\"[concat('tags[', - parameters('inclusionTagName'), ']')]\",\"in\":\"[parameters('inclusionTagValue')]\"},{\"value\":\"[empty(parameters('inclusionTagValue'))]\",\"equals\":\"true\"},{\"value\":\"[empty(parameters('inclusionTagName'))]\",\"equals\":\"true\"}]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83644c87-93dd-49fe-bf9f-6aff8fd0834e\"},{\"properties\":{\"displayName\":\"Resource - logs in Event Hub should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a214f7-d01a-484b-91a9-ed54470c9a6a\"},{\"properties\":{\"displayName\":\"Network - interfaces should not have public IPs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which are configured with any public - IP. Public IP addresses allow internet resources to communicate inbound to - Azure resources, and Azure resources to communicate outbound to the internet. - This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id\",\"notLike\":\"*\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83a86a26-fd1f-447c-b59d-e51f44264114\"},{\"properties\":{\"displayName\":\"Bring - your own key data protection should be enabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMySQL/servers/keys\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.DBforMySQL/servers/keys/serverKeyType\",\"equals\":\"AzureKeyVault\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"notEquals\":\"\"},{\"field\":\"Microsoft.DBforMySQL/servers/keys/uri\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"83cef61d-dbd1-4b20-a4fc-5fbc7da10833\"},{\"properties\":{\"displayName\":\"Managed - disks should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that a managed disk isn't - exposed on the public internet. Creating private endpoints can limit exposure - of managed disks. Learn more at: https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"DenyAll\",\"AllowPrivate\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8405fdab-1faf-48aa-b702-999c9c172094\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1382 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1382\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/841392b3-40da-4473-b328-4cde49db67b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"841392b3-40da-4473-b328-4cde49db67b3\"},{\"properties\":{\"displayName\":\"Configure - managed disks to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your managed disk resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]},\"location\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Location\",\"strongType\":\"location\",\"description\":\"All - disks in this region are validated and disk access resource would be associated - with them.\"}},\"diskAccessId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked\",\"strongType\":\"Microsoft.Compute/diskAccesses\",\"description\":\"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"location\",\"equals\":\"[parameters('location')]\"},{\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"notIn\":[\"AllowPrivate\",\"DenyAll\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/diskAccessId\",\"value\":\"[parameters('diskAccessId')]\"},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Compute/disks/networkAccessPolicy\",\"value\":\"AllowPrivate\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8426280e-b5be-43d9-979e-653d12a08638\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"842c54e8-c2f9-4d79-ae8d-38d8b8019373\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1098 - Security Training Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1098\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84363adb-dde3-411a-9fc1-36b56737f822\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84363adb-dde3-411a-9fc1-36b56737f822\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"843664e0-7563-41ee-a9cb-7522c382d2c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1119 - Audit Review, Analysis, And Reporting | Central Review - And Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1119\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/845f6359-b764-4b40-b579-657aefe23c44\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"845f6359-b764-4b40-b579-657aefe23c44\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDomainMembership\",\"version\":\"1.*\",\"configurationParameter\":{\"DomainName\":\"[DomainMembership]WindowsDomainMembership;DomainName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DomainName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Domain - Name (FQDN)\",\"description\":\"The fully qualified domain name (FQDN) that - the Windows machines should be joined to\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[DomainMembership]WindowsDomainMembership;DomainName', - '=', parameters('DomainName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84662df4-0e37-44a6-9ce1-c9d2150db18c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1024 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1024\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84914fb4-12da-4c53-a341-a9fd463bed10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84914fb4-12da-4c53-a341-a9fd463bed10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1307 - Identification And Authentication (Org. Users) | Net. - Access To Non-Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1307\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/84e622c8-4bed-417c-84c6-b2fb0dd73682\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"84e622c8-4bed-417c-84c6-b2fb0dd73682\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1080 - Use Of External Information Systems | Portable Storage - Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1080\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/852981b4-a380-4704-aa1e-2e52d63445e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"852981b4-a380-4704-aa1e-2e52d63445e5\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Windows - Components' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_WindowsComponents\",\"version\":\"1.*\",\"configurationParameter\":{\"SendFileSamplesWhenFurtherAnalysisIsRequired\":\"Send - file samples when further analysis is required;ExpectedValue\",\"AllowIndexingOfEncryptedFiles\":\"Allow - indexing of encrypted files;ExpectedValue\",\"AllowTelemetry\":\"Allow Telemetry;ExpectedValue\",\"AllowUnencryptedTraffic\":\"Allow - unencrypted traffic;ExpectedValue\",\"AlwaysInstallWithElevatedPrivileges\":\"Always - install with elevated privileges;ExpectedValue\",\"AlwaysPromptForPasswordUponConnection\":\"Always - prompt for password upon connection;ExpectedValue\",\"ApplicationSpecifyTheMaximumLogFileSizeKB\":\"Application: - Specify the maximum log file size (KB);ExpectedValue\",\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":\"Automatically - send memory dumps for OS-generated error reports;ExpectedValue\",\"ConfigureDefaultConsent\":\"Configure - Default consent;ExpectedValue\",\"ConfigureWindowsSmartScreen\":\"Configure - Windows SmartScreen;ExpectedValue\",\"DisallowDigestAuthentication\":\"Disallow - Digest authentication;ExpectedValue\",\"DisallowWinRMFromStoringRunAsCredentials\":\"Disallow - WinRM from storing RunAs credentials;ExpectedValue\",\"DoNotAllowPasswordsToBeSaved\":\"Do - not allow passwords to be saved;ExpectedValue\",\"SecuritySpecifyTheMaximumLogFileSizeKB\":\"Security: - Specify the maximum log file size (KB);ExpectedValue\",\"SetClientConnectionEncryptionLevel\":\"Set - client connection encryption level;ExpectedValue\",\"SetTheDefaultBehaviorForAutoRun\":\"Set - the default behavior for AutoRun;ExpectedValue\",\"SetupSpecifyTheMaximumLogFileSizeKB\":\"Setup: - Specify the maximum log file size (KB);ExpectedValue\",\"SystemSpecifyTheMaximumLogFileSizeKB\":\"System: - Specify the maximum log file size (KB);ExpectedValue\",\"TurnOffDataExecutionPreventionForExplorer\":\"Turn - off Data Execution Prevention for Explorer;ExpectedValue\",\"SpecifyTheIntervalToCheckForDefinitionUpdates\":\"Specify - the interval to check for definition updates;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"SendFileSamplesWhenFurtherAnalysisIsRequired\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Send - file samples when further analysis is required\",\"description\":\"Specifies - whether and how Windows Defender will submit samples of suspected malware - \ to Microsoft for further analysis when opt-in for MAPS telemetry is set.\"}},\"AllowIndexingOfEncryptedFiles\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - indexing of encrypted files\",\"description\":\"Specifies whether encrypted - items are allowed to be indexed.\"}},\"AllowTelemetry\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - Telemetry\",\"description\":\"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent.\"}},\"AllowUnencryptedTraffic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Allow - unencrypted traffic\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network.\"}},\"AlwaysInstallWithElevatedPrivileges\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - install with elevated privileges\",\"description\":\"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system.\"}},\"AlwaysPromptForPasswordUponConnection\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - prompt for password upon connection\",\"description\":\"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection.\"}},\"ApplicationSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Application event log in kilobytes.\"}},\"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automatically - send memory dumps for OS-generated error reports\",\"description\":\"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically.\"}},\"ConfigureDefaultConsent\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Default consent\",\"description\":\"Specifies setting of the default consent - handling for error reports sent to Microsoft.\"}},\"ConfigureWindowsSmartScreen\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configure - Windows SmartScreen\",\"description\":\"Specifies how to manage the behavior - of Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning - users before running unrecognized programs downloaded from the Internet. Some - information is sent to Microsoft about files and programs run on PCs with - this feature enabled.\"}},\"DisallowDigestAuthentication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - Digest authentication\",\"description\":\"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication.\"}},\"DisallowWinRMFromStoringRunAsCredentials\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Disallow - WinRM from storing RunAs credentials\",\"description\":\"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins.\"}},\"DoNotAllowPasswordsToBeSaved\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Do - not allow passwords to be saved\",\"description\":\"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer.\"}},\"SecuritySpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Security: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Security event log in kilobytes.\"}},\"SetClientConnectionEncryptionLevel\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - client connection encryption level\",\"description\":\"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption.\"}},\"SetTheDefaultBehaviorForAutoRun\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Set - the default behavior for AutoRun\",\"description\":\"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines.\"}},\"SetupSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setup: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the Setup event log in kilobytes.\"}},\"SystemSpecifyTheMaximumLogFileSizeKB\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"System: - Specify the maximum log file size (KB)\",\"description\":\"Specifies the maximum - size for the System event log in kilobytes.\"}},\"TurnOffDataExecutionPreventionForExplorer\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - off Data Execution Prevention for Explorer\",\"description\":\"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer.\"}},\"SpecifyTheIntervalToCheckForDefinitionUpdates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Specify - the interval to check for definition updates\",\"description\":\"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Send - file samples when further analysis is required;ExpectedValue', '=', parameters('SendFileSamplesWhenFurtherAnalysisIsRequired'), - ',', 'Allow indexing of encrypted files;ExpectedValue', '=', parameters('AllowIndexingOfEncryptedFiles'), - ',', 'Allow Telemetry;ExpectedValue', '=', parameters('AllowTelemetry'), ',', - 'Allow unencrypted traffic;ExpectedValue', '=', parameters('AllowUnencryptedTraffic'), - ',', 'Always install with elevated privileges;ExpectedValue', '=', parameters('AlwaysInstallWithElevatedPrivileges'), - ',', 'Always prompt for password upon connection;ExpectedValue', '=', parameters('AlwaysPromptForPasswordUponConnection'), - ',', 'Application: Specify the maximum log file size (KB);ExpectedValue', - '=', parameters('ApplicationSpecifyTheMaximumLogFileSizeKB'), ',', 'Automatically - send memory dumps for OS-generated error reports;ExpectedValue', '=', parameters('AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'), - ',', 'Configure Default consent;ExpectedValue', '=', parameters('ConfigureDefaultConsent'), - ',', 'Configure Windows SmartScreen;ExpectedValue', '=', parameters('ConfigureWindowsSmartScreen'), - ',', 'Disallow Digest authentication;ExpectedValue', '=', parameters('DisallowDigestAuthentication'), - ',', 'Disallow WinRM from storing RunAs credentials;ExpectedValue', '=', parameters('DisallowWinRMFromStoringRunAsCredentials'), - ',', 'Do not allow passwords to be saved;ExpectedValue', '=', parameters('DoNotAllowPasswordsToBeSaved'), - ',', 'Security: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SecuritySpecifyTheMaximumLogFileSizeKB'), ',', 'Set client connection - encryption level;ExpectedValue', '=', parameters('SetClientConnectionEncryptionLevel'), - ',', 'Set the default behavior for AutoRun;ExpectedValue', '=', parameters('SetTheDefaultBehaviorForAutoRun'), - ',', 'Setup: Specify the maximum log file size (KB);ExpectedValue', '=', parameters('SetupSpecifyTheMaximumLogFileSizeKB'), - ',', 'System: Specify the maximum log file size (KB);ExpectedValue', '=', - parameters('SystemSpecifyTheMaximumLogFileSizeKB'), ',', 'Turn off Data Execution - Prevention for Explorer;ExpectedValue', '=', parameters('TurnOffDataExecutionPreventionForExplorer'), - ',', 'Specify the interval to check for definition updates;ExpectedValue', - '=', parameters('SpecifyTheIntervalToCheckForDefinitionUpdates')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8537fe96-8cbe-43de-b0ef-131bc72bc22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1580 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1580\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/854db8ac-6adf-42a0-bef3-b73f764f40b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"854db8ac-6adf-42a0-bef3-b73f764f40b9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1348 - Identification And Authentication (Non-Org. Users) - | Acceptance Of Third-Party Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1348\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/855ced56-417b-4d74-9d5f-dd1bc81e22d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"855ced56-417b-4d74-9d5f-dd1bc81e22d6\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your IoT Hub device provisioning instance so that - it's not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-03-01')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"859dfc91-ea35-43a6-8256-31271c363794\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory integration runtime should have a limit for number of cores\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - manage your resources and costs, limit the number of cores for an integration - runtime.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"maxCores\":{\"type\":\"Integer\",\"metadata\":{\"displayName\":\"[Preview]: - Allowed max number of cores\",\"description\":\"The max number of cores allowed - for dataflow.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/integrationRuntimes\"},{\"field\":\"Microsoft.DataFactory/factories/integrationruntimes/type\",\"equals\":\"Managed\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount\",\"greater\":\"[parameters('maxCores')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85bb39b5-2f66-49f8-9306-77da3ac5130f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1079 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1079\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/85c32733-7d23-4948-88da-058e2c56b60f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"85c32733-7d23-4948-88da-058e2c56b60f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1326 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1326\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8605fc00-1bf5-4fb3-984e-c95cec4f231d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8605fc00-1bf5-4fb3-984e-c95cec4f231d\"},{\"properties\":{\"displayName\":\"Azure - Cosmos DB accounts should have firewall rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Policy - Effect\",\"description\":\"The desired effect of the policy.\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"equals\":\"Enabled\"}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled\",\"equals\":\"false\"},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules\",\"exists\":\"false\"},{\"count\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRules[*]\"},\"equals\":0}]},{\"anyOf\":[{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"exists\":\"false\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter\",\"equals\":\"\"}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Server'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86880e5c-df35-43c5-95ad-7e120635775e\"},{\"properties\":{\"displayName\":\"Deploy - SQL DB transparent data encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enables - transparent data encryption on SQL databases\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/transparentDataEncryption.status\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullDbName\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('fullDbName'), - '/current')]\",\"type\":\"Microsoft.Sql/servers/databases/transparentDataEncryption\",\"apiVersion\":\"2014-04-01\",\"properties\":{\"status\":\"Enabled\"}}]},\"parameters\":{\"fullDbName\":{\"value\":\"[field('fullName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86a912f6-9a06-4e26-b447-11b16ba8659f\"},{\"properties\":{\"displayName\":\"System - updates should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86b3d65f-7626-441e-b690-81a8b71cff60\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1507 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1507\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ccd1bf-e7ad-4851-93ce-6ec817469c1e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ccd1bf-e7ad-4851-93ce-6ec817469c1e\"},{\"properties\":{\"displayName\":\"Configure - private DNS zones for private endpoints that connect to Azure Data Factory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"listOfGroupIds\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of Group Ids that can be specified for Private Endpoints.\",\"displayName\":\"Allowed - Group Ids\"},\"allowedValues\":[\"dataFactory\",\"portal\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"in\":\"[parameters('listOfGroupIds')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"dataFactory-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86cd96e1-1745-420d-94d4-d3f2fe415aa4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86d97760-d216-4d81-a3ad-163087b2b6c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1392 - Information Spillage Response | Post-Spill Operations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1392\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86dc819f-15e1-43f9-a271-41ae58d4cecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86dc819f-15e1-43f9-a271-41ae58d4cecc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1589 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1589\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86ec7f9b-9478-40ff-8cfd-6a0d510081a8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86ec7f9b-9478-40ff-8cfd-6a0d510081a8\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should use a customer-managed key to encrypt the device unlock - password\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support customer-managed key - encryption key\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType\",\"notEquals\":\"CustomerManaged\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"86efb160-8de7-451d-bc08-5d475b0aadae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1207 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1207\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8713a0ed-0d1e-4d10-be82-83dffb39830e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8713a0ed-0d1e-4d10-be82-83dffb39830e\"},{\"properties\":{\"displayName\":\"Require - a tag on resources\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforces - existence of a tag. Does not apply to resource groups.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"871b6d14-10aa-478d-b590-94f262ecfa99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1180 - Baseline Configuration | Automation Support For Accuracy - / Currency\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1180\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/874e7880-a067-42a7-bcbe-1a340f54c8cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"874e7880-a067-42a7-bcbe-1a340f54c8cc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1635 - Boundary Protection | Host-Based Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1635\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87551b5d-1deb-4d0f-86cc-9dc14cb4bf7e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Privilege Use' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87845465-c458-45f3-af66-dcd62176f397\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Devices'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Devices' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"version\":\"1.*\",\"configurationParameter\":{\"DevicesAllowedToFormatAndEjectRemovableMedia\":\"Devices: - Allowed to format and eject removable media;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"DevicesAllowedToFormatAndEjectRemovableMedia\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Devices: - Allowed to format and eject removable media\",\"description\":\"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsDevices\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Devices: - Allowed to format and eject removable media;ExpectedValue', '=', parameters('DevicesAllowedToFormatAndEjectRemovableMedia')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8794ff4f-1a35-4e18-938f-0b22055067cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - Control Panel'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87b590fe-4a1d-4697-ae74-d4fe72ab786c\"},{\"properties\":{\"displayName\":\"Azure - Stream Analytics jobs should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy\",\"equals\":\"SystemAccount\"},{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87ba29ef-1ab3-4d82-b763-87fcd4f531f7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1293 - Information System Backup | Separate Storage For Critical - Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1293\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/87f7cd82-2e45-4d0f-9e2f-586b0962d142\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"87f7cd82-2e45-4d0f-9e2f-586b0962d142\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1440 - Media Sanitization | Review / Approve / Track / Document - / Verify\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1440\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/881299bf-2a5b-4686-a1b2-321d33679953\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"881299bf-2a5b-4686-a1b2-321d33679953\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1356 - Incident Response Training | Simulated Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1356\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8829f8f5-e8be-441e-85c9-85b72a5d0ef3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8829f8f5-e8be-441e-85c9-85b72a5d0ef3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names\",\"description\":\"A semicolon-separated list of the names - of the applications that should not be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"not_installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent', - '=', concat('packages: [', replace(parameters('ApplicationName'), ';', ','), - ']')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"not_installed_application_linux\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent\",\"value\":\"[concat('packages: - [', replace(parameters('ApplicationName'), ';', ','), ']')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"884b209a-963b-4520-8006-d20cb3c213e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1317 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1317\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8877f519-c166-47b7-81b7-8a8eb4ff3775\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8877f519-c166-47b7-81b7-8a8eb4ff3775\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1501 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1501\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88817b58-8472-4f6c-81fa-58ce42b67f51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88817b58-8472-4f6c-81fa-58ce42b67f51\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88999f4c-376a-45c8-bcb3-4058f713cf39\"},{\"properties\":{\"displayName\":\"Network - interfaces should disable IP forwarding\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy denies the network interfaces which enabled IP forwarding. The setting - of IP forwarding disables Azure's check of the source and destination for - a network interface. This should be reviewed by the network security team.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/enableIpForwarding\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88c0b9da-ce96-4b03-9635-f29a937e2900\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1215 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1215\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/88fc93e8-4745-4785-b5a5-b44bb92c44ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"88fc93e8-4745-4785-b5a5-b44bb92c44ff\"},{\"properties\":{\"displayName\":\"SQL - servers with auditing to storage account destination should be configured - with 90 days retention or higher\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled\",\"equals\":true},{\"field\":\"Microsoft.Sql/servers/auditingSettings/storageEndpoint\",\"equals\":\"\"}]},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"equals\":0},{\"field\":\"Microsoft.Sql/servers/auditingSettings/retentionDays\",\"greaterOrEquals\":90}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89099bee-89e0-4b26-a5f4-165451757743\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1411 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1411\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898d4fe8-f743-4333-86b7-0c9245d93e7d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898d4fe8-f743-4333-86b7-0c9245d93e7d\"},{\"properties\":{\"displayName\":\"Modify - - Configure Azure Event Grid domains to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for Azure Event Grid resource so that it isn't accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"category\":\"Event - Grid\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2020-04-01-preview')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"898e9824-104c-4965-8e0e-5197588fa5d4\"},{\"properties\":{\"displayName\":\"App - Configuration should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you'll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/sku.name\",\"equals\":\"Free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"89c8a434-18f0-402c-8147-630a8dea54e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1092 - Security Awareness Training | Insider Threat\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1092\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a29d47b-8604-4667-84ef-90d203fcb305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a29d47b-8604-4667-84ef-90d203fcb305\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - System settings'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - System settings'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsSystemsettings\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8a39d1f1-5513-4628-b261-f469a5a3341b\"},{\"properties\":{\"displayName\":\"Azure - Container Instance container group should deploy into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Instance\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerInstance/containerGroups\"},{\"field\":\"Microsoft.ContainerInstance/containerGroups/networkProfile.id\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8af8f826-edcb-4178-b35f-851ea6fea615\"},{\"properties\":{\"displayName\":\"Azure - Data Factory should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Data Factory, data - leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Factory\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DataFactory/factories/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0323be-cc25-4b61-935d-002c3798c6ea\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b0de57a-f511-4d45-a277-17cb79cb163b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1534 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1534\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b2b263e-cd05-4488-bcbf-4debec7a17d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b2b263e-cd05-4488-bcbf-4debec7a17d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1170 - Penetration Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1170\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8b78b9b3-ee3c-48e0-a243-ed6dba5b7a12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Firewall Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Firewall Properties'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8bbd627e-4d25-4906-9a6e-3789780af3ec\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"Equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c122334-9d20-4eb8-89ea-ac9a705b74ae\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1458 - Physical Access Control | Information System Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1458\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c19ceb7-56e9-4488-8ddb-b1eb3aa6d203\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1683 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1683\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8c79fee4-88dd-44ce-bbd4-4de88948c4f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8c79fee4-88dd-44ce-bbd4-4de88948c4f8\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1316 - Identifier Management | Identify User Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1316\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce14753-66e5-465d-9841-26ef55c09c0d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce14753-66e5-465d-9841-26ef55c09c0d\"},{\"properties\":{\"displayName\":\"Require - a tag and its value on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - a required tag and its value on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ce3da23-7156-49e4-b145-24f95f9dcb46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1324 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1324\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8cfea2b3-7f77-497e-ac20-0752f2ff6eee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8cfea2b3-7f77-497e-ac20-0752f2ff6eee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1225 - Information System Component Inventory | Automated - Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1225\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d096fe0-f510-4486-8b4d-d17dc230980b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d096fe0-f510-4486-8b4d-d17dc230980b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1288 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1288\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8d854c3b-a3e6-4ec9-9f0c-c7274dbaeb2f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1281 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1281\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dc459b3-0e77-45af-8d71-cfd8c9654fe2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dc459b3-0e77-45af-8d71-cfd8c9654fe2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1250 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1250\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8de614d8-a8b7-4f70-a62a-6d37089a002c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8de614d8-a8b7-4f70-a62a-6d37089a002c\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Arc enabled Kubernetes clusters should have Azure Defender's extension - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Defender's extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Kubernetes\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kubernetes/connectedClusters\"},{\"field\":\"Microsoft.Kubernetes/connectedClusters/distribution\",\"in\":[\"generic\",\"openshift\"]},{\"field\":\"Microsoft.Kubernetes/connectedClusters/connectivityStatus\",\"equals\":\"connected\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/extensions/extensionType\",\"equals\":\"microsoft.azuredefender.kubernetes\"},{\"field\":\"Microsoft.KubernetesConfiguration/extensions/installState\",\"equals\":\"Installed\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8dfab9c4-fe7b-49ad-85e4-1e9be085358f\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Object Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Object Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditDetailedFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Detailed File Share\",\"description\":\"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditFileShare\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File Share\",\"description\":\"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]},\"AuditFileSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit File System\",\"description\":\"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs).\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Detailed File Share;ExpectedValue', '=', parameters('AuditDetailedFileShare'), - ',', 'Audit File Share;ExpectedValue', '=', parameters('AuditFileShare'), - ',', 'Audit File System;ExpectedValue', '=', parameters('AuditFileSystem')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesObjectAccess\"},\"AuditDetailedFileShare\":{\"value\":\"[parameters('AuditDetailedFileShare')]\"},\"AuditFileShare\":{\"value\":\"[parameters('AuditFileShare')]\"},\"AuditFileSystem\":{\"value\":\"[parameters('AuditFileSystem')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditDetailedFileShare\":{\"type\":\"string\"},\"AuditFileShare\":{\"type\":\"string\"},\"AuditFileSystem\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Detailed File Share;ExpectedValue\",\"value\":\"[parameters('AuditDetailedFileShare')]\"},{\"name\":\"Audit - File Share;ExpectedValue\",\"value\":\"[parameters('AuditFileShare')]\"},{\"name\":\"Audit - File System;ExpectedValue\",\"value\":\"[parameters('AuditFileSystem')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e170edb-e0f5-497a-bb36-48b3280cec6a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1278 - Alternate Processing Site | Preparation For Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1278\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e5ef485-9e16-4c53-a475-fbb8107eac59\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e5ef485-9e16-4c53-a475-fbb8107eac59\"},{\"properties\":{\"displayName\":\"Enable - Security Center's auto provisioning of the Log Analytics agent on your subscriptions - with custom workspace.\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.\",\"strongType\":\"omsWorkspace\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"deploymentScope\":\"Subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"field\":\"Microsoft.Security/autoProvisioningSettings/autoProvision\",\"equals\":\"On\"},\"deployment\":{\"location\":\"westus\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/autoProvisioningSettings\",\"name\":\"default\",\"apiVersion\":\"2017-08-01-preview\",\"properties\":{\"autoProvision\":\"On\"}},{\"type\":\"Microsoft.Security/workspaceSettings\",\"apiVersion\":\"2017-08-01-preview\",\"name\":\"default\",\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"scope\":\"[subscription().id]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616\"},{\"properties\":{\"displayName\":\"Configure - Azure SQL Server to enable private endpoint connections\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.\",\"metadata\":{\"category\":\"SQL\",\"version\":\"1.0.0\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Subnet - to use for Private Endpoints\",\"description\":\"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"count\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Sql/servers/privateEndpointConnections[*].id\",\"exists\":\"false\"}},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/privateEndpointConnections\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"subnetlocation\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"name\":\"[variables('privateEndpointName')]\",\"location\":\"[parameters('subnetlocation')]\",\"properties\":{\"privateLinkServiceConnections\":[{\"name\":\"[parameters('name')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"sqlServer\"],\"privateLinkServiceConnectionState\":{\"status\":\"Approved\",\"description\":\"Auto-approved\",\"actionsRequired\":\"None\"}}}],\"manualPrivateLinkServiceConnections\":[],\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"customDnsConfigs\":[]}}]},\"parameters\":{\"name\":{\"value\":\"[parameters('name')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"subnetlocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8e8ca470-d980-4831-99e6-dc70d9f6af87\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1517 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1517\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8f5ad423-50d6-4617-b058-69908f5586c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8f5ad423-50d6-4617-b058-69908f5586c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1668 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1668\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fb0966e-be1d-42c3-baca-60df5c0bcc61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fb0966e-be1d-42c3-baca-60df5c0bcc61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1013 - Account Management | Automated System Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1013\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fd7b917-d83b-4379-af60-51e14e316c61\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fd7b917-d83b-4379-af60-51e14e316c61\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1147 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1147\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8fef824a-29a8-4a4c-88fc-420a39c0d541\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8fef824a-29a8-4a4c-88fc-420a39c0d541\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not store passwords using - reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"2.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"StorePasswordsUsingReversibleEncryption\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8ff0b18b-262e-4512-857a-48ad0aeb9a78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1550 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1550\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/902908fb-25a8-4225-a3a5-5603c80066c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"902908fb-25a8-4225-a3a5-5603c80066c9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Windows Firewall - Properties'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Windows Firewall Properties'. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile.\"}},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile.\"}},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Domain): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile.\"}},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile.\"}},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile.\"}},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Private): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile.\"}},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Use profile settings\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile.\"}},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections\",\"description\":\"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections.\"}},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules\",\"description\":\"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile.\"}},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules\",\"description\":\"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile.\"}},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall (Public): Display notifications\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile.\"}},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Domain: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile.\"}},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Private: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile.\"}},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Windows Firewall: Public: Allow unicast response\",\"description\":\"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsFirewallProperties\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Windows - Firewall: Domain: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallDomainUseProfileSettings'), - ',', 'Windows Firewall: Domain: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallDomainBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallDomainApplyLocalFirewallRules'), ',', 'Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallDomainDisplayNotifications'), - ',', 'Windows Firewall: Private: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPrivateUseProfileSettings'), - ',', 'Windows Firewall: Private: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPrivateBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPrivateApplyLocalFirewallRules'), ',', 'Windows - Firewall: Private: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPrivateDisplayNotifications'), - ',', 'Windows Firewall: Public: Firewall state;ExpectedValue', '=', parameters('WindowsFirewallPublicUseProfileSettings'), - ',', 'Windows Firewall: Public: Outbound connections;ExpectedValue', '=', - parameters('WindowsFirewallPublicBehaviorForOutboundConnections'), ',', 'Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules'), - ',', 'Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue', - '=', parameters('WindowsFirewallPublicApplyLocalFirewallRules'), ',', 'Windows - Firewall: Public: Settings: Display a notification;ExpectedValue', '=', parameters('WindowsFirewallPublicDisplayNotifications'), - ',', 'Windows Firewall: Domain: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallDomainAllowUnicastResponse'), ',', 'Windows Firewall: - Private: Allow unicast response;ExpectedValue', '=', parameters('WindowsFirewallPrivateAllowUnicastResponse'), - ',', 'Windows Firewall: Public: Allow unicast response;ExpectedValue', '=', - parameters('WindowsFirewallPublicAllowUnicastResponse')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_WindowsFirewallProperties\"},\"WindowsFirewallDomainUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},\"WindowsFirewallDomainDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},\"WindowsFirewallPublicUseProfileSettings\":{\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},\"WindowsFirewallPublicDisplayNotifications\":{\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"WindowsFirewallDomainUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallDomainBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallDomainApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallDomainDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPrivateUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPrivateBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPrivateDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallPublicUseProfileSettings\":{\"type\":\"string\"},\"WindowsFirewallPublicBehaviorForOutboundConnections\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalConnectionSecurityRules\":{\"type\":\"string\"},\"WindowsFirewallPublicApplyLocalFirewallRules\":{\"type\":\"string\"},\"WindowsFirewallPublicDisplayNotifications\":{\"type\":\"string\"},\"WindowsFirewallDomainAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPrivateAllowUnicastResponse\":{\"type\":\"string\"},\"WindowsFirewallPublicAllowUnicastResponse\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Windows - Firewall: Domain: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Domain: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Private: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Private: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Public: Firewall state;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicUseProfileSettings')]\"},{\"name\":\"Windows - Firewall: Public: Outbound connections;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicBehaviorForOutboundConnections')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalConnectionSecurityRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicApplyLocalFirewallRules')]\"},{\"name\":\"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicDisplayNotifications')]\"},{\"name\":\"Windows - Firewall: Domain: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallDomainAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Private: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPrivateAllowUnicastResponse')]\"},{\"name\":\"Windows - Firewall: Public: Allow unicast response;ExpectedValue\",\"value\":\"[parameters('WindowsFirewallPublicAllowUnicastResponse')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"909c958d-1b99-4c74-b88f-46a5c5bc34f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1133 - Protection Of Audit Information | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1133\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90b60a09-133d-45bc-86ef-b206a6134bbe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90b60a09-133d-45bc-86ef-b206a6134bbe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell modules installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Modules\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Modules\",\"description\":\"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellModules\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellModules]PowerShellModules1;Modules', - '=', parameters('Modules')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellModules\"},\"Modules\":{\"value\":\"[parameters('Modules')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Modules\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellModules]PowerShellModules1;Modules\",\"value\":\"[parameters('Modules')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90ba2ee7-4ca8-4673-84d1-c851c50d3baf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1140 - Audit Generation | System-Wide / Time-Correlated Audit - Trail\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1140\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90d8b8ad-8ee3-4db7-913f-2a53fcff5316\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90d8b8ad-8ee3-4db7-913f-2a53fcff5316\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1355 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1355\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90e01f69-3074-4de8-ade7-0fef3e7d83e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90e01f69-3074-4de8-ade7-0fef3e7d83e0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1657 - Secure Name / Address Resolution Service (Authoritative - Source)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1657\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/90f01329-a100-43c2-af31-098996135d2b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"90f01329-a100-43c2-af31-098996135d2b\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"Specifies the subnet to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"namespace\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91678b7c-d721-4fc5-b179-3cdf74e96b1c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Windows Components'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Windows Components'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_WindowsComponents\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9178b430-2295-406e-bb28-f6a7a2a2f897\"},{\"properties\":{\"displayName\":\"Resource - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91a78b24-f231-4a8a-8da9-02c35b2b6510\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1069 - Wireless Access | Authentication And Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1069\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91c97b44-791e-46e9-bad7-ab7c4949edbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91c97b44-791e-46e9-bad7-ab7c4949edbb\"},{\"properties\":{\"displayName\":\"Configure - Dependency agent to be enabled on Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentWindows\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"DaExtensionName\":\"DependencyAgentWindows\",\"DaExtensionType\":\"DependencyAgentWindows\"},\"resources\":[{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"apiVersion\":\"2020-03-11-preview\",\"name\":\"[concat(parameters('vmName'), - '/', variables('DaExtensionName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"type\":\"[variables('DaExtensionType')]\",\"autoUpgradeMinorVersion\":true,\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1370 - Incident Monitoring | Automated Tracking / Data Collection - / Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1370\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/924e1b2d-c502-478f-bfdb-a7e09a0d5c01\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"924e1b2d-c502-478f-bfdb-a7e09a0d5c01\"},{\"properties\":{\"displayName\":\"MFA - should be enabled accounts with write permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"57e98606-6b1e-6193-0e3d-fe621387c16b\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9297c21d-2ed6-4474-b48f-163f75654ce3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1290 - Information System Backup\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1290\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/92f85ce9-17b7-49ea-85ee-ea7271ea6b82\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"92f85ce9-17b7-49ea-85ee-ea7271ea6b82\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that contain certificates expiring within - the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that contain certificates expiring within - the specified number of days. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9328f27e-611e-44a7-a244-39109d7d35ab\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not contain the specified certificates in Trusted - Root\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\\\LocalMachine\\\\Root) does not contain one - or more of the certificates listed by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsCertificateInTrustedRoot\",\"version\":\"1.*\",\"configurationParameter\":{\"CertificateThumbprints\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"CertificateThumbprints\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Certificate - thumbprints\",\"description\":\"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\\\LocalMachine\\\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprints')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"934345e1-4dfb-4c70-90d7-41990dc9608b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain all the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MembersToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members to include\",\"description\":\"A semicolon-separated list of members - that should be included in the Administrators local group. Ex: Administrator; - myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;MembersToInclude', - '=', parameters('MembersToInclude')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembersToInclude\"},\"MembersToInclude\":{\"value\":\"[parameters('MembersToInclude')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MembersToInclude\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;MembersToInclude\",\"value\":\"[parameters('MembersToInclude')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93507a81-10a4-4af0-9ee2-34cf25a96e98\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1575 - Acquisition Process | Functional Properties Of Security - Controls\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1575\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e1bb73-1b08-4dbe-9c62-8e2e92e7ec41\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1674 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1674\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93e9e233-dd0a-4bde-aea5-1371bce0e002\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93e9e233-dd0a-4bde-aea5-1371bce0e002\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1297 - Information System Recovery And Reconstitution | Restore - Within Time Period\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1297\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/93fd8af1-c161-4bae-9ba9-f62731f76439\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"93fd8af1-c161-4bae-9ba9-f62731f76439\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1284 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1284\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/942b3e97-6ae3-410e-a794-c9c999b97c0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"942b3e97-6ae3-410e-a794-c9c999b97c0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1379 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1379\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9442dd2c-a07f-46cd-b55a-553b66ba47ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9442dd2c-a07f-46cd-b55a-553b66ba47ca\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1371 - Incident Reporting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1371\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9447f354-2c85-4700-93b3-ecdc6cb6a417\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9447f354-2c85-4700-93b3-ecdc6cb6a417\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in European data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: North Europe, West Europe\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94c19f19-8192-48cd-a11b-e37099d3e36b\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'System Audit Policies - Account Management'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'System - Audit Policies - Account Management' for auditing application, security, and - user group management, and other management events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountManagement\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94d9aca8-3757-46df-aa51-f218c5f11954\"},{\"properties\":{\"displayName\":\"Virtual - networks should be protected by Azure DDoS Protection Standard\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Audit\",\"Disabled\"]},\"ddosPlan\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DDoS - Protection Plan\",\"description\":\"DDoS Protection Plan resource to be associated - to the virtual networks\",\"strongType\":\"Microsoft.Network/ddosProtectionPlans\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"notEquals\":true},{\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/enableDdosProtection\",\"value\":true},{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id\",\"value\":\"[parameters('ddosPlan')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for Azure Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the Key Vault should be connected to.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"AuditEventEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AuditEvent - - Enabled\",\"description\":\"Whether to stream AuditEvent logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AllMetricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AllMetrics - - Enabled\",\"description\":\"Whether to stream AllMetrics logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"anyof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"equals\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"AuditEventEnabled\":{\"type\":\"string\"},\"AllMetricsEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('AllMetricsEnabled')]\",\"retentionPolicy\":{\"days\":0,\"enabled\":false},\"timeGrain\":null}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('AuditEventEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"AuditEventEnabled\":{\"value\":\"[parameters('AllMetricsEnabled')]\"},\"AllMetricsEnabled\":{\"value\":\"[parameters('AuditEventEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"951af2fa-529b-416e-ab6e-066fd85ac459\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1526 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1526\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/953e6261-a05a-44fd-8246-000e1a3edbb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"953e6261-a05a-44fd-8246-000e1a3edbb9\"},{\"properties\":{\"displayName\":\"Automation - accounts should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},{\"field\":\"Microsoft.Automation/automationAccounts/publicNetworkAccess\",\"notEquals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"955a914f-bf86-4f0e-acd5-e0766b0efcb6\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your web app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"95bccee9-a7f8-4bec-9ee9-62c3473701fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1163 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1163\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/961663a1-8a91-4e59-b6f5-1eee57c0f49c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"961663a1-8a91-4e59-b6f5-1eee57c0f49c\"},{\"properties\":{\"displayName\":\"Require - a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enforces - existence of a tag on resource groups.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96670d01-0a4d-4649-9c89-2d3abc0a5025\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1717 - Software, Firmware, And Information Integrity | Binary - Or Machine Executable Code\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1717\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967773fc-d9ab-4a4e-8ff6-f5e9e3f5dbef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced data security settings for SQL server should contain an email address - to receive security alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Ensure - that an email address is provided for the 'Send alerts to' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9677b740-f641-4f3c-b9c5-466005c85278\"},{\"properties\":{\"displayName\":\"App - Configuration should use a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},{\"field\":\"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - System' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"version\":\"1.*\",\"configurationParameter\":{\"AlwaysUseClassicLogon\":\"Always - use classic logon;ExpectedValue\",\"BootStartDriverInitializationPolicy\":\"Boot-Start - Driver Initialization Policy;ExpectedValue\",\"EnableWindowsNTPClient\":\"Enable - Windows NTP Client;ExpectedValue\",\"TurnOnConveniencePINSignin\":\"Turn on - convenience PIN sign-in;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AlwaysUseClassicLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Always - use classic logon\",\"description\":\"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain.\"}},\"BootStartDriverInitializationPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Boot-Start - Driver Initialization Policy\",\"description\":\"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver.\"}},\"EnableWindowsNTPClient\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Windows NTP Client\",\"description\":\"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers.\"}},\"TurnOnConveniencePINSignin\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Turn - on convenience PIN sign-in\",\"description\":\"Specifies whether a domain - user can sign in using a convenience PIN.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Always - use classic logon;ExpectedValue', '=', parameters('AlwaysUseClassicLogon'), - ',', 'Boot-Start Driver Initialization Policy;ExpectedValue', '=', parameters('BootStartDriverInitializationPolicy'), - ',', 'Enable Windows NTP Client;ExpectedValue', '=', parameters('EnableWindowsNTPClient'), - ',', 'Turn on convenience PIN sign-in;ExpectedValue', '=', parameters('TurnOnConveniencePINSignin')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"968410dc-5ca0-4518-8a5b-7b55f0530ea9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1453 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1453\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9693b564-3008-42bc-9d5d-9c7fe198c011\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9693b564-3008-42bc-9d5d-9c7fe198c011\"},{\"properties\":{\"displayName\":\"Add - a tag to subscriptions\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"96d9a89c-0d67-41fc-899d-2b9599f76a24\"},{\"properties\":{\"displayName\":\"HPC - Cache accounts should use customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StorageCache/caches\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl\",\"exists\":false},{\"field\":\"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"970f84d8-71b6-4091-9979-ace7e3fb6dbb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - MSS (Legacy)'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97646672-5efa-4622-9b54-740270ad60bf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1607 - Developer Security Testing And Evaluation | Dynamic - Code Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1607\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/976a74cf-b192-4d35-8cab-2068f272addb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"976a74cf-b192-4d35-8cab-2068f272addb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Policy Change'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditAuthenticationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authentication Policy Change\",\"description\":\"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]},\"AuditAuthorizationPolicyChange\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Authorization Policy Change\",\"description\":\"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Authentication Policy Change;ExpectedValue', '=', parameters('AuditAuthenticationPolicyChange'), - ',', 'Audit Authorization Policy Change;ExpectedValue', '=', parameters('AuditAuthorizationPolicyChange')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\"},\"AuditAuthenticationPolicyChange\":{\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},\"AuditAuthorizationPolicyChange\":{\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditAuthenticationPolicyChange\":{\"type\":\"string\"},\"AuditAuthorizationPolicyChange\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Authentication Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthenticationPolicyChange')]\"},{\"name\":\"Audit - Authorization Policy Change;ExpectedValue\",\"value\":\"[parameters('AuditAuthorizationPolicyChange')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97b595c8-fd10-400e-8543-28e2b9138b13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1136 - Audit Record Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1136\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97ed5bac-a92f-4f6d-a8ed-dc094723597c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97ed5bac-a92f-4f6d-a8ed-dc094723597c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1378 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1378\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/97fceb70-6983-42d0-9331-18ad8253184d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"97fceb70-6983-42d0-9331-18ad8253184d\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your Event Grid domain instead - of the entire service, you'll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"count\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9830b652-8523-49cc-b1b3-e17dce1127ca\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in United States data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"centralus\",\"eastus\",\"eastus2\",\"northcentralus\",\"southcentralus\",\"westus\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"983211ba-f348-4758-983b-21fa29294869\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Network'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Network'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnableInsecureGuestLogons\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enable insecure guest logons\",\"description\":\"Specifies whether the SMB - client will allow insecure guest logons to an SMB server.\"}},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain\",\"description\":\"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them.\"}},\"TurnOffMulticastNameResolution\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Turn off multicast name resolution\",\"description\":\"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesNetwork\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enable - insecure guest logons;ExpectedValue', '=', parameters('EnableInsecureGuestLogons'), - ',', 'Minimize the number of simultaneous connections to the Internet or a - Windows Domain;ExpectedValue', '=', parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'), - ',', 'Turn off multicast name resolution;ExpectedValue', '=', parameters('TurnOffMulticastNameResolution')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesNetwork\"},\"EnableInsecureGuestLogons\":{\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},\"TurnOffMulticastNameResolution\":{\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnableInsecureGuestLogons\":{\"type\":\"string\"},\"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain\":{\"type\":\"string\"},\"TurnOffMulticastNameResolution\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enable - insecure guest logons;ExpectedValue\",\"value\":\"[parameters('EnableInsecureGuestLogons')]\"},{\"name\":\"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue\",\"value\":\"[parameters('AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain')]\"},{\"name\":\"Turn - off multicast name resolution;ExpectedValue\",\"value\":\"[parameters('TurnOffMulticastNameResolution')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"985285b7-b97a-419c-8d48-c88cc934c8d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1076 - Use Of External Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1076\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98a4bd5f-6436-46d4-ad00-930b5b1dfed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98a4bd5f-6436-46d4-ad00-930b5b1dfed4\"},{\"properties\":{\"displayName\":\"[Preview]: - Configure backup on virtual machines without a given tag to a new recovery - services vault with a default policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enforce - backup for all virtual machines by deploying a recovery services vault in - the same location and resource group as the virtual machine. Doing this is - useful when different application teams in your organization are allocated - separate resource groups and need to manage their own backups and restores. - You can optionally exclude virtual machines containing a specified tag to - control the scope of assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.\",\"metadata\":{\"version\":\"2.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"exclusionTagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Name\",\"description\":\"Name of the tag to use for excluding - VMs from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"exclusionTagValue\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"[Preview]: - Exclusion Tag Values\",\"description\":\"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"[concat('tags[', - parameters('exclusionTagName'), ']')]\",\"in\":\"[parameters('exclusionTagValue')]\"}},{\"field\":\"id\",\"notContains\":\"/resourceGroups/databricks-rg-\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2019\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"20.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.RecoveryServices/backupprotecteditems\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\",\"/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Name - of Azure Virtual Machines\"}},\"vmRgName\":{\"type\":\"string\",\"metadata\":{\"description\":\"Resource - group containing the virtual machines.\"}},\"location\":{\"type\":\"string\",\"metadata\":{\"description\":\"Location - for VM and Backup vault\"}}},\"variables\":{\"backupFabric\":\"Azure\",\"backupPolicy\":\"DefaultPolicy\",\"v2VmType\":\"Microsoft.Compute/virtualMachines\",\"v2VmContainer\":\"iaasvmcontainer;iaasvmcontainerv2;\",\"v2Vm\":\"vm;iaasvmcontainerv2;\",\"vaultName\":\"[take(concat('RSVault-', - parameters('location'), '-', guid(resourceGroup().id)),50)]\"},\"resources\":[{\"name\":\"[variables('vaultName')]\",\"type\":\"Microsoft.RecoveryServices/vaults\",\"apiVersion\":\"2016-06-01\",\"location\":\"[parameters('location')]\",\"properties\":{},\"sku\":{\"name\":\"Standard\"}},{\"name\":\"[concat(variables('vaultName'), - '/', variables('backupFabric'), '/', variables('v2VmContainer'), concat(parameters('vmRgName'),';',parameters('vmName')), - '/', variables('v2Vm'), concat(parameters('vmRgName'),';',parameters('vmName')))]\",\"apiVersion\":\"2016-12-01\",\"location\":\"[parameters('location')]\",\"type\":\"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems\",\"dependsOn\":[\"[resourceId('Microsoft.RecoveryServices/vaults/', - variables('vaultName'))]\"],\"properties\":{\"protectedItemType\":\"[variables('v2VmType')]\",\"policyId\":\"[resourceId('Microsoft.RecoveryServices/vaults/backupPolicies', - variables('vaultName'),variables('backupPolicy'))]\",\"sourceResourceId\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/', parameters('vmRgName'), - '/providers/Microsoft.Compute/virtualMachines/', parameters('vmName'))]\"}}],\"outputs\":{\"status\":{\"type\":\"string\",\"value\":\"[concat('Backup - enabled successfully for VM:', ' ', parameters('vmName'), 'Backup Vault: ', - variables('vaultName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"vmRgName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"991310cd-e9f3-47bc-b7b6-f57b557d07db\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1102 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1102\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9943c16a-c54c-4b4a-ad28-bfd938cdbf57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9943c16a-c54c-4b4a-ad28-bfd938cdbf57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1300 - Identification And Authentication (Organizational Users)\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1300\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99deec7d-5526-472e-b07c-3645a792026a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99deec7d-5526-472e-b07c-3645a792026a\"},{\"properties\":{\"displayName\":\"Azure - Batch account should use customer-managed keys to encrypt data\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to manage the encryption at rest of your Batch account's - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Batch\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"field\":\"Microsoft.Batch/batchAccounts/encryption.keySource\",\"notEquals\":\"Microsoft.KeyVault\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1036 - Least Privilege | Non-Privileged Access For Nonsecurity - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1036\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a16d673-8cf0-4dcf-b1d5-9b3e114fef71\"},{\"properties\":{\"displayName\":\"FTPS - only should be required in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - FTPS enforcement for enhanced security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/ftpsState\",\"in\":[\"FtpsOnly\",\"Disabled\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a1b8c48-453a-4044-86c3-d8bfd823e4f5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1021 - Account Management | Restrictions On Use Of Shared - / Group Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1021\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a3eb0a3-428d-4669-baff-20a14eb4b551\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a3eb0a3-428d-4669-baff-20a14eb4b551\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Azure SQL Database to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"SQL\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"fullName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('fullName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"SQLSecurityAuditEvents\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('fullName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"fullName\":{\"value\":\"[field('fullName')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9a7c7a7d-49e5-4213-bea8-6a502b6272e0\"},{\"properties\":{\"displayName\":\"Virtual - network injection should be enabled for Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId\",\"exists\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1049 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1049\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9adf7ba7-900a-4f35-8d57-9f34aafc405c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9adf7ba7-900a-4f35-8d57-9f34aafc405c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1563 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1563\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9afe2edf-232c-4fdf-8e6a-e867a5c525fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9afe2edf-232c-4fdf-8e6a-e867a5c525fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1462 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1462\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b1f3a9a-13a1-4b40-8420-36bca6fd8c02\"},{\"properties\":{\"displayName\":\"Microsoft - IaaSAntimalware extension should be deployed on Windows servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b597639-28e4-48eb-b506-56b05d366257\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning service instances with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/provisioningServices\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"greaterOrEquals\":1},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotDps\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9b75ea5b-c796-4c99-aaaf-21c204daac43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1236 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1236\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ba3ed84-c768-4e18-b87c-34ef1aff1b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ba3ed84-c768-4e18-b87c-34ef1aff1b57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1525 - Personnel Transfer\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1525\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9be2f688-7a61-45e3-8230-e1ec93893f66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9be2f688-7a61-45e3-8230-e1ec93893f66\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9bfe3727-0a17-471f-a2fe-eddd6b668745\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1138 - Audit Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1138\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c284fc0-268a-4f29-af44-3c126674edb4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c284fc0-268a-4f29-af44-3c126674edb4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1135 - Non-Repudiation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1135\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9c308b6b-2429-4b97-86cf-081b8e737b04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9c308b6b-2429-4b97-86cf-081b8e737b04\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9cee519f-d9c1-4fd9-9f79-24ec3449ed30\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1489 - Location Of Information System Components\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1489\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0a794f-1444-4c96-9534-e35fc8c39c91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0a794f-1444-4c96-9534-e35fc8c39c91\"},{\"properties\":{\"displayName\":\"Ensure - that 'Java version' is the latest, if used as a part of the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"JavaLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Latest - Java version\",\"description\":\"Latest supported Java version for App Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"JAVA\"},{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"like\":\"[concat('*', - parameters('JavaLatestVersion'))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1322 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1322\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d1d971e-467e-4278-9633-c74c3d4fecc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d1d971e-467e-4278-9633-c74c3d4fecc4\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Log Analytics agent to Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Log Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant 'Log Analytics Contributor' permissions - (or similar) to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"OmsAgentForLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"OMSAgentForLinux\",\"vmExtensionPublisher\":\"Microsoft.EnterpriseCloud.Monitoring\",\"vmExtensionType\":\"OmsAgentForLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{\"workspaceId\":\"[reference(parameters('logAnalytics'), - '2015-03-20').customerId]\",\"stopOnMultipleConnections\":\"true\"},\"protectedSettings\":{\"workspaceKey\":\"[listKeys(parameters('logAnalytics'), - '2015-03-20').primarySharedKey]\"}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1233 - Configuration Management Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1233\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d79001f-95fe-45d0-8736-f217e78c1f57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d79001f-95fe-45d0-8736-f217e78c1f57\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1305 - Identification And Authentication (Org. Users) | Group - Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1305\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9166a8-1722-4b8f-847c-2cf3f2618b3d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9166a8-1722-4b8f-847c-2cf3f2618b3d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1259 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1259\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9d9e18f7-bad9-4d30-8806-a0c9d5e26208\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9d9e18f7-bad9-4d30-8806-a0c9d5e26208\"},{\"properties\":{\"displayName\":\"All - network ports should be restricted on network security groups associated to - your virtual machine\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified some of your network security groups' inbound - rules to be too permissive. Inbound rules should not allow access from 'Any' - or 'Internet' ranges. This can potentially enable attackers to target your - resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3b20e985-f71f-483b-b078-f30d73936d43\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9daedab3-fb2d-461e-b861-71790eead4f6\"},{\"properties\":{\"displayName\":\"Application - definition for Managed Application should use customer provided storage account\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Managed - Application\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Solutions/applicationDefinitions\"},{\"field\":\"Microsoft.Solutions/applicationDefinitions/storageAccountId\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9db7917b-1607-4e7d-a689-bca978dd0633\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1500 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1500\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9dd5b241-03cb-47d3-a5cd-4b89f9c53c92\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1482 - Temperature And Humidity Controls | Monitoring With - Alarms / Notifications\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1482\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9df4277e-8c88-4d5c-9b1a-541d53d15d7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9df4277e-8c88-4d5c-9b1a-541d53d15d7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1553 - Vulnerability Scanning | Breadth / Depth Of Coverage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1553\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e5225fe-cdfb-4fce-9aec-0fe20dd53b62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1490 - Security Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1490\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e61da80-0957-4892-b70c-609d5eaafb6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e61da80-0957-4892-b70c-609d5eaafb6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1504 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1504\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e7c35d0-12d4-4e0c-80a2-8a352537aefd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e7c35d0-12d4-4e0c-80a2-8a352537aefd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1609 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1609\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9e93fa71-42ac-41a7-b177-efbfdc53c69f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9e93fa71-42ac-41a7-b177-efbfdc53c69f\"},{\"properties\":{\"displayName\":\"Append - a tag and its value from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Appends - the specified tag with its value from the resource group when any resource - which is missing this tag is created or updated. Does not modify the tags - of resources created before this policy was applied until those resources - are changed. New 'modify' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"append\",\"details\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1494 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1494\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed09d84-3311-4853-8b67-2b55dfa33d09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed09d84-3311-4853-8b67-2b55dfa33d09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1514 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1514\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9ed5ca00-0e43-434e-a018-7aab91461ba7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9ed5ca00-0e43-434e-a018-7aab91461ba7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1187 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1187\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f2b2f9e-4ba6-46c3-907f-66db138b6f85\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f2b2f9e-4ba6-46c3-907f-66db138b6f85\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not set to the specified time - zone\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f658460-46b7-43af-8565-94fc0662be38\"},{\"properties\":{\"displayName\":\"Configure - Storage account to use a private link connection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"The subnetId that private endpoint - connections should link to\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"targetSubResource\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - sub-resource\",\"description\":\"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access\"},\"allowedValues\":[\"blob\",\"blob_secondary\",\"table\",\"table_secondary\",\"queue\",\"queue_secondary\",\"file\",\"web\",\"web_secondary\",\"dfs\",\"dfs_secondary\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"in\":[\"StorageV2\",\"BlobStorage\",\"BlockBlobStorage\",\"FileStorage\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"targetSubResource\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":\"[array(parameters('targetSubResource'))]\",\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"targetSubResource\":{\"value\":\"[parameters('targetSubResource')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9f766f00-8d11-464e-80e1-4091d7874074\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1354 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1354\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/9fd92c17-163a-4511-bb96-bbb476449796\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"9fd92c17-163a-4511-bb96-bbb476449796\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the Log Analytics agent is not - connected as expected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsLogAnalyticsAgentConnection\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a030a57e-4639-4e8f-ade9-a92f33afe7ee\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search service should use a SKU that supports private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or Deny the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"equals\":\"free\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a049bf77-880b-470f-ba6d-9f21c530cf83\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1145 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1145\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0724970-9c75-4a64-a225-a28002953f28\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0724970-9c75-4a64-a225-a28002953f28\"},{\"properties\":{\"displayName\":\"Allowed - resource types\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support 'tags' and 'location' will be affected - by this policy. To restrict all resources please duplicate this policy and - change the 'mode' to 'All'.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfResourceTypesAllowed\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of resource types that can be deployed.\",\"displayName\":\"Allowed resource - types\",\"strongType\":\"resourceTypes\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"type\",\"in\":\"[parameters('listOfResourceTypesAllowed')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a08ec900-254a-4555-9bf5-e42af04b5c5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1245 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1245\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0e45314-57b8-4623-80cd-bbb561f59516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0e45314-57b8-4623-80cd-bbb561f59516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1406 - Maintenance Tools | Inspect Media\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1406\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a0f5339c-9292-43aa-a0bc-d27c6b8e30aa\"},{\"properties\":{\"displayName\":\"Security - Center standard pricing tier should be selected\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Security/pricings\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"exists\":\"true\"},{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"notEquals\":\"Standard\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1181c5f-672a-477a-979a-7d58aa086233\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Service Bus namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1817ec0-a368-432a-8057-8371e17ac6ee\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1265 - Contingency Plan Testing | Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1265\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a18adb5b-1db6-4a5b-901a-7d3797d12972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a18adb5b-1db6-4a5b-901a-7d3797d12972\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use a customer-managed key for encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"field\":\"Microsoft.EventHub/namespaces/clusterArmId\",\"exists\":\"true\"},{\"not\":{\"field\":\"Microsoft.EventHub/namespaces/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Logic Apps in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1dae6c7-13f3-48ea-a149-ff8442661f60\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Administrative Templates - - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Administrative Templates - System'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a1e8dda3-9fd2-4835-aec3-0e55531fde33\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1612 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1612\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2037b3d-8b04-4171-8610-e6d4f1d08db5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2037b3d-8b04-4171-8610-e6d4f1d08db5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1197 - Configuration Change Control | Test / Validate / Document - Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1197\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a20d2eaa-88e2-4907-96a2-8f3a05797e5c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a20d2eaa-88e2-4907-96a2-8f3a05797e5c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1275 - Alternate Processing Site | Separation From Primary - Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1275\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a23d9d53-ad2e-45ef-afd5-e6d10900a737\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a23d9d53-ad2e-45ef-afd5-e6d10900a737\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1690 - Information System Monitoring | System-Wide Intrusion - Detection System\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1690\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2567a23-d1c3-4783-99f3-d471302a4d6b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2567a23-d1c3-4783-99f3-d471302a4d6b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1410 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1410\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2596a9f-e59f-420d-9625-6e0b536348be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2596a9f-e59f-420d-9625-6e0b536348be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1059 - Remote Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1059\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29b5d9f-4953-4afe-b560-203a6410b6b4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29b5d9f-4953-4afe-b560-203a6410b6b4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that are not joined to the specified domain\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDomainMembership\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a29ee95c-0395-4515-9851-cc04ffe82a91\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Key Vault Managed HSM should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2a5b911-5617-447e-a49e-59dbe0e0434b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1532 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1532\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2c66299-9017-4d95-8040-8bdbf7901d52\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2c66299-9017-4d95-8040-8bdbf7901d52\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1664 - Protection Of Information At Rest | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1664\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2cdf6b8-9505-4619-b579-309ba72037ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2cdf6b8-9505-4619-b579-309ba72037ac\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not restrict the minimum password length to 14 characters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MinimumPasswordLength\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MinimumPasswordLength\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a2d0e922-65d0-40c4-8f87-ea6da2d307a2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1252 - Contingency Plan | Capacity Planning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1252\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a328fd72-8ff5-4f96-8c9c-b30ed95db4ab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1238 - User-Installed Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1238\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a36cedd4-3ffd-4b1f-8b18-aa71d8d87ce1\"},{\"properties\":{\"displayName\":\"Configure - Container registries to disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your Container Registry resource so that it's not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"conflictEffect\":\"audit\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"Microsoft.ContainerRegistry/registries/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3701552-92ea-433e-9d17-33b7f1208fc9\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine scale sets for - Azure Security Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"45cfe080-ceb1-a91e-9743-71551ed24e94\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a3a6ea0c-e018-4933-9ef0-5aaa1501449b\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Linux Azure Monitor agent to enable Azure Monitor assignments - on Linux virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"12*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"14.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"16.04*LTS\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"18.04*LTS\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"CentOS\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"8\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"9\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"debian-10\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorLinuxAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorLinuxAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorLinuxAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorLinuxAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4034bc6-ae50-406d-bf76-50f4ee5a7811\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1693 - Information System Monitoring | System-Generated Alerts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1693\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a450eba6-2efc-4a00-846a-5804a93c6b77\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a450eba6-2efc-4a00-846a-5804a93c6b77\"},{\"properties\":{\"displayName\":\"Audit - usage of custom RBAC rules\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - built-in roles such as 'Owner, Contributer, Reader' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Authorization/roleDefinitions\"},{\"field\":\"Microsoft.Authorization/roleDefinitions/type\",\"equals\":\"CustomRole\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a451c1ef-c6ca-483d-87ed-f49761e3ffb5\"},{\"properties\":{\"displayName\":\"Web - Application should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4af4a39-4135-47fb-b175-47fbdf85311d\"},{\"properties\":{\"displayName\":\"Log - Analytics agent should be installed on your virtual machine for Azure Security - Center monitoring\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"d1db3318-01ff-16de-29eb-28b344515626\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a4fe33eb-e377-4efb-ab31-0784311bc499\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1617 - Application Partitioning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1617\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a631d8f5-eb81-4f9d-9ee1-74431371e4a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a631d8f5-eb81-4f9d-9ee1-74431371e4a3\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to CosmosDB account. - Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Dns Zone Id\",\"description\":\"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Group Id\",\"description\":\"A group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"[parameters('privateEndpointGroupId')]\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"cosmosDB-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a63cc0bd-cda4-4178-b705-37dc439d3e0f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to an Event Hub to be enabled on Azure Key - Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Azure Key Vault Managed HSMs in this location will be linked to this Event - Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"hsmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('hsmName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('hsmName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"hsmName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6d2c800-5230-4a40-bff3-8268b4987d42\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using HTTPS secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires HTTPS user and key secrets stored in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"httpsUserKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - user name Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name.\"}},\"httpsKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"HTTPS - key Key Vault secret\",\"description\":\"The name of the Key Vault secret - that holds the base64-encoded HTTPS key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"httpsUser\":{\"type\":\"securestring\"},\"httpsKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"configurationProtectedSettings\":{\"httpsUser\":\"[parameters('httpsUser')]\",\"httpsKey\":\"[parameters('httpsKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"httpsUser\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsUserKeyVaultSecretName')]\"}},\"httpsKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('httpsKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6f560f4-f582-4b67-b123-a37dcd1bf7ea\"},{\"properties\":{\"displayName\":\"Auditing - on SQL server should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a70ca396-0a34-413a-88e1-b956c1e683be\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1431 - Media Storage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1431\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7173c52-2b99-4696-a576-63dd5f970ef4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7173c52-2b99-4696-a576-63dd5f970ef4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1644 - Cryptographic Key Establishment And Management | Availability\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1644\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7211477-c970-446b-b4af-062f37461147\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7211477-c970-446b-b4af-062f37461147\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1027 - Access Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1027\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a76ca9b0-3f4a-4192-9a38-b25e4f8ae48c\"},{\"properties\":{\"displayName\":\"Azure - DDoS Protection Standard should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"DDoS - protection standard should be enabled for all virtual networks with a subnet - that is part of an application gateway with a public IP.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"microsoft.network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7aca53f-2ed4-4466-a25e-0b45ade68efd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1570 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1570\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7fcf38d-bb09-4600-be7d-825046eb162a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7fcf38d-bb09-4600-be7d-825046eb162a\"},{\"properties\":{\"displayName\":\"Require - encryption on Data Lake Store accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy ensures encryption is enabled on all Data Lake Store accounts\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Lake\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"field\":\"Microsoft.DataLakeStore/accounts/encryptionState\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a7ff3161-0087-490a-9ad9-ad6217f4f43a\"},{\"properties\":{\"displayName\":\"SQL - Managed Instance should have the minimal TLS version of 1.2\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"exists\":false},{\"field\":\"Microsoft.Sql/managedInstances/minimalTlsVersion\",\"notEquals\":\"1.2\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8793640-60f7-487c-b5c3-1d37215905c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1295 - Information System Recovery And Reconstitution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1295\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a895fbdb-204d-4302-9689-0a59dc42b3d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a895fbdb-204d-4302-9689-0a59dc42b3d9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unencrypted SQL databases in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"encryption\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8bef009-a5c9-4d0f-90d7-6018734e8a16\"},{\"properties\":{\"displayName\":\"Deploy - Azure Policy Add-on to Azure Kubernetes Service clusters\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[field('name')]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8\"],\"existenceCondition\":{\"field\":\"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled\",\"equals\":\"true\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"clusterName\":{\"type\":\"string\"},\"clusterResourceGroupName\":{\"type\":\"string\"}},\"variables\":{\"clusterGetDeploymentName\":\"[concat('PolicyDeployment-Get-', - parameters('clusterName'))]\",\"clusterUpdateDeploymentName\":\"[concat('PolicyDeployment-Update-', - parameters('clusterName'))]\"},\"resources\":[{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterGetDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[],\"outputs\":{\"aksCluster\":{\"type\":\"object\",\"value\":\"[reference(resourceId(parameters('clusterResourceGroupName'), - 'Microsoft.ContainerService/managedClusters', parameters('clusterName')), - '2020-04-01', 'Full')]\"}}}}},{\"apiVersion\":\"2020-06-01\",\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('clusterUpdateDeploymentName')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"aksClusterName\":{\"type\":\"string\"},\"aksClusterContent\":{\"type\":\"object\"}},\"resources\":[{\"apiVersion\":\"2020-04-01\",\"type\":\"Microsoft.ContainerService/managedClusters\",\"name\":\"[parameters('aksClusterName')]\",\"location\":\"[parameters('aksClusterContent').location]\",\"sku\":\"[parameters('aksClusterContent').sku]\",\"tags\":\"[if(contains(parameters('aksClusterContent'), - 'tags'), parameters('aksClusterContent').tags, json('null'))]\",\"identity\":\"[if(contains(parameters('aksClusterContent'), - 'identity'), parameters('aksClusterContent').identity, json('null'))]\",\"properties\":{\"kubernetesVersion\":\"[parameters('aksClusterContent').properties.kubernetesVersion]\",\"dnsPrefix\":\"[parameters('aksClusterContent').properties.dnsPrefix]\",\"agentPoolProfiles\":\"[if(contains(parameters('aksClusterContent').properties, - 'agentPoolProfiles'), parameters('aksClusterContent').properties.agentPoolProfiles, - json('null'))]\",\"linuxProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'linuxProfile'), parameters('aksClusterContent').properties.linuxProfile, - json('null'))]\",\"windowsProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'windowsProfile'), parameters('aksClusterContent').properties.windowsProfile, - json('null'))]\",\"servicePrincipalProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'servicePrincipalProfile'), parameters('aksClusterContent').properties.servicePrincipalProfile, - json('null'))]\",\"addonProfiles\":{\"azurepolicy\":{\"enabled\":true}},\"nodeResourceGroup\":\"[parameters('aksClusterContent').properties.nodeResourceGroup]\",\"enableRBAC\":\"[if(contains(parameters('aksClusterContent').properties, - 'enableRBAC'), parameters('aksClusterContent').properties.enableRBAC, json('null'))]\",\"enablePodSecurityPolicy\":\"[if(contains(parameters('aksClusterContent').properties, - 'enablePodSecurityPolicy'), parameters('aksClusterContent').properties.enablePodSecurityPolicy, - json('null'))]\",\"networkProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'networkProfile'), parameters('aksClusterContent').properties.networkProfile, - json('null'))]\",\"aadProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'aadProfile'), parameters('aksClusterContent').properties.aadProfile, json('null'))]\",\"autoScalerProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'autoScalerProfile'), parameters('aksClusterContent').properties.autoScalerProfile, - json('null'))]\",\"apiServerAccessProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'apiServerAccessProfile'), parameters('aksClusterContent').properties.apiServerAccessProfile, - json('null'))]\",\"diskEncryptionSetID\":\"[if(contains(parameters('aksClusterContent').properties, - 'diskEncryptionSetID'), parameters('aksClusterContent').properties.diskEncryptionSetID, - json('null'))]\",\"identityProfile\":\"[if(contains(parameters('aksClusterContent').properties, - 'identityProfile'), parameters('aksClusterContent').properties.identityProfile, - json('null'))]\"}}],\"outputs\":{}},\"parameters\":{\"aksClusterName\":{\"value\":\"[parameters('clusterName')]\"},\"aksClusterContent\":{\"value\":\"[reference(variables('clusterGetDeploymentName')).outputs.aksCluster.value]\"}}}}]},\"parameters\":{\"clusterName\":{\"value\":\"[field('name')]\"},\"clusterResourceGroupName\":{\"value\":\"[resourceGroup().name]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a8eff44f-8c92-45c3-a3fb-9880802d67a7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1283 - Telecommunications Services | Separation Of Primary - / Alternate Providers\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1283\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9172e76-7f56-46e9-93bf-75d69bdb5491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9172e76-7f56-46e9-93bf-75d69bdb5491\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1400 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1400\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96d5098-a604-4cdf-90b1-ef6449a27424\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96d5098-a604-4cdf-90b1-ef6449a27424\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1118 - Audit Review, Analysis, And Reporting | Correlate Audit - Repositories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1118\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a96f743d-a195-420d-983a-08aa06bc441e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a96f743d-a195-420d-983a-08aa06bc441e\"},{\"properties\":{\"displayName\":\"SQL - Managed Instances should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/managedInstances/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9934fd7-29f2-4e6d-ab3d-607ea38e9079\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1199 - Configuration Change Control | Cryptography Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1199\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a08d1c-09b1-48f1-90ea-029bbdf7111e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a08d1c-09b1-48f1-90ea-029bbdf7111e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Detailed Tracking'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Detailed Tracking'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesDetailedTracking\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9a33475-481d-4b81-9116-0bf02ffe67e8\"},{\"properties\":{\"displayName\":\"Deploy - network watcher when virtual networks are created\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a network watcher resource in regions with virtual networks. - You need to ensure existence of a resource group named networkWatcherRG, which - will be used to deploy network watcher instances.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"DeployIfNotExists\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"networkWatcherRG\",\"existenceCondition\":{\"field\":\"location\",\"equals\":\"[field('location')]\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2016-09-01\",\"type\":\"Microsoft.Network/networkWatchers\",\"name\":\"[concat('networkWatcher_', - parameters('location'))]\",\"location\":\"[parameters('location')]\"}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1511 - Personnel Screening\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1511\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/a9eae324-d327-4539-9293-b48e122465f8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"a9eae324-d327-4539-9293-b48e122465f8\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with owner permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"94290b00-4d0c-d7b4-7cea-064a9554e681\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa633080-8b72-40c4-a2d7-d00c03e80bed\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on WEB App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aa81768c-cb87-4ce2-bfaa-00baa10d760c\"},{\"properties\":{\"displayName\":\"Configure - IoT Hub device provisioning instances to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotDps\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices-provisioning.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1539 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1539\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aabb155f-e7a5-4896-a767-e918bfae2ee0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aabb155f-e7a5-4896-a767-e918bfae2ee0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1006 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1006\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aae8d54c-4bce-4c04-b3aa-5b65b67caac8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aae8d54c-4bce-4c04-b3aa-5b65b67caac8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1461 - Monitoring Physical Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1461\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aafef03e-fea8-470b-88fa-54bd1fcd7064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aafef03e-fea8-470b-88fa-54bd1fcd7064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1073 - Access Control For Mobile Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1073\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab55cdb0-c7dd-4bd8-ae22-a7cea7594e9c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that 'PHP version' is the latest, if used as a part of the Function - app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"PHP - cannot be used with Function apps.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"PHPLatestVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Latest PHP version\",\"description\":\"Latest supported PHP version for App - Services\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"notContains\":\"PHP\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"[concat('PHP|', - parameters('PHPLatestVersion'))]\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"\"}]},{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/web.linuxFxVersion\",\"equals\":\"\"},{\"field\":\"Microsoft.Web/sites/config/web.phpVersion\",\"equals\":\"[parameters('PHPLatestVersion')]\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ab965db2-d2bf-4b64-8b39-c38ec8179461\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Automatic provisioning of security monitoring agent\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"AuditIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"securityAgent\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abcc6037-1fc4-47f6-aac5-89706589be24\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1323 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1323\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abe8f70b-680f-470c-9b86-a7edfb664ecc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abe8f70b-680f-470c-9b86-a7edfb664ecc\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - SQL servers without Advanced Data Security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9\"},{\"properties\":{\"displayName\":\"Advanced - data security should be enabled on SQL Managed Instance\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - each SQL Managed Instance without advanced data security.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/state\",\"equals\":\"Enabled\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9\"},{\"properties\":{\"displayName\":\"Enable - Azure Security Center on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\\r\\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\\r\\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\\r\\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\\r\\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"VirtualMachines\",\"deploymentScope\":\"subscription\",\"existenceScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"existenceCondition\":{\"anyof\":[{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"standard\"},{\"field\":\"microsoft.security/pricings/pricingTier\",\"equals\":\"free\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Security/pricings\",\"apiVersion\":\"2018-06-01\",\"name\":\"VirtualMachines\",\"properties\":{\"pricingTier\":\"free\"}}],\"outputs\":{}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac076320-ddcf-4066-b451-6154267e8ad2\"},{\"properties\":{\"displayName\":\"Configure - disaster recovery on virtual machines by enabling replication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"Compute\"},\"parameters\":{\"sourceRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Source - Region\",\"description\":\"Region in which the virtual machine is originally - deployed\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetRegion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Region\",\"description\":\"Region to be used to deploy the virtual machine - in case of a natural disaster\",\"strongType\":\"location\",\"serviceName\":\"ASR\"}},\"targetResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Resource Group\",\"description\":\"Resource group to be used to create the - virtual machine in the target region\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultResourceGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Vault - Resource Group\",\"description\":\"The resource group containing the recovery - services vault used for disaster recovery configurations\",\"assignPermissions\":true,\"strongType\":\"Microsoft.Resources/resourceGroups\",\"serviceName\":\"ASR\"}},\"vaultId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Services Vault\",\"description\":\"ID of the recovery services vault to be - used for disaster recovery configurations\",\"strongType\":\"Microsoft.RecoveryServices/vaults\",\"serviceName\":\"ASR\"}},\"recoveryNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - Virtual Network\",\"description\":\"Existing Recovery Virtual Network ID or - name of the Virtual Network to be created in Target Region\",\"strongType\":\"Microsoft.Network/virtualNetworks\",\"serviceName\":\"ASR\"}},\"targetZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Target - Availability Zone\",\"description\":\"Availability zone in the designated - target region to be used by virtual machines during disaster\",\"strongType\":\"zone\",\"serviceName\":\"ASR\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"equals\":\"[parameters('sourceRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings\",\"exists\":\"false\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"location\",\"equals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones[*]\",\"notEquals\":\"[parameters('targetZone')]\"}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"true\"},{\"value\":\"[length(parameters('targetZone'))]\",\"greater\":0}]},{\"allOf\":[{\"field\":\"location\",\"notEquals\":\"[parameters('targetRegion')]\"},{\"field\":\"Microsoft.Compute/virtualMachines/zones\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Resources/links\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"name\",\"like\":\"ASR-Protect-*\"},{\"field\":\"Microsoft.Resources/links/targetId\",\"contains\":\"/replicationProtectedItems/\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"apiVersion\":{\"type\":\"String\"},\"avSetId\":{\"type\":\"String\"},\"dataDiskIds\":{\"type\":\"object\"},\"osDiskId\":{\"type\":\"String\"},\"ppgId\":{\"type\":\"String\"},\"recoveryNetworkId\":{\"type\":\"String\"},\"recoverySubscriptionId\":{\"type\":\"String\"},\"sourceRegion\":{\"type\":\"String\"},\"sourceResourceGroupName\":{\"type\":\"String\"},\"targetRegion\":{\"type\":\"String\"},\"targetResourceGroupName\":{\"type\":\"String\"},\"targetZone\":{\"type\":\"String\"},\"vaultName\":{\"type\":\"String\"},\"vaultResourceGroupName\":{\"type\":\"String\"},\"vmId\":{\"type\":\"String\"},\"vmZones\":{\"type\":\"Object\"}},\"variables\":{\"avSetApiVersion\":\"2019-03-01\",\"deploymentApiVersion\":\"2017-05-10\",\"vmApiVersion\":\"2019-07-01\",\"ppgApiVersion\":\"2019-12-01\",\"portalLinkPrefix\":\"https://portal.azure.com/aaa@foo.com\",\"schemaLink\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"defaultAvSet\":\"defaultAvSet-asr\",\"defaultPPG\":\"defaultPPG-asr\",\"eligibilityResultsDefault\":\"default\",\"protectedItemSuffix\":\"-policy\",\"recoveryAvSetPrefix\":\"RecoveryAvSet-\",\"recoveryPPGPrefix\":\"RecoveryPPG-\",\"avSetType\":\"Microsoft.Compute/availabilitySets\",\"deploymentType\":\"Microsoft.Resources/deployments\",\"networkType\":\"Microsoft.Network/virtualNetworks\",\"ppgType\":\"Microsoft.Compute/proximityPlacementGroups\",\"replicationEligibilityResultsType\":\"Microsoft.RecoveryServices/replicationEligibilityResults\",\"storageType\":\"Microsoft.Storage/storageAccounts\",\"vaultType\":\"Microsoft.RecoveryServices/vaults\",\"avSetTemplateName\":\"[concat(variables('recoveryAvSetPrefix'), - last(split(parameters('vmId'), '/')))]\",\"avSetTemplateName64\":\"[if(greater(length(variables('avSetTemplateName')), - 64), substring(variables('avSetTemplateName'), 0, 64), variables('avSetTemplateName'))]\",\"ppgTemplateName\":\"[concat(variables('recoveryPPGPrefix'), - last(split(parameters('vmId'), '/')))]\",\"ppgTemplateName64\":\"[if(greater(length(variables('ppgTemplateName')), - 64), substring(variables('ppgTemplateName'), 0, 64), variables('ppgTemplateName'))]\",\"replicationProtectedIntentTemplateName\":\"[concat('ASR-', - parameters('sourceResourceGroupName'), '-', last(split(parameters('vmId'), - '/')))]\",\"replicationProtectedIntentTemplateName64\":\"[if(greater(length(variables('replicationProtectedIntentTemplateName')), - 64), substring(variables('replicationProtectedIntentTemplateName'), 0, 64), - variables('replicationProtectedIntentTemplateName'))]\",\"vmDataDiskIds\":\"[array(parameters('dataDiskIds').rawValue)]\",\"vmDiskCount\":\"[add(length(variables('vmDataDiskIds')), - int(1))]\",\"diskIds\":\"[concat(array(parameters('osDiskId')), array(parameters('dataDiskIds').rawValue))]\",\"vaultId\":\"[resourceId(parameters('vaultResourceGroupName'), - variables('vaultType'), parameters('vaultName'))]\",\"eligibilityResultsId\":\"[extensionResourceId(parameters('vmId'), - variables('replicationEligibilityResultsType'), variables('eligibilityResultsDefault'))]\",\"protectedIntentName\":\"[concat(parameters('vaultName'), - '/', guid(resourceGroup().id, last(split(parameters('vmId'), '/'))), variables('protectedItemSuffix'))]\",\"recoveryAvSetName\":\"[if(empty(parameters('avSetId')), - variables('defaultAvSet'), concat(last(split(parameters('avSetId'), '/')), - '-asr'))]\",\"recoveryAvSetId\":\"[if(empty(parameters('avSetId')), '', resourceId(parameters('targetResourceGroupName'), - variables('avSetType'), variables('recoveryAvSetName')))]\",\"recoveryAvType\":\"[if(not(empty(parameters('avSetId'))), - 'AvailabilitySet', if(greater(length(parameters('vmZones').rawValue), 0), - 'AvailabilityZone', 'Single'))]\",\"recoveryAvZone\":\"[if(greater(length(parameters('vmZones').rawValue), - 0), parameters('targetZone'), '')]\",\"recoveryPPGName\":\"[if(empty(parameters('ppgId')), - variables('defaultPPG'), concat(last(split(parameters('ppgId'), '/')), '-asr'))]\",\"recoveryPPGId\":\"[if(empty(parameters('ppgId')), - '', resourceId(parameters('targetResourceGroupName'), variables('ppgType'), - variables('recoveryPPGName')))]\",\"targetResourceGroupId\":\"[concat('/subscriptions/', - parameters('recoverySubscriptionId'), '/resourceGroups/', parameters('targetResourceGroupName'))]\"},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('ppgTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('ppgId')))]\",\"type\":\"[variables('ppgType')]\",\"name\":\"[variables('recoveryPPGName')]\",\"apiVersion\":\"[variables('ppgApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"properties\":{\"proximityPlacementGroupType\":\"[if(empty(parameters('ppgId')), - 'Standard', reference(parameters('ppgId'), variables('ppgApiVersion')).proximityPlacementGroupType)]\"}}]},\"parameters\":{}}},{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('avSetTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('targetResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"condition\":\"[not(empty(parameters('avSetId')))]\",\"type\":\"[variables('avSetType')]\",\"sku\":{\"name\":\"[if(empty(parameters('avSetId')), - 'Aligned', reference(parameters('avSetId'), variables('avSetApiVersion'), - 'Full').sku.name)]\"},\"name\":\"[variables('recoveryAvSetName')]\",\"apiVersion\":\"[variables('avSetApiVersion')]\",\"location\":\"[parameters('targetRegion')]\",\"tags\":{},\"properties\":{\"platformUpdateDomainCount\":\"[if(empty(parameters('avSetId')), - '5', reference(parameters('avSetId'), variables('avSetApiVersion')).platformUpdateDomainCount)]\",\"platformFaultDomainCount\":\"[if(empty(parameters('avSetId')), - '2', reference(parameters('avSetId'), variables('avSetApiVersion')).platformFaultDomainCount)]\",\"proximityPlacementGroup\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"id\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\"}}]},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\"]},{\"apiVersion\":\"[variables('deploymentApiVersion')]\",\"name\":\"[variables('replicationProtectedIntentTemplateName64')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('vaultResourceGroupName')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"[variables('schemaLink')]\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/replicationProtectionIntents\",\"name\":\"[variables('protectedIntentName')]\",\"apiVersion\":\"[parameters('apiVersion')]\",\"properties\":{\"providerSpecificDetails\":{\"instanceType\":\"A2A\",\"fabricObjectId\":\"[parameters('vmId')]\",\"primaryLocation\":\"[parameters('sourceRegion')]\",\"recoveryLocation\":\"[parameters('targetRegion')]\",\"recoverySubscriptionId\":\"[parameters('recoverySubscriptionId')]\",\"recoveryAvailabilityType\":\"[variables('recoveryAvType')]\",\"recoveryAvailabilityZone\":\"[variables('recoveryAvZone')]\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\",\"recoveryAvailabilitySetCustomInput\":\"[if(empty(parameters('avSetId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryAvailabilitySetId\\\"', ':', '\\\"', variables('recoveryAvSetId'), - '\\\"', '}')))]\",\"recoveryProximityPlacementGroupCustomInput\":\"[if(empty(parameters('ppgId')), - json('null'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryProximityPlacementGroupId\\\"', ':', '\\\"', variables('recoveryPPGId'), - '\\\"', '}')))]\",\"recoveryVirtualNetworkCustomInput\":\"[if(contains(parameters('recoveryNetworkId'), - '/'), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"Existing\\\",', - '\\\"recoveryVirtualNetworkId\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')), json(concat('{', '\\\"resourceType\\\"', ':', '\\\"New\\\",', - '\\\"recoveryVirtualNetworkName\\\"', ':', '\\\"', parameters('recoveryNetworkId'), - '\\\"', '}')))]\",\"vmDisks\":[],\"copy\":[{\"name\":\"vmManagedDisks\",\"count\":\"[variables('vmDiskCount')]\",\"input\":{\"diskId\":\"[if(equals(copyIndex('vmManagedDisks'), - int(0)), reference(parameters('vmId'), variables('vmApiVersion')).storageProfile.osDisk.managedDisk.Id, - variables('vmDataDiskIds')[sub(copyIndex('vmManagedDisks'), int(1))])]\",\"recoveryResourceGroupCustomInput\":{\"resourceType\":\"Existing\",\"recoveryResourceGroupId\":\"[variables('targetResourceGroupId')]\"}}}]}}}],\"outputs\":{\"vmName\":{\"value\":\"[last(split(parameters('vmId'), - '/'))]\",\"type\":\"string\"},\"availabilitySetUrl\":{\"value\":\"[if(empty(parameters('avSetId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryAvSetId')))]\",\"type\":\"string\"},\"proximityPlacementGroupUrl\":{\"value\":\"[if(empty(parameters('ppgId')), - '', concat(variables('portalLinkPrefix'), variables('recoveryPPGId')))]\",\"type\":\"string\"},\"replicationEligibilityResults\":{\"value\":\"[reference(variables('eligibilityResultsId'), - parameters('apiVersion'))]\",\"type\":\"Object\"}}},\"parameters\":{}},\"dependsOn\":[\"[variables('ppgTemplateName64')]\",\"[variables('avSetTemplateName64')]\"]}],\"outputs\":{}},\"parameters\":{\"apiVersion\":{\"value\":\"2018-07-10\"},\"avSetId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/availabilitySet.id')]\"},\"dataDiskIds\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id')]\",\"emptyArray\":[]}},\"osDiskId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id')]\"},\"ppgId\":{\"value\":\"[field('Microsoft.Compute/virtualMachines/proximityPlacementGroup.id')]\"},\"recoveryNetworkId\":{\"value\":\"[parameters('recoveryNetworkId')]\"},\"recoverySubscriptionId\":{\"value\":\"[subscription().subscriptionId]\"},\"sourceRegion\":{\"value\":\"[parameters('sourceRegion')]\"},\"sourceResourceGroupName\":{\"value\":\"[resourcegroup().Name]\"},\"targetRegion\":{\"value\":\"[parameters('targetRegion')]\"},\"targetResourceGroupName\":{\"value\":\"[last(split(parameters('targetResourceGroupId'), - '/'))]\"},\"targetZone\":{\"value\":\"[parameters('targetZone')]\"},\"vaultName\":{\"value\":\"[last(split(parameters('vaultId'), - '/'))]\"},\"vaultResourceGroupName\":{\"value\":\"[last(split(parameters('vaultResourceGroupId'), - '/'))]\"},\"vmId\":{\"value\":\"[field('id')]\"},\"vmZones\":{\"value\":{\"rawValue\":\"[field('Microsoft.Compute/virtualMachines/zones')]\",\"emptyArray\":[]}}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac34a73f-9fa5-4067-9247-a3ecae514468\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1056 - Session Termination | User-Initiated Logouts / Message - Displays\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1056\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac43352f-df83-4694-8738-cfce549fd08d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac43352f-df83-4694-8738-cfce549fd08d\"},{\"properties\":{\"displayName\":\"Role-Based - Access Control (RBAC) should be used on Kubernetes Services\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerService/managedClusters/enableRBAC\",\"equals\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457\"},{\"properties\":{\"displayName\":\"Configure - Synapse workspaces to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"Integer\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a Synapse workspace is created that will be - shared by all Synapse workspaces in that region). Important - for proper operation - of Auditing do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"workspaceName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"int\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[parameters('auditRetentionDays')]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('workspaceaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('workspaceAuditingStorageAccount-', - uniqueString(variables('locationCode'), deployment().name))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure Synapse workspaces to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('workspaceName'), - '/Default')]\",\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"workspaceName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'environment' tag value in allowed values\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation if the 'environment' tag is set to one of the following - values: production, dev, test, staging\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags['environment']\",\"in\":[\"production\",\"dev\",\"test\",\"staging\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ac7e5fc0-c029-4b12-91d4-a8500ce697f9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1569 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1569\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad2f8e61-a564-4dfd-8eaa-816f5be8cb34\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1454 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1454\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ad58985d-ab32-4f99-8bd3-b7e134c90229\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ad58985d-ab32-4f99-8bd3-b7e134c90229\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1025 - Account Management | Account Monitoring / Atypical - Usage\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1025\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/adfe020d-0a97-45f4-a39c-696ef99f3a95\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"adfe020d-0a97-45f4-a39c-696ef99f3a95\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1272 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1272\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae46cf7a-e3fd-427b-9b91-44bc78e2d9d8\"},{\"properties\":{\"displayName\":\"SQL - Server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae5d2f14-d830-42b6-9899-df6cfe9c71a3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1598 - Developer Configuration Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1598\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae7e1f5e-2d63-4b38-91ef-bce14151cce3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae7e1f5e-2d63-4b38-91ef-bce14151cce3\"},{\"properties\":{\"displayName\":\"Guest - Configuration extension should be installed on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as 'Windows Exploit guard should be enabled'. Learn more - at https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\",\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ae89ebca-1c92-4898-ac2c-9f63decb045c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL Managed Instance advanced - data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeb23562-188d-47cb-80b8-551f16ef9fff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1413 - Nonlocal Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1413\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/aeedddb6-6bc0-42d5-809b-80048033419d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"aeedddb6-6bc0-42d5-809b-80048033419d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1710 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1710\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af2a93c8-e6dd-4c94-acdd-4a2eedfc478e\"},{\"properties\":{\"displayName\":\"Azure - Spring Cloud should use network injection\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Spring Cloud instances should use virtual network injection for the following - purposes: 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring - Cloud to interact with systems in either on premises data centers or Azure - service in other virtual networks. 3. Empower customers to control inbound - and outbound network communications for Azure Spring Cloud.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Platform\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Azure - Spring Cloud SKU Names\",\"description\":\"List of Azure Spring Cloud SKUs - against which this policy will be evaluated.\"},\"allowedValues\":[\"Standard\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.AppPlatform/Spring\"},{\"field\":\"Microsoft.AppPlatform/Spring/sku.tier\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"field\":\"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af35e2a4-ef96-44e7-a9ae-853dd97032c4\"},{\"properties\":{\"displayName\":\"Monitor - missing Endpoint Protection in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af6cd1bd-1635-48cb-bde7-5b15693900b9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Monitor unaudited SQL servers in Azure Security Center\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"SQL - servers which don't have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: 'Auditing should be enabled on advanced data security - settings on SQL Server'\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.SQL/servers\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"auditing\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"af8051bf-258b-44e2-a2bf-165330459f9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1645 - Cryptographic Key Establishment And Management | Symmetric - Keys\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1645\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afbd0baf-ff1a-4447-a86f-088a97347c0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afbd0baf-ff1a-4447-a86f-088a97347c0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1725 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1725\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/afc234b5-456b-4aa5-b3e2-ce89108124cc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"afc234b5-456b-4aa5-b3e2-ce89108124cc\"},{\"properties\":{\"displayName\":\"Activity - log should be retained for at least one year\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits the activity log if the retention is not set for 365 days or - forever (retention days set to 0).\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/logProfiles\",\"existenceCondition\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"365\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.enabled\",\"equals\":\"false\"},{\"field\":\"Microsoft.Insights/logProfiles/retentionPolicy.days\",\"equals\":\"0\"}]}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b02aacc0-b073-424e-8298-42b22829ee0a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1429 - Media Marking\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1429\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b07c9b24-729e-4e85-95fc-f224d2d08a80\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b07c9b24-729e-4e85-95fc-f224d2d08a80\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1711 - Security Function Verification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1711\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b083a535-a66a-41ec-ba7f-f9498bf67cde\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b083a535-a66a-41ec-ba7f-f9498bf67cde\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should be injected into a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\",\"Deny\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"count\":{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*]\",\"where\":{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet\",\"exists\":false}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0ab5b05-1c98-40f7-bb9e-dc568e41b501\"},{\"properties\":{\"displayName\":\"Deploy - - Configure private DNS zones for private endpoints connect to Azure SignalR - Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"description\":\"Private DNS zone to integrate with private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"signalr\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-service-signalr-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0e86710-7fb7-4a6c-a064-32e9b829509e\"},{\"properties\":{\"displayName\":\"Management - ports of virtual machines should be protected with just-in-time network access - control\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"805651bc-6ecd-4c73-9b55-97a19d0582d0\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b0f33259-77d7-4c9e-aac6-3aabcfae693c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1571 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1571\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b11c985b-f2cd-4bd7-85f4-b52426edf905\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b11c985b-f2cd-4bd7-85f4-b52426edf905\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b18175dd-c599-4c64-83ba-bb018a06d35b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1537 - Risk Assessment Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1537\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b19454ca-0d70-42c0-acf5-ea1c1e5726d1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b19454ca-0d70-42c0-acf5-ea1c1e5726d1\"},{\"properties\":{\"displayName\":\"SQL - Database should avoid using GRS backup redundancy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"Microsoft.Sql/servers/databases/edition\",\"notEquals\":\"DataWarehouse\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"LRS\"},{\"field\":\"Microsoft.Sql/servers/databases/storageAccountType\",\"equals\":\"ZRS\"}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1091 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1091\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b23bd715-5d1c-4e5c-9759-9cbdf79ded9d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1078 - Use Of External Information Systems | Limits On Authorized - Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1078\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b25faf85-8a16-4f28-8e15-d05c0072d64d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b25faf85-8a16-4f28-8e15-d05c0072d64d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1009 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1009\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b26f8610-e615-47c2-abd6-c00b2b0b503a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b26f8610-e615-47c2-abd6-c00b2b0b503a\"},{\"properties\":{\"displayName\":\"All - authorization rules except RootManageSharedAccessKey should be removed from - Event Hub namespace\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/authorizationRules\"},{\"field\":\"name\",\"notEquals\":\"RootManageSharedAccessKey\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b278e460-7cfc-4451-8294-cccc40a940d7\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"category\":\"Tags\",\"version\":\"1.0.0\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[subscription().tags[parameters('tagName')]]\"},{\"value\":\"[subscription().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[subscription().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b27a0cbd-a167-4dfa-ae64-4337be671140\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1234 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1234\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b293f881-361c-47ed-b997-bc4e2296bc0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b293f881-361c-47ed-b997-bc4e2296bc0b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1107 - Content Of Audit Records\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1107\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b29ed931-8e21-4779-8458-27916122a904\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b29ed931-8e21-4779-8458-27916122a904\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows web servers that are not using secure - communication protocols\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MinimumTLSVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum TLS version\",\"description\":\"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant.\"},\"allowedValues\":[\"1.1\",\"1.2\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AuditSecureProtocol\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[SecureWebServer]s1;MinimumTLSVersion', - '=', parameters('MinimumTLSVersion')))]\"},{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"\"},{\"value\":\"[parameters('MinimumTLSVersion')]\",\"equals\":\"1.1\"}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AuditSecureProtocol\"},\"MinimumTLSVersion\":{\"value\":\"[parameters('MinimumTLSVersion')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MinimumTLSVersion\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[SecureWebServer]s1;MinimumTLSVersion\",\"value\":\"[parameters('MinimumTLSVersion')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b2fc8f91-866d-4434-9089-5ebfe38d6fd8\"},{\"properties\":{\"displayName\":\"Configure - Azure File Sync with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is deployed for the indicated Storage Sync Service resource. - This enables you to address your Storage Sync Service resource from within - the private IP address space of your organization's network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet with private endpoint network policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StorageSync/storageSyncServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"afs\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b35dddd9-daf7-423b-8375-5a5b86806d5a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Logon-Logoff'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3802d79-dd88-4bce-b81d-780218e48280\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings to a Log Analytics workspace to be enabled - on Azure Key Vault Managed HSM\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Specify the Log Analytics workspace - to send log to. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3884c81-31aa-473d-a9bb-9466fe0ec2a0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1041 - Least Privilege | Privilege Levels For Code Execution\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1041\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b3d8d15b-627a-4219-8c96-4d16f788888b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b3d8d15b-627a-4219-8c96-4d16f788888b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1380 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1380\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4319b7e-ea8d-42ff-8a67-ccd462972827\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4319b7e-ea8d-42ff-8a67-ccd462972827\"},{\"properties\":{\"displayName\":\"Resource - logs in Search services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4330a05-a843-4bc8-bf9a-cacce50c67f4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1172 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1172\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b43e946e-a4c8-4b92-8201-4a39331db43c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b43e946e-a4c8-4b92-8201-4a39331db43c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1672 - Flaw Remediation | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1672\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b45fe972-904e-45a4-ac20-673ba027a301\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b45fe972-904e-45a4-ac20-673ba027a301\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1131 - Protection Of Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1131\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b472a17e-c2bc-493f-b50b-42d55a346962\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b472a17e-c2bc-493f-b50b-42d55a346962\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for an API App\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an API app must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b48334a4-911b-4084-b1ab-3e6a4e50b951\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Shutdown' for allowing shutdown without logon and clearing the virtual - memory pagefile. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"version\":\"1.*\",\"configurationParameter\":{\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":\"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue\",\"ShutdownClearVirtualMemoryPagefile\":\"Shutdown: - Clear virtual memory pagefile;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Allow system to be shut down without having to log on\",\"description\":\"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen.\"}},\"ShutdownClearVirtualMemoryPagefile\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Shutdown: - Clear virtual memory pagefile\",\"description\":\"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Shutdown: - Allow system to be shut down without having to log on;ExpectedValue', '=', - parameters('ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'), ',', 'Shutdown: - Clear virtual memory pagefile;ExpectedValue', '=', parameters('ShutdownClearVirtualMemoryPagefile')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4a4d1eb-0263-441b-84cb-a44073d8372d\"},{\"properties\":{\"displayName\":\"Azure - Stack Edge devices should use double-encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - secure the data at rest on the device, ensure it's double-encrypted, the access - to data is controlled, and once the device is deactivated, the data is securely - erased off the data disks. Double encryption is the use of two layers of encryption: - BitLocker XTS-AES 256-bit encryption on the data volumes and built-in encryption - of the hard drives. Learn more in the security overview documentation for - the specific Stack Edge device.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Azure - Stack Edge\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy.\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBoxEdge/DataBoxEdgeDevices\"},{\"field\":\"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name\",\"notIn\":[\"TEA_1Node\",\"TEA_1Node_UPS\",\"TEA_1Node_Heater\",\"TEA_1Node_UPS_Heater\",\"TEA_4Node_Heater\",\"TEA_4Node_UPS_Heater\",\"TMA\",\"EdgePR_Base\",\"EdgePR_Base_UPS\",\"EdgeMR_Mini\"]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4ac1030-89c5-4697-8e00-28b5ba6a8811\"},{\"properties\":{\"displayName\":\"[Deprecated]: - A security contact phone number should be provided for your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/securityContacts\",\"existenceCondition\":{\"field\":\"Microsoft.Security/securityContacts/phone\",\"notEquals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4d66858-c922-44e3-9566-5cdb7a7be744\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1286 - Telecommunications Services | Provider Contingency - Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1286\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b4f9b47a-2116-4e6f-88db-4edbf22753f1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b4f9b47a-2116-4e6f-88db-4edbf22753f1\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for PostgreSQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b52376f7-9612-48a1-81cd-1ffe4b61032c\"},{\"properties\":{\"displayName\":\"Service - Fabric clusters should only use Azure Active Directory for client authentication\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Service Fabric\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ServiceFabric/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"exists\":\"false\"},{\"field\":\"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId\",\"equals\":\"\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b54ed75b-3e1a-44ac-a333-05ba39b99ff0\"},{\"properties\":{\"displayName\":\"Deploy - Advanced Threat Protection for Cosmos DB Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables Advanced Threat Protection across Cosmos DB accounts.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/advancedThreatProtectionSettings\",\"name\":\"current\",\"existenceCondition\":{\"field\":\"Microsoft.Security/advancedThreatProtectionSettings/isEnabled\",\"equals\":\"true\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"cosmosDbAccountName\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-01-01\",\"type\":\"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings\",\"name\":\"[concat(parameters('cosmosDbAccountName'), - '/Microsoft.Security/current')]\",\"properties\":{\"isEnabled\":true}}]},\"parameters\":{\"cosmosDbAccountName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b5f04e03-92a3-4b09-9410-2cc5e5047656\"},{\"properties\":{\"displayName\":\"Diagnostic - logs in App Services should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"notContains\":\"functionapp\"},{\"field\":\"kind\",\"notContains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Web/sites/config/detailedErrorLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/httpLoggingEnabled\",\"equals\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/requestTracingEnabled\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts with private endpoints \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointSubnetId\",\"description\":\"A - subnet in the location\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"privateEndpointGroupId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"privateEndpointGroupId\",\"description\":\"A - group Id for the private endpoint\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"String\"},\"serviceId\":{\"type\":\"String\"},\"privateEndpointSubnetId\":{\"type\":\"String\"},\"privateEndpointGroupId\":{\"type\":\"String\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"privateEndpointGroupId\":{\"type\":\"String\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"[parameters('privateEndpointGroupId')]\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"privateEndpointGroupId\":{\"value\":\"[parameters('privateEndpointGroupId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b609e813-3156-4079-91fa-a8494c1471c4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1419 - Nonlocal Maintenance | Cryptographic Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1419\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6747bf9-2b97-45b8-b162-3c8becb9937d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6747bf9-2b97-45b8-b162-3c8becb9937d\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/sku.name\",\"notEquals\":\"free\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"equals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Search/searchServices/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"searchService\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b698b005-b660-4837-b833-a7aaab26ddba\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1301 - Identification And Authentication (Org. Users) | Network - Access To Privileged Accounts\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1301\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8e0cc-ac23-468b-abe4-a8a1cc6d7a08\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1568 - Acquisition Process\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1568\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6a8eae8-9854-495a-ac82-d2cd3eac02a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6a8eae8-9854-495a-ac82-d2cd3eac02a6\"},{\"properties\":{\"displayName\":\"Network - Watcher should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"listOfLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Locations\",\"description\":\"Audit - if Network Watcher is not enabled for region(s).\",\"strongType\":\"location\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"NetworkWatcher - resource group name\",\"description\":\"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/networkWatchers\",\"resourceGroupName\":\"[parameters('resourceGroupName')]\",\"existenceCondition\":{\"field\":\"location\",\"in\":\"[parameters('listOfLocations')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1608 - Supply Chain Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1608\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b73b7b3b-677c-4a2a-b949-ad4dc4acd89f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1401 - Controlled Maintenance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1401\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b78ee928-e3c1-4569-ad97-9f8c4b629847\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b78ee928-e3c1-4569-ad97-9f8c4b629847\"},{\"properties\":{\"displayName\":\"Deploy - - Configure diagnostic settings for SQL Databases to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"diagnosticsSettingNameToUse\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Setting - name\",\"description\":\"Name of the diagnostic settings.\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select the Log Analytics workspace - from dropdown list\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreRuntimeStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreRuntimeStatistics - logs to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"QueryStoreWaitStatistics - - Enabled\",\"description\":\"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"ErrorsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Errors - - Enabled\",\"description\":\"Whether to stream Errors logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"DatabaseWaitStatistics - - Enabled\",\"description\":\"Whether to stream DatabaseWaitStatistics logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"BlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Blocks - - Enabled\",\"description\":\"Whether to stream Blocks logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLInsightsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLInsights - - Enabled\",\"description\":\"Whether to stream SQLInsights logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SQLSecurityAuditEvents - - Enabled\",\"description\":\"Whether to stream SQLSecurityAuditEvents logs - to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"TimeoutsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Timeouts - - Enabled\",\"description\":\"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"AutomaticTuningEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"AutomaticTuning - - Enabled\",\"description\":\"Whether to stream AutomaticTuning logs to the - Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"DeadlocksEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Deadlocks - - Enabled\",\"description\":\"Whether to stream Deadlocks logs to the Log - Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"Basic\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Basic - (metric) - Enabled\",\"description\":\"Whether to stream Basic metrics to - the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"InstanceAndAppAdvanced\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"InstanceAndAppAdvanced - (metric) - Enabled\",\"description\":\"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"WorkloadManagement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"WorkloadManagement - (metric) - Enabled\",\"description\":\"Whether to stream WorkloadManagement - metrics to the Log Analytics workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"True\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"matchInsensitively\":\"[parameters('logAnalytics')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"diagnosticsSettingNameToUse\":{\"type\":\"string\"},\"resourceName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"Basic\":{\"type\":\"string\"},\"InstanceAndAppAdvanced\":{\"type\":\"string\"},\"WorkloadManagement\":{\"type\":\"string\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"type\":\"string\"},\"QueryStoreWaitStatisticsEnabled\":{\"type\":\"string\"},\"ErrorsEnabled\":{\"type\":\"string\"},\"DatabaseWaitStatisticsEnabled\":{\"type\":\"string\"},\"BlocksEnabled\":{\"type\":\"string\"},\"SQLInsightsEnabled\":{\"type\":\"string\"},\"SQLSecurityAuditEventsEnabled\":{\"type\":\"string\"},\"TimeoutsEnabled\":{\"type\":\"string\"},\"AutomaticTuningEnabled\":{\"type\":\"string\"},\"DeadlocksEnabled\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Sql/servers/databases/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('diagnosticsSettingNameToUse'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"Basic\",\"enabled\":\"[parameters('Basic')]\"},{\"category\":\"InstanceAndAppAdvanced\",\"enabled\":\"[parameters('InstanceAndAppAdvanced')]\"},{\"category\":\"WorkloadManagement\",\"enabled\":\"[parameters('WorkloadManagement')]\"}],\"logs\":[{\"category\":\"SQLInsights\",\"enabled\":\"[parameters('SQLInsightsEnabled')]\"},{\"category\":\"AutomaticTuning\",\"enabled\":\"[parameters('AutomaticTuningEnabled')]\"},{\"category\":\"QueryStoreRuntimeStatistics\",\"enabled\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},{\"category\":\"QueryStoreWaitStatistics\",\"enabled\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},{\"category\":\"Errors\",\"enabled\":\"[parameters('ErrorsEnabled')]\"},{\"category\":\"DatabaseWaitStatistics\",\"enabled\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},{\"category\":\"Timeouts\",\"enabled\":\"[parameters('TimeoutsEnabled')]\"},{\"category\":\"Blocks\",\"enabled\":\"[parameters('BlocksEnabled')]\"},{\"category\":\"Deadlocks\",\"enabled\":\"[parameters('DeadlocksEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"Basic\":{\"value\":\"[parameters('Basic')]\"},\"InstanceAndAppAdvanced\":{\"value\":\"[parameters('InstanceAndAppAdvanced')]\"},\"diagnosticsSettingNameToUse\":{\"value\":\"[parameters('diagnosticsSettingNameToUse')]\"},\"WorkloadManagement\":{\"value\":\"[parameters('WorkloadManagement')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('fullName')]\"},\"QueryStoreRuntimeStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreRuntimeStatisticsEnabled')]\"},\"QueryStoreWaitStatisticsEnabled\":{\"value\":\"[parameters('QueryStoreWaitStatisticsEnabled')]\"},\"ErrorsEnabled\":{\"value\":\"[parameters('ErrorsEnabled')]\"},\"DatabaseWaitStatisticsEnabled\":{\"value\":\"[parameters('DatabaseWaitStatisticsEnabled')]\"},\"BlocksEnabled\":{\"value\":\"[parameters('BlocksEnabled')]\"},\"SQLInsightsEnabled\":{\"value\":\"[parameters('SQLInsightsEnabled')]\"},\"SQLSecurityAuditEventsEnabled\":{\"value\":\"[parameters('SQLSecurityAuditEventsEnabled')]\"},\"TimeoutsEnabled\":{\"value\":\"[parameters('TimeoutsEnabled')]\"},\"AutomaticTuningEnabled\":{\"value\":\"[parameters('AutomaticTuningEnabled')]\"},\"DeadlocksEnabled\":{\"value\":\"[parameters('DeadlocksEnabled')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b79fa14e-238a-4c2d-b376-442ce508fc84\"},{\"properties\":{\"displayName\":\"API - App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"},{\"field\":\"Microsoft.Web/sites/httpsOnly\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b7ddfbdc-1260-477d-91fd-98bd9be789a6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs if the Administrators group doesn't - contain only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"Members\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Members\",\"description\":\"A semicolon-separated list of all the expected - members of the Administrators local group. Ex: Administrator; myUser1; myUser2\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[LocalGroup]AdministratorsGroup;Members', - '=', parameters('Members')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AdministratorsGroupMembers\"},\"Members\":{\"value\":\"[parameters('Members')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"Members\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[LocalGroup]AdministratorsGroup;Members\",\"value\":\"[parameters('Members')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b821191b-3a12-44bc-9c38-212138a29ff3\"},{\"properties\":{\"displayName\":\"Event - Hub namespaces should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Event Hub namespaces, data - leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b8564268-eb4a-4337-89be-a19db070c59d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Accounts'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b872a447-cc6f-43b9-bccf-45703cd81607\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Logic Apps to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Logic/workflows/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"WorkflowRuntime\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b889a06c-ec72-4b03-910a-cb169ee18721\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Administrative operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Administrative operations with no activity log alerts - configured.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Administrative Operation name for which activity - log alert should be configured\"},\"allowedValues\":[\"Microsoft.Sql/servers/firewallRules/write\",\"Microsoft.Sql/servers/firewallRules/delete\",\"Microsoft.Network/networkSecurityGroups/write\",\"Microsoft.Network/networkSecurityGroups/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/delete\",\"Microsoft.Network/networkSecurityGroups/securityRules/write\",\"Microsoft.Network/networkSecurityGroups/securityRules/delete\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write\",\"Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b954148f-4c11-4c38-8221-be76711e194a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1257 - Contingency Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1257\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b958b241-4245-4bd6-bd2d-b8f0779fb543\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b958b241-4245-4bd6-bd2d-b8f0779fb543\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1186 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1186\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b95ba3bd-4ded-49ea-9d10-c6f4b680813d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b95ba3bd-4ded-49ea-9d10-c6f4b680813d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1447 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1447\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9783a99-98fe-4a95-873f-29613309fe9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9783a99-98fe-4a95-873f-29613309fe9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1625 - Boundary Protection | Access Points\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1625\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9b66a4d-70a1-4b47-8fa1-289cec68c605\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9b66a4d-70a1-4b47-8fa1-289cec68c605\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1610 - Development Process, Standards, And Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1610\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/b9f3fb54-4222-46a1-a308-4874061f8491\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"b9f3fb54-4222-46a1-a308-4874061f8491\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Recovery console'. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba12366f-f9a6-42b8-9d98-157d0b1a837b\"},{\"properties\":{\"displayName\":\"Azure - Machine Learning workspaces should be encrypted with a customer-managed key\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Machine - Learning\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.MachineLearningServices/workspaces\"},{\"not\":{\"field\":\"Microsoft.MachineLearningServices/workspaces/encryption.status\",\"equals\":\"enabled\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ba769a63-b8cc-4b2d-abf6-ac33c7204be8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1606 - Developer Security Testing And Evaluation | Threat - And Vulnerability Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1606\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baa8a9a4-5bbe-4c72-98f6-a3a47ae2b1ca\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid topics to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"topic\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"topic-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baf19753-7502-405f-8745-370519b20483\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1726 - Information Handling And Retention\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1726\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/baff1279-05e0-4463-9a70-8ba5de4c7aa4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"baff1279-05e0-4463-9a70-8ba5de4c7aa4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1166 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1166\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb02733d-3cc5-4bb0-a6cd-695ba2c2272e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1188 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1188\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb20548a-c926-4e4d-855c-bcddc6faf95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb20548a-c926-4e4d-855c-bcddc6faf95e\"},{\"properties\":{\"displayName\":\"Non-internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"a9341235-9389-42f0-a0bf-9bfb57960d44\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bb91dfba-c30d-4263-9add-9c2384e659a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1533 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1533\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bba2a036-fb3b-4261-b1be-a13dfb5fbcaa\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Microsoft Network Client'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"string\"},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"string\"},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"string\"},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers')]\"},{\"name\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession')]\"},{\"name\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways')]\"},{\"name\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\",\"value\":\"[parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bbcdd8fa-b600-4ee3-85b8-d184e3339652\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit API Applications that are not using latest supported Python Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestPython\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1194 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1194\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc34667f-397e-4a65-9b72-d0358f0b6b09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc34667f-397e-4a65-9b72-d0358f0b6b09\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1095 - Role-Based Security Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1095\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc3f6f7a-057b-433e-9834-e8c97b0194f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc3f6f7a-057b-433e-9834-e8c97b0194f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Account Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc87d811-4a9b-47cc-ae54-0a41abda7768\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1427 - Media Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1427\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bc90e44f-d83f-4bdf-900f-3d5eb4111b31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bc90e44f-d83f-4bdf-900f-3d5eb4111b31\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1351 - Incident Response Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1351\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bcfb6683-05e5-4ce6-9723-c3fbe9896bdd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1050 - Concurrent Session Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1050\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd20184c-b4ec-4ce5-8db6-6e86352d183f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd20184c-b4ec-4ce5-8db6-6e86352d183f\"},{\"properties\":{\"displayName\":\"IP - Forwarding on your virtual machine should be disabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enabling - IP forwarding on a virtual machine's NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b51c94-588b-426b-a892-24696f9e54cc\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd352bd5-2853-4985-bf0d-73806b4a5744\"},{\"properties\":{\"displayName\":\"Container - registries should have SKUs that support Private Links\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"notEquals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL Managed Instance - advanced data security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It's - recommended to enable all Advanced Threat Protection types on your SQL Managed - Instance. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.1-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/managedInstances\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/managedInstances/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bda18df3-5e41-4709-add9-2554ce68c966\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for DNS should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for DNS provides an additional layer of protection for your cloud - resources by continuously monitoring all DNS queries from your Azure resources. - Azure Defender alerts you about suspicious activity at the DNS layer. Learn - more about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Dns\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bdc59948-5574-49b3-bb91-76b7c986428d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group contains any - of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToExclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bde62c94-ccca-4821-a815-92c1d31a76de\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Java Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestJava\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be0a7681-bed4-48dc-9ff3-f0171ee170b6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1360 - Incident Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1360\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be5b05e7-0b82-4ebc-9eda-25e447b1a41e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be5b05e7-0b82-4ebc-9eda-25e447b1a41e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be enabled for Azure Front Door Service or - Application Gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoors\"},{\"field\":\"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id\",\"exists\":\"false\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGateways\"},{\"field\":\"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"be7ed5c8-2660-4136-8216-e6f3412ba909\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have not restarted within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"MachineLastBootUpTime\",\"version\":\"1.*\",\"configurationParameter\":{\"NumberOfDays\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Number - of days\",\"description\":\"The number of days without restart until the machine - is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beb6ccee-b6b8-4e91-9801-a5fa4260a104\"},{\"properties\":{\"displayName\":\"Windows - Defender Exploit Guard should be enabled on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.1.1\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsDefenderExploitGuard\",\"version\":\"1.*\",\"configurationParameter\":{\"NotAvailableMachineState\":\"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"NotAvailableMachineState\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Status - if Windows Defender is not available on machine\",\"description\":\"Windows - Defender Exploit Guard is only available starting with Windows 10/Windows - Server with update 1709. Setting this value to 'Non-Compliant' shows machines - with older versions on which Windows Defender Exploit Guard is not available - (such as Windows Server 2012 R2) as non-compliant. Setting this value to 'Compliant' - shows these machines as compliant.\"},\"allowedValues\":[\"Compliant\",\"Non-Compliant\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDefenderExploitGuard\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState', - '=', parameters('NotAvailableMachineState')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bed48b13-6647-468e-aa2f-1af1d3f4dd40\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bef3f64c-5290-43b7-85b0-9b254eef4c47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1152 - System Interconnections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1152\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"beff0acf-7e67-40b2-b1ca-1a0e8205cf1b\"},{\"properties\":{\"displayName\":\"Geo-redundant - storage should be enabled for Storage Accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - geo-redundancy to create highly available applications\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/sku.name\",\"in\":[\"Standard_GRS\",\"Standard_RAGRS\",\"Standard_GZRS\",\"Standard_RAGZRS\"]}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf045164-79ba-4215-8f95-f8048dc1780b\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the password complexity setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordMustMeetComplexityRequirements\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf16e0bb-31e1-4646-8202-60a235cc7e74\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1590 - External Information System Services | Risk Assessments - / Organizational Approvals\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1590\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf296b8c-f391-4ea4-9198-be3c9d39dd1f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf296b8c-f391-4ea4-9198-be3c9d39dd1f\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub's - public endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Devices/IotHubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"iotHub\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf684997-3909-404e-929c-d4a38ed23b2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1446 - Physical And Environmental Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1446\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/bf6850fe-abba-468e-9ef4-d09ec7d983cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bf6850fe-abba-468e-9ef4-d09ec7d983cd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Logon-Logoff'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Logon-Logoff'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditGroupMembership\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Group Membership\",\"description\":\"Specifies whether audit events - are generated when group memberships are enumerated on the client computer.\"},\"allowedValues\":[\"No - Auditing\",\"Success\",\"Failure\",\"Success and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Group Membership;ExpectedValue', '=', parameters('AuditGroupMembership')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesLogonLogoff\"},\"AuditGroupMembership\":{\"value\":\"[parameters('AuditGroupMembership')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditGroupMembership\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Group Membership;ExpectedValue\",\"value\":\"[parameters('AuditGroupMembership')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c04255ee-1b9f-42c1-abaa-bf1553f79930\"},{\"properties\":{\"displayName\":\"Configure - Kubernetes clusters with specified GitOps configuration using SSH secrets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - a 'sourceControlConfiguration' to Kubernetes clusters to assure that the clusters - get their source of truth for workloads and configurations from the defined - git repo. This definition requires a SSH private key secret in Key Vault. - For instructions, visit https://aka.ms/K8sGitOpsPolicy.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Kubernetes\"},\"parameters\":{\"configurationResourceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - resource name\",\"description\":\"The name for the sourceControlConfiguration. - \ Learn more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps.\"}},\"operatorInstanceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - instance name\",\"description\":\"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character.\"}},\"operatorNamespace\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - namespace\",\"description\":\"Namespace within which the operators will be - installed. Maximum of 23 lowercase alphanumeric characters or hyphen. Must - start and end with an alphanumeric character.\"}},\"operatorScope\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - scope\",\"description\":\"The permission scope for the operator. Possible - values are 'cluster' (full access) or 'namespace' (restricted access).\"},\"allowedValues\":[\"cluster\",\"namespace\"]},\"operatorType\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - type\",\"description\":\"The type of operator to install. Currently, 'Flux' - is supported.\"},\"allowedValues\":[\"Flux\"]},\"operatorParams\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operator - parameters\",\"description\":\"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams.\"}},\"repositoryUrl\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Repository - Url\",\"description\":\"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters\"}},\"enableHelmOperator\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - Helm\",\"description\":\"Indicate whether to enable Helm for this instance - of Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm.\"},\"allowedValues\":[\"true\",\"false\"]},\"chartVersion\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart version for installing Flux Helm\",\"description\":\"The version of - the Helm chart for installing Flux Helm. For example, 1.2.0\"}},\"chartValues\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Helm - chart parameters for installing Flux Helm\",\"description\":\"Parameters for - the Helm chart for installing Flux Helm, separated by spaces. For example, - --set helm.versions=v3\"}},\"sshKnownHostsContents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Base64-encoded - known hosts content\",\"description\":\"The base64-encoded known hosts content.\"}},\"keyVaultResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Key - Vault resource id\",\"description\":\"The resource id for the Key Vault that - holds the SSH or HTTPS secrets. For example: '/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/'\",\"strongType\":\"Microsoft.KeyVault/vaults\",\"assignPermissions\":\"true\"}},\"sshPrivateKeyKeyVaultSecretName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"SSH - private key Key Vault secret\",\"description\":\"The name of the Key Vault - secret that holds the base64-encoded SSH private key.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"auditIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Kubernetes/connectedClusters\",\"Microsoft.ContainerService/managedClusters\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations\",\"name\":\"[parameters('configurationResourceName')]\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deploymentScope\":\"ResourceGroup\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams\",\"in\":[\"[parameters('operatorParams')]\",\"[concat('--git-readonly - ',parameters('operatorParams'))]\"]},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl\",\"equals\":\"[parameters('repositoryUrl')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents\",\"equals\":\"[parameters('sshKnownHostsContents')]\"},{\"anyOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator\",\"equals\":\"true\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion\",\"equals\":\"[parameters('chartVersion')]\"},{\"field\":\"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues\",\"equals\":\"[parameters('chartValues')]\"}]}]}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"configurationResourceName\":{\"type\":\"string\"},\"clusterLocation\":{\"type\":\"string\"},\"clusterName\":{\"type\":\"string\"},\"operatorInstanceName\":{\"type\":\"string\"},\"operatorNamespace\":{\"type\":\"string\"},\"operatorScope\":{\"type\":\"string\"},\"operatorType\":{\"type\":\"string\"},\"operatorParams\":{\"type\":\"string\"},\"repositoryUrl\":{\"type\":\"string\"},\"enableHelmOperator\":{\"type\":\"string\"},\"chartVersion\":{\"type\":\"string\"},\"chartValues\":{\"type\":\"string\"},\"sshKnownHostsContents\":{\"type\":\"string\"},\"sshPrivateKey\":{\"type\":\"securestring\"},\"clusterResourceType\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('connectedclusters'))]\",\"type\":\"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}},{\"condition\":\"[contains(toLower(parameters('clusterResourceType')), - toLower('managedclusters'))]\",\"type\":\"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations\",\"name\":\"[concat(parameters('clusterName'), - '/Microsoft.KubernetesConfiguration/', parameters('configurationResourceName'))]\",\"apiVersion\":\"2021-03-01\",\"properties\":{\"operatorInstanceName\":\"[parameters('operatorInstanceName')]\",\"operatorNamespace\":\"[parameters('operatorNamespace')]\",\"operatorScope\":\"[parameters('operatorScope')]\",\"operatorType\":\"[parameters('operatorType')]\",\"operatorParams\":\"[parameters('operatorParams')]\",\"repositoryUrl\":\"[parameters('repositoryUrl')]\",\"enableHelmOperator\":\"[parameters('enableHelmOperator')]\",\"helmOperatorProperties\":{\"chartVersion\":\"[parameters('chartVersion')]\",\"chartValues\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":\"[parameters('sshKnownHostsContents')]\",\"configurationProtectedSettings\":{\"sshPrivateKey\":\"[parameters('sshPrivateKey')]\"}}}]},\"parameters\":{\"clusterLocation\":{\"value\":\"[field('location')]\"},\"clusterName\":{\"value\":\"[field('name')]\"},\"configurationResourceName\":{\"value\":\"[parameters('configurationResourceName')]\"},\"operatorInstanceName\":{\"value\":\"[parameters('operatorInstanceName')]\"},\"operatorNamespace\":{\"value\":\"[parameters('operatorNamespace')]\"},\"operatorScope\":{\"value\":\"[parameters('operatorScope')]\"},\"operatorType\":{\"value\":\"[parameters('operatorType')]\"},\"operatorParams\":{\"value\":\"[parameters('operatorParams')]\"},\"repositoryUrl\":{\"value\":\"[parameters('repositoryUrl')]\"},\"enableHelmOperator\":{\"value\":\"[parameters('enableHelmOperator')]\"},\"chartVersion\":{\"value\":\"[parameters('chartVersion')]\"},\"chartValues\":{\"value\":\"[parameters('chartValues')]\"},\"sshKnownHostsContents\":{\"value\":\"[parameters('sshKnownHostsContents')]\"},\"sshPrivateKey\":{\"reference\":{\"keyVault\":{\"id\":\"[parameters('keyVaultResourceId')]\"},\"secretName\":\"[parameters('sshPrivateKeyKeyVaultSecretName')]\"}},\"clusterResourceType\":{\"value\":\"[field('type')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c050047b-b21b-4822-8a2d-c1e37c3c0c6a\"},{\"properties\":{\"displayName\":\"Configure - private endpoint connections on Azure Automation accounts\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Automation\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Automation/automationAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'Webhook')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"Webhook\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}},{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[concat(variables('privateEndpointName'),'DSCAndHybridWorker')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"DSCAndHybridWorker\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0c3130e-7dda-4187-aed0-ee4a472eaa60\"},{\"properties\":{\"displayName\":\"Only - approved VM extensions should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy governs the virtual machine extensions that are not approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"approvedExtensions\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of approved extension types that can be installed. Example: AzureDiskEncryption\",\"displayName\":\"Approved - extensions\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"notIn\":\"[parameters('approvedExtensions')]\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c0e996f8-39cf-4af9-9f45-83fbde810432\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1124 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1124\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10152dd-78f8-4335-ae2d-ad92cc028da4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10152dd-78f8-4335-ae2d-ad92cc028da4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1676 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1676\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c10fb58b-56a8-489e-9ce3-7ffe24e78e4b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1719 - Spam Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1719\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c13da9b4-fe14-4fe2-853a-5997c9d4215a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c13da9b4-fe14-4fe2-853a-5997c9d4215a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1226 - Information System Component Inventory | Automated - Unauthorized Component Detection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1226\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c158eb1c-ae7e-4081-8057-d527140c4e0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c158eb1c-ae7e-4081-8057-d527140c4e0c\"},{\"properties\":{\"displayName\":\"Deploy - associations for a custom provider\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Custom - Provider\"},\"parameters\":{\"targetCustomProviderId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Custom - provider ID\",\"description\":\"Resource ID of the Custom provider to which - resources need to be associated.\"}},\"resourceTypesToAssociate\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Resource - types to associate\",\"description\":\"The list of resource types to be associated - to the custom provider.\",\"strongType\":\"resourceTypes\"}},\"associationNamePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Association - name prefix\",\"description\":\"Prefix to be added to the name of the association - resource being created.\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":\"[parameters('resourceTypesToAssociate')]\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.CustomProviders/Associations\",\"name\":\"[concat(parameters('associationNamePrefix'), - '-', uniqueString(parameters('targetCustomProviderId')))]\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"associatedResourceName\":{\"type\":\"string\"},\"resourceTypesToAssociate\":{\"type\":\"string\"},\"targetCustomProviderId\":{\"type\":\"string\"},\"associationNamePrefix\":{\"type\":\"string\"}},\"variables\":{\"resourceType\":\"[concat(parameters('resourceTypesToAssociate'), - '/providers/associations')]\",\"resourceName\":\"[concat(parameters('associatedResourceName'), - '/microsoft.customproviders/', parameters('associationNamePrefix'), '-', uniqueString(parameters('targetCustomProviderId')))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2017-05-10\",\"name\":\"[concat(deployment().Name, - '-2')]\",\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"resources\":[{\"type\":\"[variables('resourceType')]\",\"name\":\"[variables('resourceName')]\",\"apiVersion\":\"2018-09-01-preview\",\"properties\":{\"targetResourceId\":\"[parameters('targetCustomProviderId')]\"}}]}}}]},\"parameters\":{\"resourceTypesToAssociate\":{\"value\":\"[field('type')]\"},\"associatedResourceName\":{\"value\":\"[field('name')]\"},\"targetCustomProviderId\":{\"value\":\"[parameters('targetCustomProviderId')]\"},\"associationNamePrefix\":{\"value\":\"[parameters('associationNamePrefix')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1629 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1629\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c171b095-7756-41de-8644-a062a96043f2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c171b095-7756-41de-8644-a062a96043f2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1004 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1004\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c17822dc-736f-4eb4-a97d-e6be662ff835\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c17822dc-736f-4eb4-a97d-e6be662ff835\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation only in Asia data centers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"General\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"eastasia\",\"southeastasia\",\"westindia\",\"southindia\",\"centralindia\",\"japaneast\",\"japanwest\"]}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Account Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Account Logon'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditCredentialValidation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Credential Validation\",\"description\":\"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. - \ This setting is especially useful for monitoring unsuccessful attempts, - to find brute-force attacks, account enumeration, and potential account compromise - events on domain controllers.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Credential Validation;ExpectedValue', '=', parameters('AuditCredentialValidation')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesAccountLogon\"},\"AuditCredentialValidation\":{\"value\":\"[parameters('AuditCredentialValidation')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditCredentialValidation\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Credential Validation;ExpectedValue\",\"value\":\"[parameters('AuditCredentialValidation')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1e289c0-ffad-475d-a924-adc058765d65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1503 - Information Security Architecture\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1503\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c1fa9c2f-d439-4ab9-8b83-81fb1934f81d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that are not set to the specified - time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Time zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsTimeZone\"},\"TimeZone\":{\"value\":\"[parameters('TimeZone')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"TimeZone\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\",\"value\":\"[parameters('TimeZone')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c21f7060-c148-41cf-a68b-0ab3e14c764c\"},{\"properties\":{\"displayName\":\"Flow - logs should be configured for every network security group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/flowLogs[*]\"},\"equals\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c251913d-7d24-4958-af87-478ed3b9ba41\"},{\"properties\":{\"displayName\":\"Azure - Defender for container registries should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.\",\"metadata\":{\"version\":\"1.0.3\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"ContainerRegistry\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs on which the specified services are not - installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and 'Running'. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that '.NET Framework' version is the latest, if used as a part of the - API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.netFrameworkVersion\",\"in\":[\"v3.0\",\"v4.0\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1176 - Baseline Configuration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1176\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c30690a5-7bf3-467f-b0cd-ef5c7c7449cd\"},{\"properties\":{\"displayName\":\"Azure - Data Box jobs should enable double encryption for data at rest on the device\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Data - Box\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - desired effect of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"supportedSKUs\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Supported - SKUs\",\"description\":\"The list of SKUs that support software-based double - encryption\"},\"allowedValues\":[\"DataBox\",\"DataBoxHeavy\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataBox/jobs\"},{\"field\":\"Microsoft.Databox/jobs/sku.name\",\"in\":\"[parameters('supportedSKUs')]\"},{\"field\":\"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c349d81b-9985-44ae-a8da-ff98d108ede8\"},{\"properties\":{\"displayName\":\"Azure - Key Vault Managed HSM should have purge protection enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/managedHsms\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/managedHsms/enableSoftDelete\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.KeyVault/managedHsms/enablePurgeProtection\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39ba22d-4428-4149-b981-70acb31fc383\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1389 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1389\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c39e6fda-ae70-4891-a739-be7bba6d1062\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c39e6fda-ae70-4891-a739-be7bba6d1062\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1390 - Information Spillage Response | Responsible Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1390\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3b65b63-09ec-4cb5-8028-7dd324d10eb0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3b65b63-09ec-4cb5-8028-7dd324d10eb0\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Defender for Resource Manager should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center's pricing page: https://aka.ms/pricing-security-center - .\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Security Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/pricings\",\"name\":\"Arm\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"field\":\"Microsoft.Security/pricings/pricingTier\",\"equals\":\"Standard\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3d20c29-b36d-48fe-808b-99a87530ad99\"},{\"properties\":{\"displayName\":\"System - updates on virtual machine scale sets should be installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"bd20bd91-aaf1-7f14-b6e4-866de2f43146\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c3f317a7-a95c-4547-b7e7-11017ebdf2fe\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40c9087-1981-4e73-9f53-39743eda9d05\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1220 - Least Functionality | Authorized Software / Whitelisting\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1220\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c40f31a7-81e1-4130-99e5-a02ceea2a1d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c40f31a7-81e1-4130-99e5-a02ceea2a1d6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1513 - Personnel Screening | Information With Special Protection - Measures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1513\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c416970d-b12b-49eb-8af4-fb144cd7c290\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c416970d-b12b-49eb-8af4-fb144cd7c290\"},{\"properties\":{\"displayName\":\"Microsoft - Antimalware for Azure should be configured to automatically update protection - signatures\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"equals\":\"Windows\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"IaaSAntimalware\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Security\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion\",\"equals\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c43e4a30-77cb-48ab-a4dd-93f175c63b57\"},{\"properties\":{\"displayName\":\"[Preview]: - Container Registry should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4857be7-912a-4c75-87e6-e30292bcdf78\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1235 - Software Usage Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1235\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c49c610b-ece4-44b3-988c-2172b70d6e46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c49c610b-ece4-44b3-988c-2172b70d6e46\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1173 - Internal System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1173\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4aff9e7-2e60-46fa-86be-506b79033fc5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4aff9e7-2e60-46fa-86be-506b79033fc5\"},{\"properties\":{\"displayName\":\"Managed - identity should be used in your API App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - a managed identity for enhanced authentication security\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Web/sites/config/managedServiceIdentityId\",\"exists\":\"true\"},{\"field\":\"Microsoft.Web/sites/config/xmanagedServiceIdentityId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your API app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c4ebc54a-46e1-481a-bee2-d4411e95d828\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1600 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1600\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c53f3123-d233-44a7-930b-f40d3bfeb7d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c53f3123-d233-44a7-930b-f40d3bfeb7d6\"},{\"properties\":{\"displayName\":\"An - activity log alert should exist for specific Policy operations\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits specific Policy operations with no activity log alerts configured.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"operationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Operation - Name\",\"description\":\"Policy Operation name for which activity log alert - should exist\"},\"allowedValues\":[\"Microsoft.Authorization/policyAssignments/write\",\"Microsoft.Authorization/policyAssignments/delete\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/ActivityLogAlerts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/enabled\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"Administrative\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"},{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals\",\"equals\":\"[parameters('operationName')]\"}]}]}},\"equals\":2},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"category\"}},{\"not\":{\"field\":\"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field\",\"equals\":\"operationName\"}}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5447c04-a4d7-4ba8-a263-c9ee321a6858\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"NotInstalledApplicationForWindows\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplicationForWindows\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5b85cba-6e6f-4de4-95e1-f0233cd712ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1408 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1408\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5f56ac6-4bb2-4086-bc41-ad76344ba2c2\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that contain certificates expiring - within the specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"CertificateStorePath\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate store path\",\"description\":\"The path to the certificate store - containing the certificates to check the expiration dates of. Default value - is 'Cert:' which is the root certificate store path, so all certificates on - the machine will be checked. Other example paths: 'Cert:\\\\LocalMachine', - 'Cert:\\\\LocalMachine\\\\TrustedPublisher', 'Cert:\\\\CurrentUser'\"}},\"ExpirationLimitInDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Expiration limit in days\",\"description\":\"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant.\"}},\"CertificateThumbprintsToInclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to include\",\"description\":\"A semicolon-separated - list of certificate thumbprints to check under the specified path. If a value - is not specified, all certificates under the certificate store path will be - checked. If a value is specified, no certificates other than those with the - thumbprints specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"CertificateThumbprintsToExclude\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Certificate thumbprints to exclude\",\"description\":\"A semicolon-separated - list of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3\"}},\"IncludeExpiredCertificates\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Include expired certificates\",\"description\":\"Must be 'true' or 'false'. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored.\"},\"allowedValues\":[\"true\",\"false\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"CertificateExpiration\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[CertificateStore]CertificateStore1;CertificateStorePath', - '=', parameters('CertificateStorePath'), ',', '[CertificateStore]CertificateStore1;ExpirationLimitInDays', - '=', parameters('ExpirationLimitInDays'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude', - '=', parameters('CertificateThumbprintsToInclude'), ',', '[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude', - '=', parameters('CertificateThumbprintsToExclude'), ',', '[CertificateStore]CertificateStore1;IncludeExpiredCertificates', - '=', parameters('IncludeExpiredCertificates')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"CertificateExpiration\"},\"CertificateStorePath\":{\"value\":\"[parameters('CertificateStorePath')]\"},\"ExpirationLimitInDays\":{\"value\":\"[parameters('ExpirationLimitInDays')]\"},\"CertificateThumbprintsToInclude\":{\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},\"CertificateThumbprintsToExclude\":{\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},\"IncludeExpiredCertificates\":{\"value\":\"[parameters('IncludeExpiredCertificates')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"CertificateStorePath\":{\"type\":\"string\"},\"ExpirationLimitInDays\":{\"type\":\"string\"},\"CertificateThumbprintsToInclude\":{\"type\":\"string\"},\"CertificateThumbprintsToExclude\":{\"type\":\"string\"},\"IncludeExpiredCertificates\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[CertificateStore]CertificateStore1;CertificateStorePath\",\"value\":\"[parameters('CertificateStorePath')]\"},{\"name\":\"[CertificateStore]CertificateStore1;ExpirationLimitInDays\",\"value\":\"[parameters('ExpirationLimitInDays')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude\",\"value\":\"[parameters('CertificateThumbprintsToInclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude\",\"value\":\"[parameters('CertificateThumbprintsToExclude')]\"},{\"name\":\"[CertificateStore]CertificateStore1;IncludeExpiredCertificates\",\"value\":\"[parameters('IncludeExpiredCertificates')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1670 - Flaw Remediation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1670\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6108469-57ee-4666-af7e-79ba61c7ae0c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6108469-57ee-4666-af7e-79ba61c7ae0c\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that are not set to the specified time zone\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsTimeZone\",\"version\":\"1.*\",\"configurationParameter\":{\"TimeZone\":\"[WindowsTimeZone]WindowsTimeZone1;TimeZone\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"TimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Time - zone\",\"description\":\"The expected time zone\"},\"allowedValues\":[\"(UTC-12:00) - International Date Line West\",\"(UTC-11:00) Coordinated Universal Time-11\",\"(UTC-10:00) - Aleutian Islands\",\"(UTC-10:00) Hawaii\",\"(UTC-09:30) Marquesas Islands\",\"(UTC-09:00) - Alaska\",\"(UTC-09:00) Coordinated Universal Time-09\",\"(UTC-08:00) Baja - California\",\"(UTC-08:00) Coordinated Universal Time-08\",\"(UTC-08:00) Pacific - Time (US & Canada)\",\"(UTC-07:00) Arizona\",\"(UTC-07:00) Chihuahua, La Paz, - Mazatlan\",\"(UTC-07:00) Mountain Time (US & Canada)\",\"(UTC-06:00) Central - America\",\"(UTC-06:00) Central Time (US & Canada)\",\"(UTC-06:00) Easter - Island\",\"(UTC-06:00) Guadalajara, Mexico City, Monterrey\",\"(UTC-06:00) - Saskatchewan\",\"(UTC-05:00) Bogota, Lima, Quito, Rio Branco\",\"(UTC-05:00) - Chetumal\",\"(UTC-05:00) Eastern Time (US & Canada)\",\"(UTC-05:00) Haiti\",\"(UTC-05:00) - Havana\",\"(UTC-05:00) Indiana (East)\",\"(UTC-05:00) Turks and Caicos\",\"(UTC-04:00) - Asuncion\",\"(UTC-04:00) Atlantic Time (Canada)\",\"(UTC-04:00) Caracas\",\"(UTC-04:00) - Cuiaba\",\"(UTC-04:00) Georgetown, La Paz, Manaus, San Juan\",\"(UTC-04:00) - Santiago\",\"(UTC-03:30) Newfoundland\",\"(UTC-03:00) Araguaina\",\"(UTC-03:00) - Brasilia\",\"(UTC-03:00) Cayenne, Fortaleza\",\"(UTC-03:00) City of Buenos - Aires\",\"(UTC-03:00) Greenland\",\"(UTC-03:00) Montevideo\",\"(UTC-03:00) - Punta Arenas\",\"(UTC-03:00) Saint Pierre and Miquelon\",\"(UTC-03:00) Salvador\",\"(UTC-02:00) - Coordinated Universal Time-02\",\"(UTC-02:00) Mid-Atlantic - Old\",\"(UTC-01:00) - Azores\",\"(UTC-01:00) Cabo Verde Is.\",\"(UTC) Coordinated Universal Time\",\"(UTC+00:00) - Dublin, Edinburgh, Lisbon, London\",\"(UTC+00:00) Monrovia, Reykjavik\",\"(UTC+00:00) - Sao Tome\",\"(UTC+01:00) Casablanca\",\"(UTC+01:00) Amsterdam, Berlin, Bern, - Rome, Stockholm, Vienna\",\"(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, - Prague\",\"(UTC+01:00) Brussels, Copenhagen, Madrid, Paris\",\"(UTC+01:00) - Sarajevo, Skopje, Warsaw, Zagreb\",\"(UTC+01:00) West Central Africa\",\"(UTC+02:00) - Amman\",\"(UTC+02:00) Athens, Bucharest\",\"(UTC+02:00) Beirut\",\"(UTC+02:00) - Cairo\",\"(UTC+02:00) Chisinau\",\"(UTC+02:00) Damascus\",\"(UTC+02:00) Gaza, - Hebron\",\"(UTC+02:00) Harare, Pretoria\",\"(UTC+02:00) Helsinki, Kyiv, Riga, - Sofia, Tallinn, Vilnius\",\"(UTC+02:00) Jerusalem\",\"(UTC+02:00) Kaliningrad\",\"(UTC+02:00) - Khartoum\",\"(UTC+02:00) Tripoli\",\"(UTC+02:00) Windhoek\",\"(UTC+03:00) - Baghdad\",\"(UTC+03:00) Istanbul\",\"(UTC+03:00) Kuwait, Riyadh\",\"(UTC+03:00) - Minsk\",\"(UTC+03:00) Moscow, St. Petersburg\",\"(UTC+03:00) Nairobi\",\"(UTC+03:30) - Tehran\",\"(UTC+04:00) Abu Dhabi, Muscat\",\"(UTC+04:00) Astrakhan, Ulyanovsk\",\"(UTC+04:00) - Baku\",\"(UTC+04:00) Izhevsk, Samara\",\"(UTC+04:00) Port Louis\",\"(UTC+04:00) - Saratov\",\"(UTC+04:00) Tbilisi\",\"(UTC+04:00) Volgograd\",\"(UTC+04:00) - Yerevan\",\"(UTC+04:30) Kabul\",\"(UTC+05:00) Ashgabat, Tashkent\",\"(UTC+05:00) - Ekaterinburg\",\"(UTC+05:00) Islamabad, Karachi\",\"(UTC+05:00) Qyzylorda\",\"(UTC+05:30) - Chennai, Kolkata, Mumbai, New Delhi\",\"(UTC+05:30) Sri Jayawardenepura\",\"(UTC+05:45) - Kathmandu\",\"(UTC+06:00) Astana\",\"(UTC+06:00) Dhaka\",\"(UTC+06:00) Omsk\",\"(UTC+06:30) - Yangon (Rangoon)\",\"(UTC+07:00) Bangkok, Hanoi, Jakarta\",\"(UTC+07:00) Barnaul, - Gorno-Altaysk\",\"(UTC+07:00) Hovd\",\"(UTC+07:00) Krasnoyarsk\",\"(UTC+07:00) - Novosibirsk\",\"(UTC+07:00) Tomsk\",\"(UTC+08:00) Beijing, Chongqing, Hong - Kong, Urumqi\",\"(UTC+08:00) Irkutsk\",\"(UTC+08:00) Kuala Lumpur, Singapore\",\"(UTC+08:00) - Perth\",\"(UTC+08:00) Taipei\",\"(UTC+08:00) Ulaanbaatar\",\"(UTC+08:45) Eucla\",\"(UTC+09:00) - Chita\",\"(UTC+09:00) Osaka, Sapporo, Tokyo\",\"(UTC+09:00) Pyongyang\",\"(UTC+09:00) - Seoul\",\"(UTC+09:00) Yakutsk\",\"(UTC+09:30) Adelaide\",\"(UTC+09:30) Darwin\",\"(UTC+10:00) - Brisbane\",\"(UTC+10:00) Canberra, Melbourne, Sydney\",\"(UTC+10:00) Guam, - Port Moresby\",\"(UTC+10:00) Hobart\",\"(UTC+10:00) Vladivostok\",\"(UTC+10:30) - Lord Howe Island\",\"(UTC+11:00) Bougainville Island\",\"(UTC+11:00) Chokurdakh\",\"(UTC+11:00) - Magadan\",\"(UTC+11:00) Norfolk Island\",\"(UTC+11:00) Sakhalin\",\"(UTC+11:00) - Solomon Is., New Caledonia\",\"(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky\",\"(UTC+12:00) - Auckland, Wellington\",\"(UTC+12:00) Coordinated Universal Time+12\",\"(UTC+12:00) - Fiji\",\"(UTC+12:00) Petropavlovsk-Kamchatsky - Old\",\"(UTC+12:45) Chatham - Islands\",\"(UTC+13:00) Coordinated Universal Time+13\",\"(UTC+13:00) Nuku'alofa\",\"(UTC+13:00) - Samoa\",\"(UTC+14:00) Kiritimati Island\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsTimeZone\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', - '=', parameters('TimeZone')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c633f6a2-7f8b-4d9e-9456-02f0f04f5505\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not have the specified Windows PowerShell execution - policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsPowerShellExecutionPolicy\",\"version\":\"1.*\",\"configurationParameter\":{\"ExecutionPolicy\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"PowerShell - Execution Policy\",\"description\":\"The expected PowerShell execution policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c648fbbb-591c-4acd-b465-ce9b176ca173\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1190 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1190\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c66a3d1e-465b-4f28-9da5-aef701b59892\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c66a3d1e-465b-4f28-9da5-aef701b59892\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1120 - Audit Review, Analysis, And Reporting | Integration - / Scanning And Monitoring Capabilities\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1120\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c69b870e-857b-458b-af02-bb234f7a00d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c69b870e-857b-458b-af02-bb234f7a00d3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1125 - Audit Reduction And Report Generation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1125\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c6ce745a-670e-47d3-a6c4-3cfe5ef00c10\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Recovery Services Vault to Log Analytics workspace - for resource specific categories.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Backup\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Name\",\"description\":\"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter.\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Exclusion - Tag Value\",\"description\":\"Value of the tag to use for excluding vaults - from this policy. This should be used along with the Exclusion Tag Name parameter.\"}}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"not\":{\"field\":\"[concat('tags[',parameters('tagName'), - ']')]\",\"equals\":\"[parameters('tagValue')]\"}}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"allof\":[{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"allof\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Category\",\"in\":[\"CoreAzureBackup\",\"AddonAzureBackupJobs\",\"AddonAzureBackupAlerts\",\"AddonAzureBackupPolicy\",\"AddonAzureBackupStorage\",\"AddonAzureBackupProtectedInstance\"]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].Enabled\",\"equals\":\"True\"}]}},\"Equals\":6},{\"field\":\"Microsoft.Insights/diagnosticSettings/workspaceId\",\"notEquals\":\"\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType\",\"equals\":\"Dedicated\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"logAnalyticsDestinationType\":\"Dedicated\",\"metrics\":[],\"logs\":[{\"category\":\"CoreAzureBackup\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupAlerts\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupJobs\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupPolicy\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupProtectedInstance\",\"enabled\":\"true\"},{\"category\":\"AddonAzureBackupStorage\",\"enabled\":\"true\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat(parameters('logAnalytics'), - 'configured for resource logs for ', ': ', parameters('vaultName'), '/', 'Microsoft.Insights/', - parameters('profileName'))]\"}}},\"parameters\":{\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c717fb0c-d118-4c43-ab3d-ece30ac81fb3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1619 - Information In Shared Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1619\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c722e569-cb52-45f3-a643-836547d016e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c722e569-cb52-45f3-a643-836547d016e1\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1121 - Audit Review, Analysis, And Reporting | Correlation - With Physical Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1121\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c72b0eb9-1fc2-44e5-a866-e7cb0532f7c1\"},{\"properties\":{\"displayName\":\"Authentication - should be enabled on your Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"equals\":\"functionapp\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/siteAuthEnabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1353 - Incident Response Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1353\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c785ad59-f78f-44ad-9a7f-d1202318c748\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c785ad59-f78f-44ad-9a7f-d1202318c748\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Email notifications to admins should be enabled in SQL server advanced data - security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - that 'email notification to admins and subscription owners' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c84e5349-db6d-4769-805e-e14037dab9b5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - API App should only be accessible over HTTPS\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"api\"},{\"field\":\"kind\",\"equals\":\"apiApp\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"OnlyHttpsForApiApp\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1470 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1470\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c89ba09f-2e0f-44d0-8095-65b05bd151ef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c89ba09f-2e0f-44d0-8095-65b05bd151ef\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Interactive Logon'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c8abcef9-fc26-482f-b8db-5fa60ee4586d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1018 - Account Management | Role-Based Schemes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1018\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9121abf-e698-4ee9-b1cf-71ee528ff07f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9121abf-e698-4ee9-b1cf-71ee528ff07f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL flexible servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/flexibleServers\"},{\"field\":\"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9299215-ae47-4f50-9c54-8a392f68a052\"},{\"properties\":{\"displayName\":\"Resource - logs in Data Lake Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Data - Lake\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c95c74d9-38fe-4f0d-af86-0c7d626a315c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'User Rights Assignment'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c961dac9-5916-42e8-8fb1-703148323994\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs with a pending reboot\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPendingReboot\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPendingReboot\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c96f3246-4382-4264-bf6b-af0b35e23c3c\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure IoT Hubs to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"iotHub\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink.azure-devices.net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Network Security Groups\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name '{storagePrefixParameter}{NSGLocation}' will be - automatically created.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"storagePrefix\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Storage - Account Prefix for Regional Storage Account\",\"description\":\"This prefix - will be combined with the network security group location to form the created - storage account name.\"}},\"rgName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - Group Name for Storage Account (must exist)\",\"description\":\"The resource - group that the storage account will be created in. This resource group must - already exist.\",\"strongType\":\"ExistingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"setbypolicy\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"},\"nsgName\":{\"type\":\"string\"},\"rgName\":{\"type\":\"string\"}},\"variables\":{\"storageDeployName\":\"[concat('policyStorage_', - uniqueString(parameters('location'), parameters('nsgName')))]\"},\"resources\":[{\"type\":\"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings\",\"name\":\"[concat(parameters('nsgName'),'/Microsoft.Insights/setbypolicy')]\",\"apiVersion\":\"2017-05-01-preview\",\"location\":\"[parameters('location')]\",\"dependsOn\":[\"[variables('storageDeployName')]\"],\"properties\":{\"storageAccountId\":\"[reference(variables('storageDeployName')).outputs.storageAccountId.value]\",\"logs\":[{\"category\":\"NetworkSecurityGroupEvent\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}},{\"category\":\"NetworkSecurityGroupRuleCounter\",\"enabled\":true,\"retentionPolicy\":{\"enabled\":false,\"days\":0}}]}},{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('storageDeployName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('rgName')]\",\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storagePrefix\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2017-06-01\",\"type\":\"Microsoft.Storage/storageAccounts\",\"name\":\"[concat(parameters('storageprefix'), - parameters('location'))]\",\"sku\":{\"name\":\"Standard_LRS\",\"tier\":\"Standard\"},\"kind\":\"Storage\",\"location\":\"[parameters('location')]\",\"tags\":{\"created-by\":\"policy\"},\"scale\":null,\"properties\":{\"networkAcls\":{\"bypass\":\"AzureServices\",\"defaultAction\":\"Allow\",\"ipRules\":[],\"virtualNetworkRules\":[]},\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountId\":{\"type\":\"string\",\"value\":\"[resourceId(parameters('rgName'), - 'Microsoft.Storage/storageAccounts',concat(parameters('storagePrefix'), parameters('location')))]\"}}}}}]},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"storagePrefix\":{\"value\":\"[parameters('storagePrefix')]\"},\"rgName\":{\"value\":\"[parameters('rgName')]\"},\"nsgName\":{\"value\":\"[field('name')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89\"},{\"properties\":{\"displayName\":\"Storage - accounts should allow access from trusted Microsoft services\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Some - Microsoft services that interact with storage accounts operate from networks - that can't be granted access through network rules. To help this type of service - work as intended, allow the set of trusted Microsoft services to bypass the - network rules. These services will then use strong authentication to access - the storage account.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Storage\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"exists\":\"true\"},{\"field\":\"Microsoft.Storage/storageAccounts/networkAcls.bypass\",\"notContains\":\"AzureServices\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"c9d007d0-c057-4772-b18c-01e546713bcd\"},{\"properties\":{\"displayName\":\"App - Configuration should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your app configuration instances - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"App - Configuration\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.AppConfiguration/configurationStores\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca610c1d-041c-4332-9d88-7ed3094967c7\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy - Configure Windows Azure Monitor agent to enable Azure Monitor assignments - on Windows virtual machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.\",\"metadata\":{\"category\":\"Monitoring\",\"version\":\"1.0.0-preview\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"location\",\"in\":[\"australiacentral\",\"australiaeast\",\"australiasoutheast\",\"centralindia\",\"centralus\",\"eastasia\",\"eastus2euap\",\"eastus\",\"eastus2\",\"germanywestcentral\",\"japaneast\",\"northcentralus\",\"northeurope\",\"southcentralus\",\"southeastasia\",\"uksouth\",\"westcentralus\",\"westeurope\",\"westus\",\"westus2\"]},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzureMonitorWindowsAgent\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitor\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"AzureMonitorWindowsAgent\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"[concat(parameters('vmName'), - '/AzureMonitorWindowsAgent')]\",\"apiVersion\":\"2019-07-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.Azure.Monitor\",\"type\":\"AzureMonitorWindowsAgent\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca817e41-e85a-4783-bc7f-dc532d36235e\"},{\"properties\":{\"displayName\":\"Managed - disks should be double encrypted with both platform-managed and customer-managed - keys\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskEncryptionSets\"},{\"field\":\"Microsoft.Compute/diskEncryptionSets/encryptionType\",\"notEquals\":\"EncryptionAtRestWithPlatformAndCustomerKeys\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca91455f-eace-4f96-be59-e6e2c35b4816\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1035 - Least Privilege | Authorize Access To Security Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1035\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca94b046-45e2-444f-a862-dc8ce262a516\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca94b046-45e2-444f-a862-dc8ce262a516\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1243 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1243\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ca9a4469-d6df-4ab2-a42f-1213c396f0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ca9a4469-d6df-4ab2-a42f-1213c396f0ec\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Server'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Server' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkServer\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"caf2d518-f029-4f6b-833b-d7081702f253\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1306 - Identification And Authentication (Org. Users) | Net. - Access To Priv. Accts. - Replay\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1306\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cafc6c3c-5fc5-4c5e-a99b-a0ccb1d34eff\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for Web Applications\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb510bfd-1cba-4d9f-a230-cb0976f4bb71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1486 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1486\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cb790345-a51f-43de-934e-98dbfaf9dca5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cb790345-a51f-43de-934e-98dbfaf9dca5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1167 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1167\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cbb2be76-4891-430b-95a7-ca0b0a3d1300\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cbb2be76-4891-430b-95a7-ca0b0a3d1300\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1374 - Incident Response Assistance\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1374\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc5c8616-52ef-4e5e-8000-491634ed9249\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc5c8616-52ef-4e5e-8000-491634ed9249\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - only specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembers\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc7cda28-f867-4311-8497-a526129a8d19\"},{\"properties\":{\"displayName\":\"[Preview]: - Sensitive data in your SQL databases should be classified\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Security - Center\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers/databases\",\"Microsoft.Sql/managedInstances/databases\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"b0df6f56-862d-4730-8597-38c0fd4ebd59\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349\"},{\"properties\":{\"displayName\":\"Allowed - virtual machine size SKUs\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Compute\"},\"parameters\":{\"listOfAllowedSKUs\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of size SKUs that can be specified for virtual machines.\",\"displayName\":\"Allowed - Size SKUs\",\"strongType\":\"VMSKUs\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachines/sku.name\",\"in\":\"[parameters('listOfAllowedSKUs')]\"}}]},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cccc23c7-8427-4f53-ad12-b6a63eb452b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1443 - Media Use\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1443\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd0ec6fa-a2e7-4361-aee4-a8688659a9ed\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[resourceGroup().tags[parameters('tagName')]]\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd3aa116-8754-49c9-a813-ad46512ece54\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Allow resource creation if 'department' tag set\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Allows - resource creation only if the 'department' tag is set\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Tags\",\"deprecated\":true},\"parameters\":{},\"policyRule\":{\"if\":{\"not\":{\"field\":\"tags\",\"containsKey\":\"department\"}},\"then\":{\"effect\":\"Deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd8dc879-a2ae-43c3-8211-1877c5755064\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1582 - Information System Documentation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1582\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cd9e2f38-259b-462c-bfad-0ad7ab4e65c5\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that allow re-use of the previous 24 passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"EnforcePasswordHistory\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdbf72d9-ac9c-4026-8a3a-491a5ac59293\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1104 - Audit Events\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1104\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdd8d244-18b2-4306-a1d1-df175ae0935f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdd8d244-18b2-4306-a1d1-df175ae0935f\"},{\"properties\":{\"displayName\":\"Deploy - export to Event Hub for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Event Hub configuration is created. If you enter a name for a resource group - that doesn't exist, it'll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Event Hub configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"eventHubDetails\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub details\",\"description\":\"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with 'Send' claim.\",\"strongType\":\"Microsoft.EventHub/namespaces/eventhubs/authorizationrules\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"exportToEventHub\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"eventHubDetails\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"SeperatedEventHubDetails\":\"[split(parameters('eventHubDetails'),'/')]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"exportToEventHub\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Event Hub via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"EventHub\",\"eventHubResourceId\":\"[concat('/', - variables('SeperatedEventHubDetails')[1], '/', variables('SeperatedEventHubDetails')[2], - '/', variables('SeperatedEventHubDetails')[3], '/', variables('SeperatedEventHubDetails')[4], - '/', variables('SeperatedEventHubDetails')[5], '/', variables('SeperatedEventHubDetails')[6], - '/', variables('SeperatedEventHubDetails')[7], '/', variables('SeperatedEventHubDetails')[8], - '/', variables('SeperatedEventHubDetails')[9], '/', variables('SeperatedEventHubDetails')[10])]\",\"connectionString\":\"[listkeys(parameters('eventHubDetails'),'2017-04-01').primaryConnectionString]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"eventHubDetails\":{\"value\":\"[parameters('eventHubDetails')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cdfcce10-4578-4ecd-9703-530938e4abcb\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - Privilege Use'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - Privilege Use'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesPrivilegeUse\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce2370f6-0ac5-4d85-8ab4-10721cc640b0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1209 - Configuration Settings\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1209\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ce669c31-9103-4552-ae9c-cdef4e03580d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ce669c31-9103-4552-ae9c-cdef4e03580d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1242 - Contingency Planning Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1242\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3b3293-667a-445e-a722-fa0b0afc0958\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3b3293-667a-445e-a722-fa0b0afc0958\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1097 - Role-Based Security Training | Suspicious Communications - And Anomalous System Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1097\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf3e4836-f19e-47eb-a8cd-c3ca150452c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf3e4836-f19e-47eb-a8cd-c3ca150452c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1424 - Maintenance Personnel | Individuals Without Appropriate - Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1424\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf55fc87-48e1-4676-a2f8-d9a8cf993283\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf55fc87-48e1-4676-a2f8-d9a8cf993283\"},{\"properties\":{\"displayName\":\"Resource - logs in Key Vault should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Key - Vault\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"cf820ca0-f99e-4f3e-84fb-66e913812d21\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1292 - Information System Backup | Test Restoration Using - Sampling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1292\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d03516cf-0293-489f-9b32-a18f2a79f836\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d03516cf-0293-489f-9b32-a18f2a79f836\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1724 - Error Handling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1724\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d07594d1-0307-4c08-94db-5d71ff31f0f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d07594d1-0307-4c08-94db-5d71ff31f0f6\"},{\"properties\":{\"displayName\":\"Container - registries should not allow unrestricted network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn't have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.\",\"metadata\":{\"version\":\"1.1.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"anyof\":[{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"exists\":\"false\"},{\"field\":\"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction\",\"equals\":\"Allow\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0793b48-0edc-4296-a390-4c75d1bdfd71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1084 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1084\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d0eb15db-dd1c-4d1d-b200-b12dd6cd060c\"},{\"properties\":{\"displayName\":\"Add - or replace a tag on resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}},\"tagValue\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Value\",\"description\":\"Value of the tag, such as 'production'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"notEquals\":\"[parameters('tagValue')]\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"addOrReplace\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[parameters('tagValue')]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d157c373-a6c4-483d-aaad-570756956268\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against 'man in the middle' attacks by encrypting the data stream - between the server and your application. This configuration enforces that - SSL is always enabled for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforPostgreSQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d158790f-bfb0-486c-8631-2dc6b4e8e6af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1620 - Denial Of Service Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1620\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d17c826b-1dec-43e1-a984-7b71c446649c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d17c826b-1dec-43e1-a984-7b71c446649c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1409 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1409\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1880188-e51a-4772-b2ab-68f5e8bd27f6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1880188-e51a-4772-b2ab-68f5e8bd27f6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Function Apps that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"functionapp\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux\"},{\"field\":\"kind\",\"equals\":\"functionapp,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1195 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1195\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d1e1d65c-1013-4484-bd54-991332e6a0d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d1e1d65c-1013-4484-bd54-991332e6a0d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1721 - Spam Protection | Central Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1721\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d207aaef-7c4d-4f8c-9dce-4d62dfa3d29a\"},{\"properties\":{\"displayName\":\"Virtual - machines' Guest Configuration extension should be deployed with system-assigned - managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines\",\"name\":\"[first(split(field('fullName'), - '/'))]\",\"existenceCondition\":{\"field\":\"identity.type\",\"contains\":\"SystemAssigned\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d26f7642-7545-4e18-9b75-8c9bbdee3a9a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1106 - Audit Events | Reviews And Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1106\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d2b4feae-61ab-423f-a4c5-0e38ac4464d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d2b4feae-61ab-423f-a4c5-0e38ac4464d8\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1030 - Information Flow Enforcement | Physical / Logical Separation - Of Information Flows\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1030\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3531453-b869-4606-9122-29c1cd6e7ed1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3531453-b869-4606-9122-29c1cd6e7ed1\"},{\"properties\":{\"displayName\":\"Deploy - - Configure Azure Event Grid domains to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"deployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"domain\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"domain-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d389df0a-e0d7-4607-833c-75a6fdac2c2d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs on which the DSC configuration is - not compliant\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsDscConfiguration\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsDscConfiguration\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38b4c26-9d2e-47d7-aefe-18d859a8706a\"},{\"properties\":{\"displayName\":\"Long-term - geo-redundant backup should be enabled for Azure SQL Databases\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers/databases\"},{\"field\":\"name\",\"notEquals\":\"master\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies\",\"name\":\"default\",\"existenceCondition\":{\"anyOf\":[{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention\",\"notEquals\":\"PT0S\"},{\"field\":\"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention\",\"notEquals\":\"PT0S\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d38fc420-0735-4ef3-ac11-c806f651a570\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1641 - Transmission Confidentiality And Integrity | Cryptographic - Or Alternate Physical Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1641\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d39d4f68-7346-4133-8841-15318a714a24\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d39d4f68-7346-4133-8841-15318a714a24\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"3.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"installed_application_linux\",\"version\":\"1.*\",\"configurationParameter\":{\"ApplicationName\":\"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names\",\"description\":\"A semicolon-separated list of the names of the applications - that should be installed. e.g. 'python; powershell'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent', - '=', parameters('ApplicationName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3b823c9-e0fc-4453-9fb2-8213b7338523\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1249 - Contingency Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1249\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d3bf4251-0818-42db-950b-afd5b25a51c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d3bf4251-0818-42db-950b-afd5b25a51c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1562 - Allocation Of Resources\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1562\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4142013-7964-4163-a313-a900301c2cef\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4142013-7964-4163-a313-a900301c2cef\"},{\"properties\":{\"displayName\":\"Virtual - machines should be connected to an approved virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual machine connected to a virtual network that is not - approved.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"virtualNetworkId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network Id\",\"description\":\"Resource Id of the virtual network. Example: - /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"not\":{\"field\":\"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id\",\"like\":\"[concat(parameters('virtualNetworkId'),'/*')]\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d416745a-506c-48b6-8ab1-83cb814bcaa3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1383 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1383\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d4558451-e16a-4d2d-a066-fe12a6282bb9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d4558451-e16a-4d2d-a066-fe12a6282bb9\"},{\"properties\":{\"displayName\":\"Managed - disks should use a specific set of disk encryption sets for the customer-managed - key encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"2.0.0\"},\"parameters\":{\"allowedEncryptionSets\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - disk encryption set\",\"description\":\"The list of allowed disk encryption - sets for managed disks.\",\"strongType\":\"Microsoft.Compute/diskEncryptionSets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/disks\"},{\"field\":\"Microsoft.Compute/disks/managedBy\",\"exists\":\"False\"},{\"field\":\"Microsoft.Compute/disks/encryption.diskEncryptionSetId\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"count\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]\"},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/galleries/images/versions\"},{\"value\":\"[length(field('Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]'))]\",\"greater\":0},{\"not\":{\"field\":\"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId\",\"in\":\"[parameters('allowedEncryptionSets')]\"}}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"field\":\"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/images\"},{\"value\":\"[length(field('Microsoft.Compute/images/storageProfile.dataDisks[*]'))]\",\"greater\":0},{\"field\":\"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id\",\"notIn\":\"[parameters('allowedEncryptionSets')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d461a302-a187-421a-89ac-84acdb4edc04\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Interactive Logon'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsInteractiveLogon\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d472d2c9-d6a3-4500-9f5f-b15f123005aa\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1112 - Response To Audit Processing Failures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1112\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d530aad8-4ee2-45f4-b234-c061dae683c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d530aad8-4ee2-45f4-b234-c061dae683c0\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs for Application Insights should be linked to a Log Analytics - workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that's enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/components\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"equals\":\"\"},{\"field\":\"Microsoft.Insights/components/WorkspaceResourceId\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d550e854-df1a-4de9-bf44-cd894b39a95e\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Analytics to Log Analytics workspace\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"logAnalytics\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant 'Log Analytics Contributor' permissions (or similar) - to the policy assignment's principal ID.\",\"strongType\":\"omsWorkspace\",\"assignPermissions\":true}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Log Analytics - workspace - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeAnalytics/accounts\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa\",\"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"logAnalytics\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"workspaceId\":\"[parameters('logAnalytics')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"logAnalytics\":{\"value\":\"[parameters('logAnalytics')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1585 - Security Engineering Principles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1585\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d57f8732-5cdc-4cda-8d27-ab148e1f3a55\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d57f8732-5cdc-4cda-8d27-ab148e1f3a55\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1667 - System And Information Integrity Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1667\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d61880dc-6e38-4f2a-a30c-3406a98f8220\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d61880dc-6e38-4f2a-a30c-3406a98f8220\"},{\"properties\":{\"displayName\":\"Log - Analytics agent health issues should be resolved on your machines\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"8e2b96ff-3de2-289b-b5c1-3b9921a3441e\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d62cfe2b-3ab0-4d41-980d-76803b58ca65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1150 - Security Assessments | External Organizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1150\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d630429d-e763-40b1-8fba-d20ba7314afb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d630429d-e763-40b1-8fba-d20ba7314afb\"},{\"properties\":{\"displayName\":\"Event - Hub should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d63edb4a-c612-454d-b47d-191a724fcbf0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1549 - Vulnerability Scanning\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1549\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6976a08-d969-4df2-bb38-29556c2eb48a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6976a08-d969-4df2-bb38-29556c2eb48a\"},{\"properties\":{\"displayName\":\"[Preview]: - Log Analytics agent should be installed on your Windows Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"MicrosoftMonitoringAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Microsoft Network - Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Microsoft Network Client' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"version\":\"1.*\",\"configurationParameter\":{\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":\"Microsoft - network client: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue\",\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":\"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue\",\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":\"Microsoft - network server: Digitally sign communications (always);ExpectedValue\",\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":\"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"MicrosoftNetworkClientDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB client component.\"}},\"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network client: Send unencrypted password to third-party SMB servers\",\"description\":\"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it.\"}},\"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Amount of idle time required before suspending session\",\"description\":\"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range.\"}},\"MicrosoftNetworkServerDigitallySignCommunicationsAlways\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Digitally sign communications (always)\",\"description\":\"Specifies - whether packet signing is required by the SMB server component.\"}},\"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Microsoft - network server: Disconnect clients when logon hours expire\",\"description\":\"Specifies - whether to disconnect users who are connected to the local computer outside - their user account's valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - 'Network security: Force logoff when logon hours expire'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Microsoft - network client: Digitally sign communications (always);ExpectedValue', '=', - parameters('MicrosoftNetworkClientDigitallySignCommunicationsAlways'), ',', - 'Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue', - '=', parameters('MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'), - ',', 'Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue', '=', parameters('MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'), - ',', 'Microsoft network server: Digitally sign communications (always);ExpectedValue', - '=', parameters('MicrosoftNetworkServerDigitallySignCommunicationsAlways'), - ',', 'Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue', - '=', parameters('MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d6c69680-54f0-4349-af10-94dd05f4225e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1473 - Emergency Power\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1473\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7047705-d719-46a7-8bb0-76ad233eba71\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7047705-d719-46a7-8bb0-76ad233eba71\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1529 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1529\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d74fdc92-1cb8-4a34-9978-8556425cd14c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d74fdc92-1cb8-4a34-9978-8556425cd14c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1350 - Identification And Authentication (Non-Org. Users) - | Use Of FICAM-Issued Profiles\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1350\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d77fd943-6ba6-4a21-ba07-22b03e347cc4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d77fd943-6ba6-4a21-ba07-22b03e347cc4\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows Server VMs on which Windows Serial Console - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsSerialConsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d7ccd0ca-8d78-42af-a43d-6b7f928accbc\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn't exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"field\":\"Microsoft.Devices/provisioningServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d82101f3-f3ce-4fc5-8708-4c09f4009546\"},{\"properties\":{\"displayName\":\"Configure - Container registries with private endpoints\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - endpoint subnet id\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"field\":\"Microsoft.ContainerRegistry/registries/sku.name\",\"equals\":\"Premium\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"registry\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d85c6833-7d33-4cf5-a915-aaa2de84405f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1016 - Account Management | Automated Audit Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1016\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8b43277-512e-40c3-ab00-14b3b6e72238\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8b43277-512e-40c3-ab00-14b3b6e72238\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1488 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1488\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d8ef30eb-a44f-47af-8524-ac19a36d41d2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d8ef30eb-a44f-47af-8524-ac19a36d41d2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1577 - Acquisition Process | Continuous Monitoring Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1577\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d922484a-8cfc-4a6b-95a4-77d6a685407f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d922484a-8cfc-4a6b-95a4-77d6a685407f\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MySQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9844e8a-1437-4aeb-a32c-0c992f056095\"},{\"properties\":{\"displayName\":\"Azure - HDInsight clusters should use encryption in transit to encrypt communication - between Azure HDInsight cluster nodes\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"HDInsight\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HDInsight/clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"exists\":false},{\"field\":\"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"d9da03a1-f3c3-412a-9709-947156872263\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that do not store passwords using reversible encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"StorePasswordsUsingReversibleEncryption\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"StorePasswordsUsingReversibleEncryption\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da0f98fe-a24b-4ad5-af69-bd0400233661\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1271 - Alternate Storage Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1271\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3bfb53-9c46-4010-b3db-a7ba1296dada\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3bfb53-9c46-4010-b3db-a7ba1296dada\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1516 - Personnel Termination\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1516\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da3cd269-156f-435b-b472-c3af34c032ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da3cd269-156f-435b-b472-c3af34c032ed\"},{\"properties\":{\"displayName\":\"Configure - CosmosDB accounts to disable public network access \",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - public network access for your CosmosDB resource so that it's not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cosmos - DB\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Modify\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\",\"/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450\"],\"conflictEffect\":\"audit\",\"operations\":[{\"condition\":\"[greaterOrEquals(requestContext().apiVersion, - '2021-01-15')]\",\"operation\":\"addOrReplace\",\"field\":\"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess\",\"value\":\"Disabled\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"da69ba51-aaf1-41e5-8651-607cd0b37088\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Batch Account to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Batch Accounts in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Batch/batchAccounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.Batch/batchAccounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ServiceLog\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"db51110f-0865-4a6e-b274-e2e07a5b2cd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1277 - Alternate Processing Site | Priority Of Service\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1277\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc43e829-3d50-4a0a-aa0f-428d551862aa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc43e829-3d50-4a0a-aa0f-428d551862aa\"},{\"properties\":{\"displayName\":\"Logic - Apps should be deployed into Integration Service Environment\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Logic - Apps\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Logic/workflows\"},{\"field\":\"Microsoft.Logic/workflows/integrationServiceEnvironment\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dc595cb1-1cde-45f6-8faf-f88874e1c0e1\"},{\"properties\":{\"displayName\":\"Web - apps should use an Azure file share for its content directory\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"},{\"field\":\"Microsoft.Web/sites/storageAccountRequired\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dcbc65aa-59f3-4239-8978-3bb869d82604\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1439 - Media Sanitization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1439\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dce72873-c5f1-47c3-9b4f-6b8207fd5a45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dce72873-c5f1-47c3-9b4f-6b8207fd5a45\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1264 - Contingency Plan Testing | Coordinate With Related - Plans\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1264\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd280d4b-50a1-42fb-a479-ece5878acf19\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd280d4b-50a1-42fb-a479-ece5878acf19\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using custom domains\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UsedCustomDomains\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd2ea520-6b06-45c3-806e-ea297c23e06a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'System Audit Policies - - Policy Change'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'System Audit Policies - Policy Change'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesPolicyChange\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd4680ed-0559-4a6a-ad10-081d14cbb484\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1715 - Software, Firmware, And Information Integrity | Automated - Response To Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1715\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd469ae0-71a8-4adc-aafc-de6949ca3339\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd469ae0-71a8-4adc-aafc-de6949ca3339\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1678 - Malicious Code Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1678\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd533cb0-b416-4be7-8e86-4d154824dfd7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd533cb0-b416-4be7-8e86-4d154824dfd7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1391 - Information Spillage Response | Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1391\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd6ac1a1-660e-4810-baa8-74e868e2ed47\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd6ac1a1-660e-4810-baa8-74e868e2ed47\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1146 - Security Assessments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1146\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dd83410c-ecb6-4547-8f14-748c3cbdc7ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dd83410c-ecb6-4547-8f14-748c3cbdc7ac\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1602 - Developer Security Testing And Evaluation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1602\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddae2e97-a449-499f-a1c8-aea4a7e52ec9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddae2e97-a449-499f-a1c8-aea4a7e52ec9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Settings - Account Policies'. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddb53c61-9db4-41d4-a953-2abff5b66c12\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Recovery console'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsRecoveryconsole\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\",\"value\":\"[parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1689 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1689\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/de901f2f-a01a-4456-97f0-33cda7966172\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"de901f2f-a01a-4456-97f0-33cda7966172\"},{\"properties\":{\"displayName\":\"[Preview]: - Deploy Dependency agent to hybrid Linux Azure Arc machines\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn't installed.\",\"metadata\":{\"version\":\"1.1.0-preview\",\"category\":\"Monitoring\",\"preview\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.HybridCompute/machines/extensions/type\",\"equals\":\"DependencyAgentLinux\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"},{\"field\":\"Microsoft.HybridCompute/machines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"vmExtensionName\":\"DependencyAgentLinux\",\"vmExtensionPublisher\":\"Microsoft.Azure.Monitoring.DependencyAgent\",\"vmExtensionType\":\"DependencyAgentLinux\"},\"resources\":[{\"name\":\"[concat(parameters('vmName'), - '/', variables('vmExtensionName'))]\",\"type\":\"Microsoft.HybridCompute/machines/extensions\",\"location\":\"[parameters('location')]\",\"apiVersion\":\"2019-12-12\",\"properties\":{\"publisher\":\"[variables('vmExtensionPublisher')]\",\"type\":\"[variables('vmExtensionType')]\",\"settings\":{}}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - DA extension for VM', ': ', parameters('vmName'))]\"}}},\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deacecc0-9f84-44d2-bb82-46f32d766d43\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1528 - Access Agreements\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1528\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deb9797c-22f8-40e8-b342-a84003c924e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deb9797c-22f8-40e8-b342-a84003c924e6\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Recovery Services vaults should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"preview\":true,\"category\":\"Backup\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.RecoveryServices/vaults\"},{\"count\":{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},{\"field\":\"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState\",\"equals\":\"Succeeded\"}]}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deeddb44-9f94-4903-9fa0-081d524406e3\"},{\"properties\":{\"displayName\":\"IoT - Hub device provisioning service instances should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Internet - of Things\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Devices/provisioningServices\"},{\"count\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"df39c015-56a4-45de-b4a3-efe77bed320d\"},{\"properties\":{\"displayName\":\"MariaDB - server should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules\",\"existenceCondition\":{\"field\":\"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dfbd9a64-6114-48de-a47d-90574dc2e489\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1673 - Flaw Remediation | Automated Flaw Remediation Status\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1673\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/dff0b90d-5a6f-491c-b2f8-b90aa402d844\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"dff0b90d-5a6f-491c-b2f8-b90aa402d844\"},{\"properties\":{\"displayName\":\"Configure - Azure Cache for Redis to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cache\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone Id\",\"strongType\":\"Microsoft.Network/privateDnsZones\",\"description\":\"The - resource id of the private DNS zone\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"redisCache\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"privatelink-redis-cache-windows-net\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e016b22b-e0eb-436d-8fd7-160c4eaed6e2\"},{\"properties\":{\"displayName\":\"Auditing - on Synapse workspace should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"setting\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Desired - Auditing setting\"},\"allowedValues\":[\"enabled\",\"disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Synapse/workspaces/auditingSettings\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Synapse/workspaces/auditingSettings/state\",\"equals\":\"[parameters('setting')]\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e04e5000-cd89-451d-bb21-a14d24ff9c73\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'User Rights Assignment'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'User - Rights Assignment' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_UserRightsAssignment\",\"version\":\"1.*\",\"configurationParameter\":{\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":\"Access - this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayLogOnLocally\":\"Allow - log on locally;ExpectedValue\",\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":\"Allow - log on through Remote Desktop Services;ExpectedValue\",\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":\"Deny - access to this computer from the network;ExpectedValue\",\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":\"Manage - auditing and security log;ExpectedValue\",\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":\"Back - up files and directories;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheSystemTime\":\"Change - the system time;ExpectedValue\",\"UsersOrGroupsThatMayChangeTheTimeZone\":\"Change - the time zone;ExpectedValue\",\"UsersOrGroupsThatMayCreateATokenObject\":\"Create - a token object;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":\"Deny - log on as a batch job;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":\"Deny - log on as a service;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLocalLogon\":\"Deny - log on locally;ExpectedValue\",\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":\"Deny - log on through Remote Desktop Services;ExpectedValue\",\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":\"Force - shutdown from a remote system;ExpectedValue\",\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":\"Restore - files and directories;ExpectedValue\",\"UsersAndGroupsThatMayShutDownTheSystem\":\"Shut - down the system;ExpectedValue\",\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":\"Take - ownership of files or other objects;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may access this computer from the network\",\"description\":\"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection.\"}},\"UsersOrGroupsThatMayLogOnLocally\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on locally\",\"description\":\"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right.\"}},\"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may log on through Remote Desktop Services\",\"description\":\"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance.\"}},\"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied access to this computer from the network\",\"description\":\"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network.\"}},\"UsersOrGroupsThatMayManageAuditingAndSecurityLog\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may manage auditing and security log\",\"description\":\"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log.\"}},\"UsersOrGroupsThatMayBackUpFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may back up files and directories\",\"description\":\"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system.\"}},\"UsersOrGroupsThatMayChangeTheSystemTime\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the system time\",\"description\":\"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer.\"}},\"UsersOrGroupsThatMayChangeTheTimeZone\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may change the time zone\",\"description\":\"Specifies which - users and groups are permitted to change the time zone of the computer.\"}},\"UsersOrGroupsThatMayCreateATokenObject\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may create a token object\",\"description\":\"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data.\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a batch job\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task).\"}},\"UsersAndGroupsThatAreDeniedLoggingOnAsAService\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied logging on as a service\",\"description\":\"Specifies - which service accounts are explicitly not permitted to register a process - as a service.\"}},\"UsersAndGroupsThatAreDeniedLocalLogon\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied local logon\",\"description\":\"Specifies which - users and groups are explicitly not permitted to log on to the computer.\"}},\"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that are denied log on through Remote Desktop Services\",\"description\":\"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client.\"}},\"UserAndGroupsThatMayForceShutdownFromARemoteSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"User - and groups that may force shutdown from a remote system\",\"description\":\"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network.\"}},\"UsersAndGroupsThatMayRestoreFilesAndDirectories\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may restore files and directories\",\"description\":\"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories.\"}},\"UsersAndGroupsThatMayShutDownTheSystem\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - and groups that may shut down the system\",\"description\":\"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command.\"}},\"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Users - or groups that may take ownership of files or other objects\",\"description\":\"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_UserRightsAssignment\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Access - this computer from the network;ExpectedValue', '=', parameters('UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'), - ',', 'Allow log on locally;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnLocally'), - ',', 'Allow log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'), - ',', 'Deny access to this computer from the network;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'), - ',', 'Manage auditing and security log;ExpectedValue', '=', parameters('UsersOrGroupsThatMayManageAuditingAndSecurityLog'), - ',', 'Back up files and directories;ExpectedValue', '=', parameters('UsersOrGroupsThatMayBackUpFilesAndDirectories'), - ',', 'Change the system time;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheSystemTime'), - ',', 'Change the time zone;ExpectedValue', '=', parameters('UsersOrGroupsThatMayChangeTheTimeZone'), - ',', 'Create a token object;ExpectedValue', '=', parameters('UsersOrGroupsThatMayCreateATokenObject'), - ',', 'Deny log on as a batch job;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'), - ',', 'Deny log on as a service;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLoggingOnAsAService'), - ',', 'Deny log on locally;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLocalLogon'), - ',', 'Deny log on through Remote Desktop Services;ExpectedValue', '=', parameters('UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'), - ',', 'Force shutdown from a remote system;ExpectedValue', '=', parameters('UserAndGroupsThatMayForceShutdownFromARemoteSystem'), - ',', 'Restore files and directories;ExpectedValue', '=', parameters('UsersAndGroupsThatMayRestoreFilesAndDirectories'), - ',', 'Shut down the system;ExpectedValue', '=', parameters('UsersAndGroupsThatMayShutDownTheSystem'), - ',', 'Take ownership of files or other objects;ExpectedValue', '=', parameters('UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e068b215-0026-4354-b347-8fb2766f73a2\"},{\"properties\":{\"displayName\":\"Cosmos - DB should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DocumentDB/databaseAccounts\"},{\"field\":\"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id\",\"exists\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Administrative Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Administrative - Templates - MSS (Legacy)' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0a7e899-2ce2-4253-8a13-d808fdeb75af\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1206 - Access Restrictions For Change | Limit Production / - Operational Privileges\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1206\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0de232d-02a0-4652-872d-88afb4ae5e91\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0de232d-02a0-4652-872d-88afb4ae5e91\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ExecutionPolicy\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - PowerShell Execution Policy\",\"description\":\"The expected PowerShell execution - policy.\"},\"allowedValues\":[\"AllSigned\",\"Bypass\",\"Default\",\"RemoteSigned\",\"Restricted\",\"Undefined\",\"Unrestricted\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy', - '=', parameters('ExecutionPolicy')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"WindowsPowerShellExecutionPolicy\"},\"ExecutionPolicy\":{\"value\":\"[parameters('ExecutionPolicy')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ExecutionPolicy\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy\",\"value\":\"[parameters('ExecutionPolicy')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e0efc13a-122a-47c5-b817-2ccfe5d12615\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1714 - Software, Firmware, And Information Integrity | Automated - Notifications Of Integrity Violations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1714\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e12494fa-b81e-4080-af71-7dbacc2da0ec\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e12494fa-b81e-4080-af71-7dbacc2da0ec\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1686 - Information System Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1686\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e17085c5-0be8-4423-b39b-a52d3d1402e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e17085c5-0be8-4423-b39b-a52d3d1402e5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1722 - Spam Protection | Automatic Updates\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1722\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1da06bd-25b6-4127-a301-c313d6873fff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1da06bd-25b6-4127-a301-c313d6873fff\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in security configuration on your machines should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"181ac480-f7c4-544b-9865-11b8ffe87f47\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1047 - System Use Notification\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1047\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e1ff6d62-a55c-41ab-90ba-90bb5b7b6f62\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1276 - Alternate Processing Site | Accessibility\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1276\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e214e563-1206-4a43-a56b-ac5880c9c571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e214e563-1206-4a43-a56b-ac5880c9c571\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1560 - System And Services Acquisition Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1560\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e29e0915-5c2f-4d09-8806-048b749ad763\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e29e0915-5c2f-4d09-8806-048b749ad763\"},{\"properties\":{\"displayName\":\"Ensure - that 'HTTP Version' is the latest, if used to run the Function app\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"kind\",\"contains\":\"linux\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.http20Enabled\",\"equals\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2c1c086-2d84-4019-bff3-c44ccd95113c\"},{\"properties\":{\"displayName\":\"Dependency - agent should be enabled in virtual machine scale sets for listed virtual machine - images\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"listOfImageIdToInclude_windows\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Windows OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"listOfImageIdToInclude_linux\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Optional: - List of virtual machine images that have supported Linux OS to add to scope\",\"description\":\"Example - value: '/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage'\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_windows')]\"},{\"field\":\"Microsoft.Compute/imageId\",\"in\":\"[parameters('listOfImageIdToInclude_linux')]\"},{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"2008-R2-SP1\",\"2008-R2-SP1-smalldisk\",\"2012-Datacenter\",\"2012-Datacenter-smalldisk\",\"2012-R2-Datacenter\",\"2012-R2-Datacenter-smalldisk\",\"2016-Datacenter\",\"2016-Datacenter-Server-Core\",\"2016-Datacenter-Server-Core-smalldisk\",\"2016-Datacenter-smalldisk\",\"2016-Datacenter-with-Containers\",\"2016-Datacenter-with-RDSH\",\"2019-Datacenter\",\"2019-Datacenter-Core\",\"2019-Datacenter-Core-smalldisk\",\"2019-Datacenter-Core-with-Containers\",\"2019-Datacenter-Core-with-Containers-smalldisk\",\"2019-Datacenter-smalldisk\",\"2019-Datacenter-with-Containers\",\"2019-Datacenter-with-Containers-smalldisk\",\"2019-Datacenter-zhcn\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerSemiAnnual\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"Datacenter-Core-1709-smalldisk\",\"Datacenter-Core-1709-with-Containers-smalldisk\",\"Datacenter-Core-1803-with-Containers-smalldisk\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServerHPCPack\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"WindowsServerHPCPack\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2016-BYOL\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"*-WS2012R2-BYOL\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftRServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"MLServer-WS2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftVisualStudio\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"VisualStudio\",\"Windows\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-U8\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftDynamicsAX\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Dynamics\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"equals\":\"Pre-Req-AX7-Onebox-V4\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"windows-data-science-vm\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsDesktop\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Windows-10\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-SAP-HANA\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"SUSE\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"SLES\",\"SLES-HPC\",\"SLES-HPC-Priority\",\"SLES-SAP\",\"SLES-SAP-BYOS\",\"SLES-Priority\",\"SLES-BYOS\",\"SLES-SAPCAL\",\"SLES-Standard\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"12-SP2\",\"12-SP3\",\"12-SP4\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"14.04.0-LTS\",\"14.04.1-LTS\",\"14.04.5-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"16.04-LTS\",\"16.04.0-LTS\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"in\":[\"18.04-LTS\"]}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"Centos\",\"Centos-LVM\",\"CentOS-SRIOV\"]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"6.*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"like\":\"7*\"}]}]}}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.Azure.Monitoring.DependencyAgent\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2dd799a-a932-4e9d-ac17-d473bc3c6c10\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1161 - Continuous Monitoring\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1161\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e2f8f6c6-dde4-436b-a79d-bc50e129eb3a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1387 - Information Spillage Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1387\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3007185-3857-43a9-8237-06ca94f1084c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3007185-3857-43a9-8237-06ca94f1084c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1479 - Fire Protection | Automatic Fire Suppression\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1479\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e327b072-281d-4f75-9c28-4216e5d72f26\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e327b072-281d-4f75-9c28-4216e5d72f26\"},{\"properties\":{\"displayName\":\"Azure - VPN gateways should not use 'basic' SKU\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy ensures that VPN gateways do not use 'basic' SKU.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworkGateways\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/gatewayType\",\"equals\":\"Vpn\"},{\"field\":\"Microsoft.Network/virtualNetworkGateways/sku.tier\",\"equals\":\"Basic\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78\"},{\"properties\":{\"displayName\":\"MFA - should be enabled on accounts with read permissions on your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"151e82c5-5341-a74b-1eb0-bc38d2c84bb5\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3576e28-8b17-4677-84c3-db2990658d64\"},{\"properties\":{\"displayName\":\"RDP - access from the Internet should be blocked\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits any network security rule that allows RDP access from Internet\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange\",\"equals\":\"3389\"},{\"value\":\"[if(and(not(empty(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'))), - contains(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'),'-')), - and(lessOrEquals(int(first(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389),greaterOrEquals(int(last(split(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange'), - '-'))),3389)), 'false')]\",\"equals\":\"true\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"where\":{\"value\":\"[if(and(not(empty(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')))), - contains(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')),'-')), - and(lessOrEquals(int(first(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389),greaterOrEquals(int(last(split(first(field('Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]')), - '-'))),3389)) , 'false')]\",\"equals\":\"true\"}},\"greater\":0},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]\",\"notEquals\":\"3389\"}}]},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"*\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"equals\":\"Internet\"},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"*\"}},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notEquals\":\"Internet\"}}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e372f825-a257-4fb8-9175-797a8a8627d6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Shutdown'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Shutdown'. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsShutdown\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3a77a94-cf41-4ee8-b45c-98be28841c03\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Settings - - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Settings - - Account Policies'. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Enforce password history\",\"description\":\"Specifies limits on password - reuse - how many times a new password must be created for a user account before - the password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Maximum password age\",\"description\":\"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password age\",\"description\":\"Specifies the minimum number of days - that must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Minimum password length\",\"description\":\"Specifies the minimum number of - characters that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Password must meet complexity requirements\",\"description\":\"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecuritySettingsAccountPolicies\"},\"EnforcePasswordHistory\":{\"value\":\"[parameters('EnforcePasswordHistory')]\"},\"MaximumPasswordAge\":{\"value\":\"[parameters('MaximumPasswordAge')]\"},\"MinimumPasswordAge\":{\"value\":\"[parameters('MinimumPasswordAge')]\"},\"MinimumPasswordLength\":{\"value\":\"[parameters('MinimumPasswordLength')]\"},\"PasswordMustMeetComplexityRequirements\":{\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"EnforcePasswordHistory\":{\"type\":\"string\"},\"MaximumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordAge\":{\"type\":\"string\"},\"MinimumPasswordLength\":{\"type\":\"string\"},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Enforce - password history;ExpectedValue\",\"value\":\"[parameters('EnforcePasswordHistory')]\"},{\"name\":\"Maximum - password age;ExpectedValue\",\"value\":\"[parameters('MaximumPasswordAge')]\"},{\"name\":\"Minimum - password age;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordAge')]\"},{\"name\":\"Minimum - password length;ExpectedValue\",\"value\":\"[parameters('MinimumPasswordLength')]\"},{\"name\":\"Password - must meet complexity requirements;ExpectedValue\",\"value\":\"[parameters('PasswordMustMeetComplexityRequirements')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3d95ab7-f47a-49d8-a347-784177b6c94c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1451 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1451\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e3f1e5a3-25c1-4476-8cb6-3955031f8e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e3f1e5a3-25c1-4476-8cb6-3955031f8e65\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1357 - Incident Response Training | Automated Training Environments\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1357\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e4213689-05e8-4241-9d4e-8dd1cdafd105\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e4213689-05e8-4241-9d4e-8dd1cdafd105\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - User Account Control'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - User Account Control'. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account\",\"description\":\"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account.\"}},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode\",\"description\":\"Specifies the behavior of the elevation prompt for - administrators.\"}},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Detect application installations and prompt for elevation\",\"description\":\"Specifies - the behavior of application installation detection for the computer.\"}},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode\",\"description\":\"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsUserAccountControl\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue', - '=', parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount'), - ',', 'User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue', '=', parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'), - ',', 'User Account Control: Detect application installations and prompt for - elevation;ExpectedValue', '=', parameters('UACDetectApplicationInstallationsAndPromptForElevation'), - ',', 'User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue', - '=', parameters('UACRunAllAdministratorsInAdminApprovalMode')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsUserAccountControl\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"UACAdminApprovalModeForTheBuiltinAdministratorAccount\":{\"type\":\"string\"},\"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode\":{\"type\":\"string\"},\"UACDetectApplicationInstallationsAndPromptForElevation\":{\"type\":\"string\"},\"UACRunAllAdministratorsInAdminApprovalMode\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue\",\"value\":\"[parameters('UACAdminApprovalModeForTheBuiltinAdministratorAccount')]\"},{\"name\":\"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode')]\"},{\"name\":\"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue\",\"value\":\"[parameters('UACDetectApplicationInstallationsAndPromptForElevation')]\"},{\"name\":\"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue\",\"value\":\"[parameters('UACRunAllAdministratorsInAdminApprovalMode')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e425e402-a050-45e5-b010-bd3f934589fc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1340 - Authenticator Management | No Embedded Unencrypted - Static Authenticators\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1340\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e51ff84b-e5ea-408f-b651-2ecc2933e4c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e51ff84b-e5ea-408f-b651-2ecc2933e4c6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1381 - Incident Response Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1381\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5368258-9684-4567-8126-269f34e65eab\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5368258-9684-4567-8126-269f34e65eab\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1421 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1421\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e539caaa-da8c-41b8-9e1e-449851e2f7a6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e539caaa-da8c-41b8-9e1e-449851e2f7a6\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1716 - Software, Firmware, And Information Integrity | Integration - Of Detection And Response\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1716\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e54c325e-42a0-4dcf-b105-046e0f6f590f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e54c325e-42a0-4dcf-b105-046e0f6f590f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1023 - Account Management | Usage Conditions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1023\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e55698b6-3dea-4aa9-99b9-d8218c6ab6e5\"},{\"properties\":{\"displayName\":\"Allowed - locations\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the 'global' region.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"},{\"field\":\"location\",\"notEquals\":\"global\"},{\"field\":\"type\",\"notEquals\":\"Microsoft.AzureActiveDirectory/b2cDirectories\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e56962a6-4747-49cd-b67b-bf8b01975c4c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1296 - Information System Recovery And Reconstitution | Transaction - Recovery\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1296\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e57b98a0-a011-4956-a79d-5d17ed8b8e48\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e57b98a0-a011-4956-a79d-5d17ed8b8e48\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1499 - Rules Of Behavior\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1499\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e59671ab-9720-4ee2-9c60-170e8c82251e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e59671ab-9720-4ee2-9c60-170e8c82251e\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Accounts'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Accounts: Guest account status\",\"description\":\"Specifies whether the local - Guest account is disabled.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsAccounts\"},\"AccountsGuestAccountStatus\":{\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AccountsGuestAccountStatus\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Accounts: - Guest account status;ExpectedValue\",\"value\":\"[parameters('AccountsGuestAccountStatus')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e5b81f87-9185-4224-bf00-9f505e9f89f3\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Applications that are not using latest supported Node.js Framework\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"UseLatestNodeJS\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e67687e8-08d5-4e7f-8226-5b4753bba008\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that do not have the passwd file permissions set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid121\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6955644-301c-44b5-a4c4-528577de6861\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1465 - Monitoring Physical Access | Monitoring Physical Access - To Information Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1465\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6e41554-86b5-4537-9f7f-4fc41a1d1640\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6e41554-86b5-4537-9f7f-4fc41a1d1640\"},{\"properties\":{\"displayName\":\"Audit - Windows machines on which the specified services are not installed and 'Running'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WindowsServiceStatus\",\"version\":\"1.*\",\"configurationParameter\":{\"ServiceName\":\"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"ServiceName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Service - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the services that should be installed and 'Running'. e.g. - 'WinRm;Wi*'\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsServiceStatus\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[WindowsServiceStatus]WindowsServiceStatus1;ServiceName', - '=', parameters('ServiceName')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e6ebf138-3d71-4935-a13b-9c7fdddd94df\"},{\"properties\":{\"displayName\":\"Subnets - should be associated with a Network Security Group\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks/subnets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"eade5b56-eefd-444f-95c8-23f29e5d93cb\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e71308d3-144b-4262-b144-efdc3cc90517\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1567 - System Development Life Cycle\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1567\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e72edbf6-aa61-436d-a227-0f32b77194b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e72edbf6-aa61-436d-a227-0f32b77194b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1311 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1311\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7568697-0c9e-4ea3-9cec-9e567d14f3c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7568697-0c9e-4ea3-9cec-9e567d14f3c6\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Advanced Threat Protection types should be set to 'All' in SQL server Advanced - Data Security settings\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"SQL\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/securityAlertPolicies\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]\",\"equals\":\"\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e756b945-1b1b-480b-8de8-9a0859d5f7ad\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1154 - System Interconnections | Unclassified Non-National - Security System Connections\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1154\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e757ceb9-93b3-45fe-a4f4-f43f64f1ac5a\"},{\"properties\":{\"displayName\":\"Allowed - locations for resource groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"General\"},\"parameters\":{\"listOfAllowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that resource groups can be created in.\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions/resourceGroups\"},{\"field\":\"location\",\"notIn\":\"[parameters('listOfAllowedLocations')]\"}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e765b5de-1225-4ba3-bd56-1ac6695af988\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1273 - Alternate Processing Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1273\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e77fcbf2-a1e8-44f1-860e-ed6583761e65\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e77fcbf2-a1e8-44f1-860e-ed6583761e65\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Web Sockets state for a Web Application\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Security - Center\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allof\":[{\"field\":\"type\",\"equals\":\"microsoft.Web/sites\"},{\"anyof\":[{\"field\":\"kind\",\"equals\":\"app\"},{\"field\":\"kind\",\"equals\":\"WebApp\"},{\"field\":\"kind\",\"equals\":\"app,linux\"},{\"field\":\"kind\",\"equals\":\"app,linux,container\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/complianceResults\",\"name\":\"DisableWebSockets\",\"existenceCondition\":{\"field\":\"Microsoft.Security/complianceResults/resourceStatus\",\"in\":[\"OffByPolicy\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e797f851-8be7-4c40-bb56-2e3395215b0e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1169 - Continuous Monitoring | Trend Analyses\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1169\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e7ba2cb3-5675-4468-8b50-8486bdd998a5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e7ba2cb3-5675-4468-8b50-8486bdd998a5\"},{\"properties\":{\"displayName\":\"Enforce - SSL connection should be enabled for MySQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - 'man in the middle' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMySQL/servers\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"exists\":\"true\"},{\"field\":\"Microsoft.DBforMySQL/servers/sslEnforcement\",\"notEquals\":\"Enabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e802a67a-daf5-4436-9ea6-f6d821dd0c5d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1237 - Software Usage Restrictions | Open Source Software\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1237\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e80b6812-0bfa-4383-8223-cdd86a46a890\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e80b6812-0bfa-4383-8223-cdd86a46a890\"},{\"properties\":{\"displayName\":\"Vulnerabilities - in container security configurations should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\",\"Microsoft.Compute/virtualMachineScaleSets\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"0677209d-e675-2c6f-e91a-54cef2878663\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8cbc669-f12d-49eb-93e7-9273119e9933\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Data Lake Storage Gen1 to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Data Lake Storage in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataLakeStore/accounts\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Audit\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Requests\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d\"},{\"properties\":{\"displayName\":\"Container - registries should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network.By mapping private endpoints to your container registries - instead of the entire service, you'll also be protected against data leakage - risks. Learn more at: https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Container - Registry\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerRegistry/registries\"},{\"count\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]\",\"where\":{\"field\":\"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}},\"less\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8eef0a8-67cf-4eb4-9386-14b0e78733d4\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1626 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1626\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e8f6bddd-6d67-439a-88d4-c5fe39a79341\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e8f6bddd-6d67-439a-88d4-c5fe39a79341\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1502 - Rules Of Behavior | Social Media And Networking Restrictions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1502\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e901375c-8f01-4ac8-9183-d5312f47fe63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e901375c-8f01-4ac8-9183-d5312f47fe63\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1723 - Information Input Validation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1723\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e91927a0-ac1d-44a0-95f8-5185f9dfce9f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e91927a0-ac1d-44a0-95f8-5185f9dfce9f\"},{\"properties\":{\"displayName\":\"Configure - Container registries to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Container - Registry\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint's associated VNET.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"registry\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"containerRegistry-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1200 - Security Impact Analysis\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1200\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e98fe9d7-2ed3-44f8-93b7-24dca69783ff\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e98fe9d7-2ed3-44f8-93b7-24dca69783ff\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1487 - Alternate Work Site\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1487\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c3371d-c30c-4f58-abd9-30b8a8199571\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c3371d-c30c-4f58-abd9-30b8a8199571\"},{\"properties\":{\"displayName\":\"Remote - debugging should be turned off for API Apps\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"*api\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/remoteDebuggingEnabled\",\"equals\":\"false\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e\"},{\"properties\":{\"displayName\":\"Azure - Monitor Logs clusters should be created with infrastructure-encryption enabled - (double encryption)\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/clusters\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea0dfaed-95fb-448c-934e-d6e713ce393d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1363 - Incident Handling | Automated Incident Handling Processes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1363\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3e8156-89a1-45b1-8bd6-938abc79fdfd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3e8156-89a1-45b1-8bd6-938abc79fdfd\"},{\"properties\":{\"displayName\":\"Inherit - a tag from the resource group if missing\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Adds - the specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Tags\"},\"parameters\":{\"tagName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Tag - Name\",\"description\":\"Name of the tag, such as 'environment'\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"exists\":\"false\"},{\"value\":\"[resourceGroup().tags[parameters('tagName')]]\",\"notEquals\":\"\"}]},\"then\":{\"effect\":\"modify\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"operations\":[{\"operation\":\"add\",\"field\":\"[concat('tags[', - parameters('tagName'), ']')]\",\"value\":\"[resourceGroup().tags[parameters('tagName')]]\"}]}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea3f2387-9b95-492a-a190-fcdc54f7b070\"},{\"properties\":{\"displayName\":\"Key - Vault should use a virtual network service endpoint\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.defaultAction\",\"notEquals\":\"Deny\"},{\"field\":\"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id\",\"exists\":\"false\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea4d6841-2173-4317-9747-ff522a45120f\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that allow remote connections from accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid110\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea53dbee-c6c9-4f0e-9f9e-de0039b78023\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1422 - Maintenance Personnel\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1422\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ea556850-838d-4a37-8ce5-9d7642f95e11\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ea556850-838d-4a37-8ce5-9d7642f95e11\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1542 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1542\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eab340d0-3d55-4826-a0e5-feebfeb0131d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eab340d0-3d55-4826-a0e5-feebfeb0131d\"},{\"properties\":{\"displayName\":\"Function - apps should have 'Client Certificates (Incoming client certificates)' enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"},{\"field\":\"Microsoft.Web/sites/clientCertEnabled\",\"equals\":\"false\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eaebaea7-8013-4ceb-9d14-7eb32271373c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1064 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1064\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb4d9508-cbf0-4a3c-bb5c-6c95b159f3fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1321 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1321\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb627cc6-3a9d-46b5-96b7-5fca49178a37\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb627cc6-3a9d-46b5-96b7-5fca49178a37\"},{\"properties\":{\"displayName\":\"Log - checkpoints should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_checkpoints\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d\"},{\"properties\":{\"displayName\":\"Log - connections should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_connections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442\"},{\"properties\":{\"displayName\":\"Disconnections - should be logged for PostgreSQL database servers.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_disconnections\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446\"},{\"properties\":{\"displayName\":\"Log - duration should be enabled for PostgreSQL database servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.DBforPostgreSQL/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.DBforPostgreSQL/servers/configurations\",\"name\":\"log_duration\",\"existenceCondition\":{\"field\":\"Microsoft.DBforPostgreSQL/servers/configurations/value\",\"equals\":\"ON\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3\"},{\"properties\":{\"displayName\":\"Deprecated - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Deprecated - accounts with owner permissions should be removed from your subscription. - \ Deprecated accounts are accounts that have been blocked from signing in.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"e52064aa-6853-e252-a11e-dffc675689c2\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb62a0c-3560-49e1-89ed-27e074e9f8ad\"},{\"properties\":{\"displayName\":\"Audit - Windows machines that don't have the specified applications installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKLM:SOFTWARE\\\\Wow6432node\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall, - HKCU:Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"WhitelistedApplication\",\"version\":\"1.*\",\"configurationParameter\":{\"installedApplication\":\"[InstalledApplication]bwhitelistedapp;Name\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"installedApplication\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Application - names (supports wildcards)\",\"description\":\"A semicolon-separated list - of the names of the applications that should be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WhitelistedApplication\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]bwhitelistedapp;Name', - '=', parameters('installedApplication')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ebb67efd-3c46-49b0-adfe-5599eb944998\"},{\"properties\":{\"displayName\":\"Double - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDoubleEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that allow remote connections from - accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid110\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid110\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec49586f-4939-402d-a29e-6ff502b20592\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - Control Panel'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - Control Panel'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdministrativeTemplatesControlPanel\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdministrativeTemplatesControlPanel\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ec7ac234-2af5-4729-94d2-c557c071799d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1241 - User-Installed Software | Alerts For Unauthorized Installations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1241\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/eca4d7b2-65e2-4e04-95d4-c68606b063c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"eca4d7b2-65e2-4e04-95d4-c68606b063c3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1622 - Boundary Protection\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1622\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ecf56554-164d-499a-8d00-206b07c27bed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ecf56554-164d-499a-8d00-206b07c27bed\"},{\"properties\":{\"displayName\":\"Configure - Event Hub namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Hub\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed66d4f5-8220-45dc-ab4a-20d1749c74e6\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Key Vault to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Key - Vault\"},\"parameters\":{\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Key Vaults in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.KeyVault/vaults\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vaultName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.KeyVault/vaults/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('vaultName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"AuditEvent\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{\"policy\":{\"type\":\"string\",\"value\":\"[concat('Enabled - diagnostic settings for ', parameters('vaultName'))]\"}}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"vaultName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ed7c8c13-51e7-49d1-8a43-8490431a0da2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1217 - Least Functionality | Periodic Review\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1217\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edea4f20-b02c-4115-be75-86c080e5c0ed\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edea4f20-b02c-4115-be75-86c080e5c0ed\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Stream Analytics to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Location\",\"description\":\"The location the Event Hub resides in. Only - Stream Analytics in this location will be linked to this Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingjobs\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"Execution\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"Authoring\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"edf3780c-3d70-40fe-b17e-ab72013dafca\"},{\"properties\":{\"displayName\":\"Configure - Azure Machine Learning workspace to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Machine - Learning\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone id\",\"description\":\"A private DNS zone id to connect to the private - endpoint.\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"amlworkspace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"amlworkspace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee40564d-486e-4f68-a5ca-7a621edae0fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1189 - Configuration Change Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1189\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee45e02a-4140-416c-82c4-fecfea660b9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee45e02a-4140-416c-82c4-fecfea660b9d\"},{\"properties\":{\"displayName\":\"Azure - Cognitive Search services should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Search\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Search/searchServices\"},{\"field\":\"Microsoft.Search/searchServices/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee980b6d-0eca-4501-8d54-f6290fd512c3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Accounts'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Accounts' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"version\":\"1.*\",\"configurationParameter\":{\"AccountsGuestAccountStatus\":\"Accounts: - Guest account status;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"AccountsGuestAccountStatus\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Accounts: - Guest account status\",\"description\":\"Specifies whether the local Guest - account is disabled.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsAccounts\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Accounts: - Guest account status;ExpectedValue', '=', parameters('AccountsGuestAccountStatus')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ee984370-154a-4ee8-9726-19d900e56fc0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1089 - Security Awareness Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Awareness and Training control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1089\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef080e67-0d1a-4f76-a0c5-fb9b0358485e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef080e67-0d1a-4f76-a0c5-fb9b0358485e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1314 - Identifier Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1314\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef0c8530-efd9-45b8-b753-f03083d06295\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef0c8530-efd9-45b8-b753-f03083d06295\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1128 - Time Stamps\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1128\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef212163-3bc4-4e86-bcf8-705127086393\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef212163-3bc4-4e86-bcf8-705127086393\"},{\"properties\":{\"displayName\":\"Vulnerability - assessment should be enabled on your SQL servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},{\"field\":\"kind\",\"notContains\":\"analytics\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/vulnerabilityAssessments\",\"name\":\"default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled\",\"equals\":\"True\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9\"},{\"properties\":{\"displayName\":\"Configure - private endpoints to Azure SignalR Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"SignalR\"},\"parameters\":{\"privateEndpointSubnetId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - Endpoint Subnet ID\",\"description\":\"A subnet with private endpoint network - policies disabled.\",\"strongType\":\"Microsoft.Network/virtualNetworks/subnets\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.SignalRService/SignalR\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"},\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\",\"/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"name\":{\"value\":\"[field('name')]\"},\"serviceId\":{\"value\":\"[field('id')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"name\":{\"type\":\"string\"},\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[concat('pe-',substring(parameters('name'),0,min(length(parameters('name')),50)),'-',uniquestring(deployment().name))]\"},\"resources\":[{\"type\":\"Microsoft.Resources/deployments\",\"name\":\"[variables('privateEndpointName')]\",\"apiVersion\":\"2020-06-01\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serviceId\":{\"type\":\"string\"},\"privateEndpointSubnetId\":{\"type\":\"string\"},\"subnetLocation\":{\"type\":\"string\"}},\"variables\":{\"privateEndpointName\":\"[deployment().name]\"},\"resources\":[{\"name\":\"[variables('privateEndpointName')]\",\"type\":\"Microsoft.Network/privateEndpoints\",\"apiVersion\":\"2020-07-01\",\"location\":\"[parameters('subnetLocation')]\",\"tags\":{},\"properties\":{\"subnet\":{\"id\":\"[parameters('privateEndpointSubnetId')]\"},\"privateLinkServiceConnections\":[{\"name\":\"[variables('privateEndpointName')]\",\"properties\":{\"privateLinkServiceId\":\"[parameters('serviceId')]\",\"groupIds\":[\"signalr\"],\"requestMessage\":\"autoapprove\"}}],\"manualPrivateLinkServiceConnections\":[]}}]},\"parameters\":{\"serviceId\":{\"value\":\"[parameters('serviceId')]\"},\"privateEndpointSubnetId\":{\"value\":\"[parameters('privateEndpointSubnetId')]\"},\"subnetLocation\":{\"value\":\"[reference(first(take(split(parameters('privateEndpointSubnetId'),'/subnets'),1)),'2020-07-01','Full').location]\"}}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef45854f-b33f-49a3-8041-9057e915d88f\"},{\"properties\":{\"displayName\":\"API - Management services should use a virtual network\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"API - Management\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]},\"evaluatedSkuNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"API - Management SKU Names\",\"description\":\"List of API Management SKUs against - which this policy will be evaluated.\"},\"allowedValues\":[\"Developer\",\"Basic\",\"Standard\",\"Premium\",\"Consumption\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ApiManagement/service\"},{\"field\":\"Microsoft.ApiManagement/service/sku.name\",\"in\":\"[parameters('evaluatedSkuNames')]\"},{\"anyOf\":[{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"exists\":\"false\"},{\"field\":\"Microsoft.ApiManagement/service/virtualNetworkType\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b\"},{\"properties\":{\"displayName\":\"Deploy - Diagnostic Settings for Event Hub to Event Hub\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.\",\"metadata\":{\"version\":\"2.1.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"profileName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Profile - name\",\"description\":\"The diagnostic settings profile name\"}},\"eventHubRuleId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Authorization Rule Id\",\"description\":\"The Event Hub authorization - rule Id for Azure Diagnostics. The authorization rule needs to be at Event - Hub namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}\",\"strongType\":\"Microsoft.EventHub/Namespaces/AuthorizationRules\",\"assignPermissions\":true}},\"eventHubLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Event - Hub Destination Location\",\"description\":\"The location the Event Hub that - will get diagnostic data resides in. Only source Event Hubs in this location - will be linked to this destination Event Hub.\",\"strongType\":\"location\"}},\"metricsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - metrics\",\"description\":\"Whether to enable metrics stream to the Event - Hub - True or False\"},\"allowedValues\":[\"True\",\"False\"]},\"logsEnabled\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enable - logs\",\"description\":\"Whether to enable logs stream to the Event Hub - - True or False\"},\"allowedValues\":[\"True\",\"False\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces\"},{\"anyOf\":[{\"value\":\"[parameters('eventHubLocation')]\",\"equals\":\"\"},{\"field\":\"location\",\"equals\":\"[parameters('eventHubLocation')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"name\":\"[parameters('profileName')]\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"[parameters('logsEnabled')]\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/metrics.enabled\",\"equals\":\"[parameters('metricsEnabled')]\"}]},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"eventHubRuleId\":{\"type\":\"string\"},\"metricsEnabled\":{\"type\":\"string\"},\"logsEnabled\":{\"type\":\"string\"},\"profileName\":{\"type\":\"string\"}},\"variables\":{},\"resources\":[{\"type\":\"Microsoft.EventHub/namespaces/providers/diagnosticSettings\",\"apiVersion\":\"2017-05-01-preview\",\"name\":\"[concat(parameters('resourceName'), - '/', 'Microsoft.Insights/', parameters('profileName'))]\",\"location\":\"[parameters('location')]\",\"dependsOn\":[],\"properties\":{\"eventHubAuthorizationRuleId\":\"[parameters('eventHubRuleId')]\",\"metrics\":[{\"category\":\"AllMetrics\",\"enabled\":\"[parameters('metricsEnabled')]\",\"retentionPolicy\":{\"enabled\":false,\"days\":0}}],\"logs\":[{\"category\":\"ArchiveLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"OperationalLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"AutoScaleLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaCoordinatorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"KafkaUserErrorLogs\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"EventHubVNetConnectionEvent\",\"enabled\":\"[parameters('logsEnabled')]\"},{\"category\":\"CustomerManagedKeyUserLogs\",\"enabled\":\"[parameters('logsEnabled')]\"}]}}],\"outputs\":{}},\"parameters\":{\"location\":{\"value\":\"[field('location')]\"},\"resourceName\":{\"value\":\"[field('name')]\"},\"eventHubRuleId\":{\"value\":\"[parameters('eventHubRuleId')]\"},\"metricsEnabled\":{\"value\":\"[parameters('metricsEnabled')]\"},\"logsEnabled\":{\"value\":\"[parameters('logsEnabled')]\"},\"profileName\":{\"value\":\"[parameters('profileName')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1472 - Emergency Shutoff\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1472\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ef869332-921d-4c28-9402-3be73e6e50c8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ef869332-921d-4c28-9402-3be73e6e50c8\"},{\"properties\":{\"displayName\":\"The - Log Analytics agent should be installed on Virtual Machine Scale Sets\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachineScaleSets/extensions\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/type\",\"in\":[\"MicrosoftMonitoringAgent\",\"OmsAgentForLinux\"]},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState\",\"equals\":\"Succeeded\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId\",\"exists\":\"true\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efbde977-ba53-4479-b8e9-10b957924fbf\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1012 - Account Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1012\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"efd7b9ae-1db6-4eb6-b0fe-87e6565f9738\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1358 - Incident Response Testing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Incident Response control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1358\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/effbaeef-5bf4-400d-895e-ef8cbc0e64c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"effbaeef-5bf4-400d-895e-ef8cbc0e64c7\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Ensure that Register with Azure Active Directory is enabled on Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"App - Service\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/web.managedServiceIdentityId\",\"exists\":\"true\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0473e7a-a1ba-4e86-afb2-e829e11b01d8\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"ApplicationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Application names (supports wildcards)\",\"description\":\"A semicolon-separated - list of the names of the applications that should not be installed. e.g. 'Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code' or 'Microsoft SQL - Server 2014*' (to match any application starting with 'Microsoft SQL Server - 2014')\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"NotInstalledApplication\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[InstalledApplication]NotInstalledApplicationResource1;Name', - '=', parameters('ApplicationName')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"NotInstalledApplication\"},\"ApplicationName\":{\"value\":\"[parameters('ApplicationName')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"ApplicationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[InstalledApplication]NotInstalledApplicationResource1;Name\",\"value\":\"[parameters('ApplicationName')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0633351-c7b2-41ff-9981-508fc08553c2\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1531 - Third-Party Personnel Security\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1531\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0643e0c-eee5-4113-8684-c608d05c5236\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0643e0c-eee5-4113-8684-c608d05c5236\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Web App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"app*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b\"},{\"properties\":{\"displayName\":\"Configure - Service Bus namespaces to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Service - Bus\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS Zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"namespace\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"namespace-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f0fcf93c-c063-4071-9668-c47474bd3564\"},{\"properties\":{\"displayName\":\"Deploy - Workflow Automation for Azure Security Center alerts\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"automationName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automation - name\",\"description\":\"This is the automation name.\"}},\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the workflow - automation is created. If you enter a name for a resource group that doesn't - exist, it'll be created in the subscription.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the workflow automation are created.\",\"strongType\":\"location\"}},\"alertName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Alert - name contains\",\"description\":\"String included in the required alert name. - For a full reference list of Security Center's alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"logicAppResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - App\",\"description\":\"The Logic App that is triggered.\",\"strongType\":\"Microsoft.Logic/workflows\",\"assignPermissions\":true}},\"logicAppTrigger\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Logic - app trigger\",\"description\":\"The trigger connector of the logic app that - is triggered. Possible values: 'Manual (Incoming HTTP request)', 'When an - Azure Security Center Alert is created or triggered'.\"},\"allowedValues\":[\"Manual - (Incoming HTTP request)\",\"When an Azure Security Center Alert is created - or triggered\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"[parameters('automationName')]\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"in\":\"[union(parameters('alertSeverities'),if(equals(parameters('alertName'), - ''), array('3.'), array(parameters('alertName'))))]\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"in\":\"[union(array('Severity'),if(equals(parameters('alertName'), - ''), array('Version'), array('AlertDisplayName')))]\"},{\"count\":{\"value\":\"[parameters('alertSeverities')]\",\"name\":\"alertSeverity\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath\",\"equals\":\"Severity\"},{\"field\":\"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue\",\"equals\":\"[current('alertSeverity')]\"}]}},\"equals\":1}},\"equals\":\"[length(parameters('alertSeverities'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"automationName\":{\"type\":\"string\"},\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"alertName\":{\"type\":\"string\"},\"alertSeverities\":{\"type\":\"array\"},\"logicAppResourceId\":{\"type\":\"string\"},\"logicAppTrigger\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"severityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"triggerMap\":{\"Manual - (Incoming HTTP request)\":\"manual\",\"When an Azure Security Center Alert - is created or triggered\":\"When_an_Azure_Security_Center_Alert_is_created_or_triggered\"}},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"[parameters('automationName')]\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Workflow - Automation for Azure Security Center alerts via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":[{\"eventSource\":\"Alerts\",\"copy\":[{\"name\":\"ruleSets\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(parameters('alertName'), - ''), 'Version', 'AlertDisplayName')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(parameters('alertName'), - ''), '3.', parameters('alertName'))]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('severityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSets'), - variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]}],\"actions\":[{\"actionType\":\"LogicApp\",\"logicAppResourceId\":\"[parameters('logicAppResourceId')]\",\"uri\":\"[listCallbackUrl(concat(parameters('logicAppResourceId'), - '/triggers/', variables('triggerMap')[parameters('logicAppTrigger')]),'2016-06-01').value]\"}]}}]}}}]},\"parameters\":{\"automationName\":{\"value\":\"[parameters('automationName')]\"},\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"alertName\":{\"value\":\"[parameters('alertName')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"logicAppResourceId\":{\"value\":\"[parameters('logicAppResourceId')]\"},\"logicAppTrigger\":{\"value\":\"[parameters('logicAppTrigger')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1525828-9a90-4fcf-be48-268cdd02361e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1028 - Information Flow Enforcement\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1028\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f171df5c-921b-41e9-b12b-50801c315475\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f171df5c-921b-41e9-b12b-50801c315475\"},{\"properties\":{\"displayName\":\"Virtual - networks should use specified virtual network gateway\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Network\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"virtualNetworkGatewayId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Virtual - network gateway Id\",\"description\":\"Resource Id of the virtual network - gateway. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/virtualNetworks/subnets\",\"name\":\"GatewaySubnet\",\"existenceCondition\":{\"not\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id\",\"notContains\":\"[concat(parameters('virtualNetworkGatewayId'), - '/')]\"}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1776c76-f58c-4245-a8d0-2b207198dc8b\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Linux VMs that do not have the passwd file permissions - set to 0644\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid121\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"PasswordPolicy_msid121\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f19aa1c1-6b91-4c27-ae6a-970279f03db9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Administrative - Templates - MSS (Legacy)'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Administrative Templates - - MSS (Legacy)'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\",\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_AdminstrativeTemplatesMSSLegacy\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\"}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f1f4825d-58fb-4257-8016-8c00e3c9ed9d\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Settings - Account Policies'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Settings - Account Policies' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"version\":\"1.*\",\"configurationParameter\":{\"EnforcePasswordHistory\":\"Enforce - password history;ExpectedValue\",\"MaximumPasswordAge\":\"Maximum password - age;ExpectedValue\",\"MinimumPasswordAge\":\"Minimum password age;ExpectedValue\",\"MinimumPasswordLength\":\"Minimum - password length;ExpectedValue\",\"PasswordMustMeetComplexityRequirements\":\"Password - must meet complexity requirements;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"EnforcePasswordHistory\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Enforce - password history\",\"description\":\"Specifies limits on password reuse - - how many times a new password must be created for a user account before the - password can be repeated.\"}},\"MaximumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Maximum - password age\",\"description\":\"Specifies the maximum number of days that - may elapse before a user account password must be changed. The format of the - value is two integers separated by a comma, denoting an inclusive range.\"}},\"MinimumPasswordAge\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password age\",\"description\":\"Specifies the minimum number of days that - must elapse before a user account password can be changed.\"}},\"MinimumPasswordLength\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Minimum - password length\",\"description\":\"Specifies the minimum number of characters - that a user account password may contain.\"}},\"PasswordMustMeetComplexityRequirements\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Password - must meet complexity requirements\",\"description\":\"Specifies whether a - user account password must be complex. If required, a complex password must - not contain part of user's account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecuritySettingsAccountPolicies\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Enforce - password history;ExpectedValue', '=', parameters('EnforcePasswordHistory'), - ',', 'Maximum password age;ExpectedValue', '=', parameters('MaximumPasswordAge'), - ',', 'Minimum password age;ExpectedValue', '=', parameters('MinimumPasswordAge'), - ',', 'Minimum password length;ExpectedValue', '=', parameters('MinimumPasswordLength'), - ',', 'Password must meet complexity requirements;ExpectedValue', '=', parameters('PasswordMustMeetComplexityRequirements')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2143251-70de-4e81-87a8-36cee5a2f29d\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1701 - Information System Monitoring | Host-Based Devices\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1701\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f25bc08f-27cb-43b6-9a23-014d00700426\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f25bc08f-27cb-43b6-9a23-014d00700426\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1457 - Physical Access Control\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1457\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f2d9d3e6-8886-4305-865d-639163e5c305\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f2d9d3e6-8886-4305-865d-639163e5c305\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1309 - Identification And Authentication (Org. Users) | Acceptance - Of Piv Credentials\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1309\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f355d62b-39a8-4ba3-abf7-90f71cb3b000\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f355d62b-39a8-4ba3-abf7-90f71cb3b000\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1615 - System And Communications Protection Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1615\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f35e02aa-0a55-49f8-8811-8abfa7e6f2c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1255 - Contingency Plan | Continue Essential Missions / Business - Functions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1255\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3793f5e-937f-44f7-bfba-40647ef3efa0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3793f5e-937f-44f7-bfba-40647ef3efa0\"},{\"properties\":{\"displayName\":\"Disk - access resources should use private link\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to diskAccesses, data leakage - risks are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Compute\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Compute/diskAccesses\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections\",\"existenceCondition\":{\"field\":\"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status\",\"equals\":\"Approved\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f39f5f49-4abf-44de-8c70-0756997bfb51\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs if the Administrators group doesn't contain - all of the specified members\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain all of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AdministratorsGroupMembersToInclude\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b44e5d-1456-475f-9c67-c66c4618e85a\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not contain the specified certificates - in Trusted Root\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\\\LocalMachine\\\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsCertificateInTrustedRoot\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f3b9ad83-000d-4dc1-bff0-6d54533dd03f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1706 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1706\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f475ee0e-f560-4c9b-876b-04a77460a404\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f475ee0e-f560-4c9b-876b-04a77460a404\"},{\"properties\":{\"displayName\":\"Audit - Log Analytics workspace for VM - Report Mismatch\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Reports - VMs as non-compliant if they aren't logging to the Log Analytics workspace - specified in the policy/initiative assignment.\",\"metadata\":{\"version\":\"1.0.1\",\"category\":\"Monitoring\"},\"parameters\":{\"logAnalyticsWorkspaceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics Workspace Id that VMs should be configured for\",\"description\":\"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for.\"}}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines/extensions\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.EnterpriseCloud.Monitoring\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId\",\"notEquals\":\"[parameters('logAnalyticsWorkspaceId')]\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f47b5582-33ec-4c5c-87c0-b010a6b2e917\"},{\"properties\":{\"displayName\":\"Authorization - rules on the Event Hub instance should be defined\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event Hub\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.EventHub/namespaces/eventhubs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.EventHub/namespaces/eventHubs/authorizationRules\"}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4826e5f-6a27-407c-ae3e-9582eb39891d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the password complexity - setting enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordMustMeetComplexityRequirements\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f48b2913-1dc5-4834-8c72-ccc1dfd819bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1495 - System Security Plan\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1495\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4978d0e-a596-48e7-9f8c-bbf52554ce8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4978d0e-a596-48e7-9f8c-bbf52554ce8d\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs that have not restarted within the - specified number of days\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.1.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NumberOfDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Number of days\",\"description\":\"The number of days without restart until - the machine is considered non-compliant\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"MachineLastBootUpTime\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('[MachineUpTime]MachineLastBootUpTime;NumberOfDays', - '=', parameters('NumberOfDays')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"MachineLastBootUpTime\"},\"NumberOfDays\":{\"value\":\"[parameters('NumberOfDays')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NumberOfDays\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"[MachineUpTime]MachineLastBootUpTime;NumberOfDays\",\"value\":\"[parameters('NumberOfDays')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b245d4-46c9-42be-9b1a-49e2b5b94194\"},{\"properties\":{\"displayName\":\"Disk - encryption should be enabled on Azure Data Explorer\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.\",\"metadata\":{\"version\":\"2.0.0\",\"category\":\"Azure - Data Explorer\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Kusto/Clusters\"},{\"anyOf\":[{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"exists\":false},{\"field\":\"Microsoft.Kusto/clusters/enableDiskEncryption\",\"equals\":false}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4b53539-8df9-40e4-86c6-6b607703bd4e\"},{\"properties\":{\"displayName\":\"Configure - SQL servers to have auditing enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"To - ensure the operations performed against your SQL assets are captured, SQL - servers should have auditing enabled. This is sometimes required for compliance - with regulatory standards.\",\"metadata\":{\"version\":\"1.2.0\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]},\"retentionDays\":{\"type\":\"String\",\"metadata\":{\"description\":\"The - value in days of the retention period (0 indicates unlimited retention)\",\"displayName\":\"Retention - days (optional, 180 days if unspecified)\"}},\"storageAccountsResourceGroup\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name for storage accounts\",\"description\":\"Auditing writes database - events to an audit log in your Azure Storage account (a storage account will - be created in each region where a SQL Server is created that will be shared - by all servers in that region). Important - for proper operation of Auditing - do not delete or rename the resource group or the storage accounts.\",\"strongType\":\"existingResourceGroups\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Sql/servers\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"name\":\"Default\",\"existenceCondition\":{\"field\":\"Microsoft.Sql/auditingSettings.state\",\"equals\":\"Enabled\"},\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3\",\"/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"serverName\":{\"type\":\"string\"},\"auditRetentionDays\":{\"type\":\"string\"},\"storageAccountsResourceGroup\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"variables\":{\"retentionDays\":\"[int(parameters('auditRetentionDays'))]\",\"subscriptionId\":\"[subscription().subscriptionId]\",\"uniqueStorage\":\"[uniqueString(variables('subscriptionId'), - parameters('location'), parameters('storageAccountsResourceGroup'))]\",\"locationCode\":\"[substring(parameters('location'), - 0, 3)]\",\"storageName\":\"[tolower(concat('sqlaudit', variables('locationCode'), - variables('uniqueStorage')))]\",\"createStorageAccountDeploymentName\":\"[concat('sqlServerAuditingStorageAccount-', - uniqueString(variables('locationCode'), parameters('serverName')))]\"},\"resources\":[{\"apiVersion\":\"2017-05-10\",\"name\":\"[variables('createStorageAccountDeploymentName')]\",\"type\":\"Microsoft.Resources/deployments\",\"resourceGroup\":\"[parameters('storageAccountsResourceGroup')]\",\"properties\":{\"mode\":\"Incremental\",\"expressionEvaluationOptions\":{\"scope\":\"inner\"},\"parameters\":{\"location\":{\"value\":\"[parameters('location')]\"},\"storageName\":{\"value\":\"[variables('storageName')]\"}},\"template\":{\"$schema\":\"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"location\":{\"type\":\"string\"},\"storageName\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Storage/storageAccounts\",\"apiVersion\":\"2017-10-01\",\"name\":\"[parameters('storageName')]\",\"location\":\"[parameters('location')]\",\"sku\":{\"name\":\"Standard_LRS\"},\"kind\":\"BlobStorage\",\"tags\":{\"createdBy\":\"Azure - Policy - Configure SQL servers to have auditing enabled\"},\"properties\":{\"accessTier\":\"Hot\",\"supportsHttpsTrafficOnly\":true}}],\"outputs\":{\"storageAccountEndPoint\":{\"type\":\"string\",\"value\":\"[reference(parameters('storageName')).primaryEndpoints.blob]\"}}}}},{\"name\":\"[concat(parameters('serverName'), - '/Default')]\",\"type\":\"Microsoft.Sql/servers/auditingSettings\",\"apiVersion\":\"2017-03-01-preview\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/deployments/', - variables('createStorageAccountDeploymentName'))]\"],\"properties\":{\"state\":\"Enabled\",\"storageEndpoint\":\"[reference(variables('createStorageAccountDeploymentName')).outputs.storageAccountEndPoint.value]\",\"storageAccountAccessKey\":\"[listKeys(resourceId(parameters('storageAccountsResourceGroup'), - 'Microsoft.Storage/storageAccounts', variables('storageName')), '2017-06-01').keys[0].value]\",\"retentionDays\":\"[variables('retentionDays')]\",\"storageAccountSubscriptionId\":\"[subscription().subscriptionId]\",\"isStorageSecondaryKeyInUse\":false}}]},\"parameters\":{\"serverName\":{\"value\":\"[field('name')]\"},\"auditRetentionDays\":{\"value\":\"[parameters('retentionDays')]\"},\"storageAccountsResourceGroup\":{\"value\":\"[parameters('storageAccountsResourceGroup')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f4c68484-132f-41f9-9b6d-3e4b1cb55036\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1469 - Power Equipment And Cabling\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1469\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f509c5b6-0de0-4a4e-9b2e-cd9cbf3a58fd\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1618 - Security Function Isolation\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1618\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f52f89aa-4489-4ec4-950e-8c96a036baa9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f52f89aa-4489-4ec4-950e-8c96a036baa9\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'Security Options - - Network Access'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'Security Options - - Network Access'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths\",\"description\":\"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key.\"}},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths\",\"description\":\"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key.\"}},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Network access: Shares that can be accessed anonymously\",\"description\":\"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server.\"}}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsNetworkAccess\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Network - access: Remotely accessible registry paths;ExpectedValue', '=', parameters('NetworkAccessRemotelyAccessibleRegistryPaths'), - ',', 'Network access: Remotely accessible registry paths and sub-paths;ExpectedValue', - '=', parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'), - ',', 'Network access: Shares that can be accessed anonymously;ExpectedValue', - '=', parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SecurityOptionsNetworkAccess\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPaths\":{\"type\":\"string\"},\"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths\":{\"type\":\"string\"},\"NetworkAccessSharesThatCanBeAccessedAnonymously\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Network - access: Remotely accessible registry paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPaths')]\"},{\"name\":\"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue\",\"value\":\"[parameters('NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths')]\"},{\"name\":\"Network - access: Shares that can be accessed anonymously;ExpectedValue\",\"value\":\"[parameters('NetworkAccessSharesThatCanBeAccessedAnonymously')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56a3ab2-89d1-44de-ac0d-2ada5962e22a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1198 - Configuration Change Control | Security Representative\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1198\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f56be5c3-660b-4c61-9078-f67cf072c356\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f56be5c3-660b-4c61-9078-f67cf072c356\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1328 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1328\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5c66fdc-3d02-4034-9db5-ba57802609de\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5c66fdc-3d02-4034-9db5-ba57802609de\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1193 - Configuration Change Control | Automated Document / - Notification / Prohibition Of Changes\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1193\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f5fd629f-3075-4cae-ab53-bad65495a4ac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f5fd629f-3075-4cae-ab53-bad65495a4ac\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Web Application Firewall should be a set mode for Application Gateway and - Azure Front Door Service\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Network\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]},\"modeRequirement\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Mode Requirement\",\"description\":\"Mode required for all WAF policies\"},\"allowedValues\":[\"Prevention\",\"Detection\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/frontdoorwebapplicationfirewallpolicies\"},{\"field\":\"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies\"},{\"field\":\"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode\",\"notEquals\":\"[parameters('modeRequirement')]\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6b68e5a-7207-4638-a1fb-47d90404209e\"},{\"properties\":{\"displayName\":\"Internet-facing - virtual machines should be protected with network security groups\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Compute/virtualMachines\",\"Microsoft.ClassicCompute/virtualMachines\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"483f12ed-ae23-447e-a2de-a67a10db4353\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c\"},{\"properties\":{\"displayName\":\"Audit - Linux machines that have accounts without passwords\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords\",\"metadata\":{\"category\":\"Guest Configuration\",\"version\":\"1.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"PasswordPolicy_msid232\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"PasswordPolicy_msid232\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1214 - Least Functionality\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1214\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f714a4e2-b580-47b6-ae8c-f2812d3750f3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f714a4e2-b580-47b6-ae8c-f2812d3750f3\"},{\"properties\":{\"displayName\":\"Windows - machines should meet requirements for 'Security Options - Recovery console'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Windows - machines should have the specified Group Policy settings in the category 'Security - Options - Recovery console' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"2.0.0\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"version\":\"1.*\",\"configurationParameter\":{\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":\"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue\"}}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Include - Arc connected servers\",\"description\":\"By selecting this option, you agree - to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Recovery - console: Allow floppy copy and access to all drives and all folders\",\"description\":\"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables.\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsRecoveryconsole\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"},{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue', - '=', parameters('RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders')))]\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1591 - External Information System Services | Ident. Of Functions - / Ports / Protocols / Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1591\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f751cdb7-fbee-406b-969b-815d367cb9b3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f751cdb7-fbee-406b-969b-815d367cb9b3\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1330 - Authenticator Management | Password-Based Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1330\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f75cedb2-5def-4b31-973e-b69e8c7bd031\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f75cedb2-5def-4b31-973e-b69e8c7bd031\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1540 - Security Categorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1540\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f771f8cb-6642-45cc-9a15-8a41cd5c6977\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f771f8cb-6642-45cc-9a15-8a41cd5c6977\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1449 - Physical Access Authorizations\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1449\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f784d3b0-5f2b-49b7-b9f3-00ba8653ced5\"},{\"properties\":{\"displayName\":\"[Preview]: - Azure Data Factory linked services should use system-assigned managed identity - authentication when it is supported\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Using - system-assigned managed identity when communicating with data stores via linked - services avoids the use of less secured credentials such as passwords or connection - strings.\",\"metadata\":{\"version\":\"1.0.0-preview\",\"category\":\"Data - Factory\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DataFactory/factories/linkedservices\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/type\",\"in\":[\"AzureSqlDatabase\",\"AzureSqlMI\",\"AzureSqlDW\",\"AzureBlobFS\",\"AdlsGen2CosmosStructuredStream\",\"AzureDataLakeStore\",\"AzureDataLakeStoreCosmosStructuredStream\",\"AzureBlobStorage\",\"AzureDatabricks\"]},{\"anyOf\":[{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"User - ID=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString\",\"contains\":\"AccountKey=\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri\",\"exists\":\"true\"},{\"field\":\"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken\",\"exists\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f78ccdb4-7bf4-4106-8647-270491d2978a\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1506 - Personnel Security Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1506\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d2ff17-d604-4dd9-b607-9ecf63f28ad2\"},{\"properties\":{\"displayName\":\"Azure - Synapse workspaces should use customer-managed keys to encrypt data at rest\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Synapse\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Synapse/workspaces\"},{\"field\":\"Microsoft.Synapse/workspaces/encryption.cmk.key.name\",\"exists\":false}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f7d52b2d-e161-4dfa-a82b-55e564167385\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs that do not have the specified Windows - PowerShell execution policy\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"WindowsPowerShellExecutionPolicy\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8036bd0-c10b-4931-86bb-94a878add855\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1705 - Security Alerts, Advisories, And Directives\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1705\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f82e3639-fa2b-4e06-a786-932d8379b972\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f82e3639-fa2b-4e06-a786-932d8379b972\"},{\"properties\":{\"displayName\":\"External - accounts with owner permissions should be removed from your subscription\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8456c1c-aa66-4dfb-861a-25d127b775c9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1345 - Cryptographic Module Authentication\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1345\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f86aa129-7c07-4aa4-bbf5-792d93ffd9ea\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1065 - Remote Access | Privileged Commands / Access\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1065\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f87b8085-dca9-4cf1-8f7b-9822b997797c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f87b8085-dca9-4cf1-8f7b-9822b997797c\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to audit Windows VMs configurations in 'System Audit - Policies - System'\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: 'System Audit Policies - - System'. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.2.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"parameters\":{\"AuditOtherSystemEvents\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Audit Other System Events\",\"description\":\"Specifies whether audit events - are generated for Windows Firewall Service and Windows Firewall driver start - and stop events, failure events for these services and Windows Firewall Service - policy processing failures.\"},\"allowedValues\":[\"No Auditing\",\"Success\",\"Failure\",\"Success - and Failure\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SystemAuditPoliciesSystem\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash\",\"equals\":\"[base64(concat('Audit - Other System Events;ExpectedValue', '=', parameters('AuditOtherSystemEvents')))]\"},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"},\"type\":{\"value\":\"[field('type')]\"},\"configurationName\":{\"value\":\"AzureBaseline_SystemAuditPoliciesSystem\"},\"AuditOtherSystemEvents\":{\"value\":\"[parameters('AuditOtherSystemEvents')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"},\"type\":{\"type\":\"string\"},\"configurationName\":{\"type\":\"string\"},\"AuditOtherSystemEvents\":{\"type\":\"string\"}},\"resources\":[{\"condition\":\"[equals(toLower(parameters('type')), - toLower('microsoft.hybridcompute/machines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2018-11-20\",\"type\":\"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments\",\"name\":\"[concat(parameters('vmName'), - '/Microsoft.GuestConfiguration/', parameters('configurationName'))]\",\"location\":\"[parameters('location')]\",\"properties\":{\"guestConfiguration\":{\"name\":\"[parameters('configurationName')]\",\"version\":\"1.*\",\"configurationParameter\":[{\"name\":\"Audit - Other System Events;ExpectedValue\",\"value\":\"[parameters('AuditOtherSystemEvents')]\"}]}}},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"condition\":\"[equals(toLower(parameters('type')), - toLower('Microsoft.Compute/virtualMachines'))]\",\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforWindows')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforWindows\",\"typeHandlerVersion\":\"1.1\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}},\"dependsOn\":[\"[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]\"]}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8b0158d-4766-490f-bea0-259e52dba473\"},{\"properties\":{\"displayName\":\"Resource - logs in Service Bus should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Service - Bus\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.ServiceBus/namespaces\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8d36e2f-389b-4ee4-898d-21aeb69a0f45\"},{\"properties\":{\"displayName\":\"Azure - Event Grid domains should disable public network access\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disabling - public network access improves security by ensuring that the resource isn't - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Event - Grid\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.EventGrid/domains\"},{\"field\":\"Microsoft.EventGrid/domains/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f8f774be-6aee-492a-9e29-486ef81f3a68\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1203 - Access Restrictions For Change | Automated Access Enforcement - / Auditing\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1203\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9012d14-e3e6-4d7b-b926-9f37b5537066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9012d14-e3e6-4d7b-b926-9f37b5537066\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1697 - Information System Monitoring | Analyze Traffic / Covert - Exfiltration\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1697\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9873db2-18ad-46b3-a11a-1a1f8cbf0335\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9873db2-18ad-46b3-a11a-1a1f8cbf0335\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1478 - Fire Protection | Suppression Devices / Systems\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Physical and Environmental Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1478\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f997df46-cfbb-4cc8-aac8-3fecdaf6a183\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f997df46-cfbb-4cc8-aac8-3fecdaf6a183\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1535 - Personnel Sanctions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Personnel Security control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1535\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9a165d2-967d-4733-8399-1074270dae2e\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9a165d2-967d-4733-8399-1074270dae2e\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1108 - Content Of Audit Records | Additional Audit Information\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1108\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9ad559e-c12d-415e-9a78-e50fdd7da7ba\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9ad559e-c12d-415e-9a78-e50fdd7da7ba\"},{\"properties\":{\"displayName\":\"Resource - logs in Azure Stream Analytics should be enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised\",\"metadata\":{\"version\":\"4.0.1\",\"category\":\"Stream - Analytics\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]},\"requiredRetentionDays\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Required - retention (days)\",\"description\":\"The required resource logs retention - in days\"}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.StreamAnalytics/streamingJobs\"},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Insights/diagnosticSettings\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"equals\":\"0\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days\",\"greaterOrEquals\":\"[parameters('requiredRetentionDays')]\"}]},{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"}]},{\"allOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs.enabled\",\"equals\":\"true\"},{\"anyOf\":[{\"field\":\"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled\",\"notEquals\":\"true\"},{\"field\":\"Microsoft.Insights/diagnosticSettings/storageAccountId\",\"exists\":false}]}]}]}},\"greaterOrEquals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9be5368-9bf5-4b84-9e0a-7850da98bb46\"},{\"properties\":{\"displayName\":\"Latest - TLS version should be used in your Function App\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - to the latest TLS version\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"App - Service\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Web/sites\"},{\"field\":\"kind\",\"like\":\"functionapp*\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Web/sites/config\",\"name\":\"web\",\"existenceCondition\":{\"field\":\"Microsoft.Web/sites/config/minTlsVersion\",\"equals\":\"1.2\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"f9d614c5-c173-4d56-95a7-b4437057d193\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1280 - Telecommunications Services | Priority Of Service Provisions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Contingency Planning control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1280\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa108498-b3a8-4ffb-9e79-1107e76afad3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa108498-b3a8-4ffb-9e79-1107e76afad3\"},{\"properties\":{\"displayName\":\"Saved-queries - in Azure Monitor should be saved in customer storage account for logs encryption\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"audit\",\"deny\",\"disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.OperationalInsights/workspaces\"},{\"not\":{\"field\":\"Microsoft.OperationalInsights/workspaces/forceCmkForQuery\",\"equals\":\"true\"}}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa298e57-9444-42ba-bf04-86e8470e32c7\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1037 - Least Privilege | Network Access To Privileged Commands\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1037\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa4c2a3d-1294-41a3-9ada-0e540471e9fb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa4c2a3d-1294-41a3-9ada-0e540471e9fb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1435 - Media Transport\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Media Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1435\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fa8d221b-d130-4637-ba16-501e666628bb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fa8d221b-d130-4637-ba16-501e666628bb\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1675 - Flaw Remediation | Time To Remediate Flaws / Benchmarks - For Corrective Actions\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1675\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/facb66e0-1c48-478a-bed5-747a312323e1\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"facb66e0-1c48-478a-bed5-747a312323e1\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Audit Linux virtual machines on which the Linux Guest Configuration extension - is not enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Deprecated]: - Effect\",\"description\":\"Enable or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"faf25c8c-9598-4305-b4de-0aee1317fb31\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Deploy prerequisites to enable Guest Configuration Policy on Linux VMs.\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"deprecated\":true},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"name\":\"AzurePolicyforLinux\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/extensions/publisher\",\"equals\":\"Microsoft.GuestConfiguration\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/type\",\"equals\":\"ConfigurationforLinux\"},{\"field\":\"Microsoft.Compute/virtualMachines/extensions/provisioningState\",\"equals\":\"Succeeded\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"vmName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"vmName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"apiVersion\":\"2019-07-01\",\"type\":\"Microsoft.Compute/virtualMachines\",\"identity\":{\"type\":\"SystemAssigned\"},\"name\":\"[parameters('vmName')]\",\"location\":\"[parameters('location')]\"},{\"apiVersion\":\"2019-07-01\",\"name\":\"[concat(parameters('vmName'), - '/AzurePolicyforLinux')]\",\"type\":\"Microsoft.Compute/virtualMachines/extensions\",\"location\":\"[parameters('location')]\",\"properties\":{\"publisher\":\"Microsoft.GuestConfiguration\",\"type\":\"ConfigurationforLinux\",\"typeHandlerVersion\":\"1.0\",\"autoUpgradeMinorVersion\":true,\"settings\":{},\"protectedSettings\":{}}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1086 - Publicly Accessible Content\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1086\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb321e6f-16a0-4be3-878f-500956e309c5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb321e6f-16a0-4be3-878f-500956e309c5\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1222 - Information System Component Inventory\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Configuration Management control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1222\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb39e62f-6bda-4558-8088-ec03d5670914\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb39e62f-6bda-4558-8088-ec03d5670914\"},{\"properties\":{\"displayName\":\"Kubernetes - Services should be upgraded to a non-vulnerable Kubernetes version\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.ContainerService/managedClusters\"},{\"anyOf\":[{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.13.4\",\"1.13.3\",\"1.13.2\",\"1.13.1\",\"1.13.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.12.6\",\"1.12.5\",\"1.12.4\",\"1.12.3\",\"1.12.2\",\"1.12.1\",\"1.12.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"in\":[\"1.11.8\",\"1.11.7\",\"1.11.6\",\"1.11.5\",\"1.11.4\",\"1.11.3\",\"1.11.2\",\"1.11.1\",\"1.11.0\"]},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.10.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.9.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.8.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.7.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.6.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.5.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.4.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.3.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.2.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.1.*\"},{\"field\":\"Microsoft.ContainerService/managedClusters/kubernetesVersion\",\"Like\":\"1.0.*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fb893a29-21bb-418c-a157-e99480ec364c\"},{\"properties\":{\"displayName\":\"Storage - account containing the container with activity logs must be encrypted with - BYOK\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - \",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Monitoring\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Insights/logProfiles\"},{\"field\":\"Microsoft.Insights/logProfiles/storageAccountId\",\"exists\":\"true\"}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Storage/storageAccounts\",\"existenceScope\":\"subscription\",\"existenceCondition\":{\"allOf\":[{\"value\":\"[contains(field('Microsoft.Insights/logProfiles/storageAccountId'), - subscription().Id)]\",\"equals\":\"true\"},{\"field\":\"name\",\"equals\":\"[last(split(field('Microsoft.Insights/logProfiles/storageAccountId'),'/'))]\"},{\"field\":\"Microsoft.Storage/storageAccounts/encryption.keySource\",\"equals\":\"Microsoft.Keyvault\"}]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2\"},{\"properties\":{\"displayName\":\"Configure - Azure Cognitive Search services to use private DNS zones\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.\",\"metadata\":{\"category\":\"Search\",\"version\":\"1.0.0\"},\"parameters\":{\"privateDnsZoneId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Private - DNS zone ID\",\"description\":\"Specifies the private DNS zone to use to configure - private endpoint\",\"strongType\":\"Microsoft.Network/privateDnsZones\"}},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/privateEndpoints\"},{\"count\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"where\":{\"field\":\"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]\",\"equals\":\"searchService\"}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"roleDefinitionIds\":[\"/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7\"],\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"privateDnsZoneId\":{\"type\":\"string\"},\"privateEndpointName\":{\"type\":\"string\"},\"location\":{\"type\":\"string\"}},\"resources\":[{\"name\":\"[concat(parameters('privateEndpointName'), - '/deployedByPolicy')]\",\"type\":\"Microsoft.Network/privateEndpoints/privateDnsZoneGroups\",\"apiVersion\":\"2020-03-01\",\"location\":\"[parameters('location')]\",\"properties\":{\"privateDnsZoneConfigs\":[{\"name\":\"searchService-privateDnsZone\",\"properties\":{\"privateDnsZoneId\":\"[parameters('privateDnsZoneId')]\"}}]}}]},\"parameters\":{\"privateDnsZoneId\":{\"value\":\"[parameters('privateDnsZoneId')]\"},\"privateEndpointName\":{\"value\":\"[field('name')]\"},\"location\":{\"value\":\"[field('location')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fbc14a67-53e4-4932-abcc-2049c6706009\"},{\"properties\":{\"displayName\":\"Virtual - machines and virtual machine scale sets should have encryption at host enabled\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.\",\"metadata\":{\"category\":\"Compute\",\"version\":\"1.0.0\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"field\":\"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachineScaleSets\"},{\"field\":\"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost\",\"notEquals\":\"true\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc4d8e41-e223-45ea-9bf5-eada37891d87\"},{\"properties\":{\"displayName\":\"[Preview]: - All Internet traffic should be routed via your deployed Azure Firewall\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Azure - Security Center has identified that some of your subnets aren't protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall\",\"metadata\":{\"version\":\"3.0.0-preview\",\"category\":\"Network\",\"preview\":true},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable All Internet traffic should be - routed via your deployed Azure Firewall\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/virtualNetworks\"},{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*]\",\"where\":{\"allOf\":[{\"count\":{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]\",\"where\":{\"value\":\"[empty(field('Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id'))]\",\"equals\":false}},\"greaterOrEquals\":2},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].routeTable\",\"exists\":false},{\"not\":{\"anyOf\":[{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"AzureBastionSubnet\"},{\"field\":\"Microsoft.Network/virtualNetworks/subnets[*].name\",\"equals\":\"GatewaySubnet\"}]}}]}},\"greater\":0}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Network/azureFirewalls\",\"existenceCondition\":{\"count\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id\",\"like\":\"[concat('/subscriptions/', - subscription().subscriptionId, '/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/', - first(split(field('fullName'), '/')), '/subnets/AzureFirewallSubnet')]\"}},\"equals\":1}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc5e4038-4584-4632-8c85-c0448d374b2c\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1075 - Access Control For Mobile Devices | Full Device / Container-Based - \ Encryption\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Access Control control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1075\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc933d22-04df-48ed-8f87-22a3773d4309\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc933d22-04df-48ed-8f87-22a3773d4309\"},{\"properties\":{\"displayName\":\"[Preview]: - Linux machines should meet requirements for the Azure security baseline\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline\",\"metadata\":{\"category\":\"Guest - Configuration\",\"version\":\"1.1.0-preview\",\"preview\":true,\"requiredProviders\":[\"Microsoft.GuestConfiguration\"],\"guestConfiguration\":{\"name\":\"AzureLinuxBaseline\",\"version\":\"1.*\"}},\"parameters\":{\"IncludeArcMachines\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Include Arc connected servers\",\"description\":\"By selecting this option, - you agree to be charged monthly per Arc connected machine.\"},\"allowedValues\":[\"true\",\"false\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"[Preview]: - Effect\",\"description\":\"Enable or disable the execution of this policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"value\":\"[parameters('IncludeArcMachines')]\",\"equals\":\"true\"},{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureLinuxBaseline\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fc9b3da7-8347-4380-8e70-0a0361d8dedd\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Windows VMs configurations in 'Security Options - - Microsoft Network Client'\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: 'Security Options - Microsoft Network Client'. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol\",\"metadata\":{\"version\":\"1.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"exists\":\"false\"},{\"allOf\":[{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"windows*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"AzureBaseline_SecurityOptionsMicrosoftNetworkClient\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fcbc55c9-f25a-4e55-a6cb-33acb3be778b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1318 - Authenticator Management\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1318\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fced5fda-3bdb-4d73-bfea-0e2c80428b66\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fced5fda-3bdb-4d73-bfea-0e2c80428b66\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1543 - Risk Assessment\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Risk Assessment control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1543\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd00b778-b5b5-49c0-a994-734ea7bd3624\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd00b778-b5b5-49c0-a994-734ea7bd3624\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1707 - Security Alerts, Advisories, And Directives | Automated - Alerts And Advisories\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Information Integrity control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1707\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4a2ac8-868a-4702-a345-6c896c3361ce\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4a2ac8-868a-4702-a345-6c896c3361ce\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1299 - Identification And Authentication Policy And Procedures\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Identification and Authentication control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1299\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd4e54f7-9ab0-4bae-b6cc-457809948a89\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd4e54f7-9ab0-4bae-b6cc-457809948a89\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1627 - Boundary Protection | External Telecommunications Services\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Communications Protection control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1627\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd73310d-76fc-422d-bda4-3a077149f179\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd73310d-76fc-422d-bda4-3a077149f179\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1130 - Time Stamps | Synchronization With Authoritative Time - Source\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Audit and Accountability control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1130\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fd7c4c1d-51ee-4349-9dab-89a7f8c8d102\"},{\"properties\":{\"displayName\":\"Public - network access should be disabled for MariaDB servers\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.\",\"metadata\":{\"version\":\"1.0.2\",\"category\":\"SQL\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"Audit\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.DBforMariaDB/servers\"},{\"field\":\"Microsoft.DBforMariaDB/servers/publicNetworkAccess\",\"notEquals\":\"Disabled\"}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdccbe47-f3e3-4213-ad5d-ea459b2fa077\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1611 - Developer-Provided Training\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1611\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fdda8a0c-ac32-43f6-b2f4-7dc1df03f43f\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1405 - Maintenance Tools | Inspect Tools\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1405\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe1a0bf3-409a-4b00-b60d-0b1f917f7e7b\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1613 - Developer Security Architecture And Design\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this System and Services Acquisition control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1613\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe2ad78b-8748-4bff-a924-f74dfca93f30\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe2ad78b-8748-4bff-a924-f74dfca93f30\"},{\"properties\":{\"displayName\":\"Cognitive - Services accounts should use a managed identity\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Cognitive - Services\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"The - effect determines what happens when the policy rule is evaluated to match\"},\"allowedValues\":[\"Audit\",\"Deny\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.CognitiveServices/accounts\"},{\"anyOf\":[{\"field\":\"identity.type\",\"exists\":\"false\"},{\"field\":\"identity.type\",\"equals\":\"None\"}]}]},\"then\":{\"effect\":\"[parameters('effect')]\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fe3fd216-4f83-4fc1-8984-2bbec80a3418\"},{\"properties\":{\"displayName\":\"[Deprecated]: - Show audit results from Linux VMs that do not have the specified applications - installed\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol\",\"metadata\":{\"version\":\"3.0.0-deprecated\",\"category\":\"Guest - Configuration\",\"deprecated\":true},\"policyRule\":{\"if\":{\"anyOf\":[{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Oracle\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Oracle-Linux\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-centos-8-l1\",\"cis-debian-linux-8-l1\",\"cis-debian-linux-9-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-oracle-linux-8-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-rhel-8-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"Debian\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"7*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"exists\":\"false\"},{\"field\":\"Microsoft.Compute/imagePublisher\",\"notIn\":[\"OpenLogic\",\"RedHat\",\"credativ\",\"Suse\",\"Canonical\",\"microsoft-dsvm\",\"cloudera\",\"microsoft-ads\",\"center-for-internet-security-inc\",\"Oracle\"]}]}]}]}]},{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.HybridCompute/machines\"},{\"field\":\"Microsoft.HybridCompute/imageOffer\",\"like\":\"linux*\"}]}]},\"then\":{\"effect\":\"auditIfNotExists\",\"details\":{\"type\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments\",\"name\":\"installed_application_linux\",\"existenceCondition\":{\"field\":\"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus\",\"equals\":\"Compliant\"}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fee5cb2b-9d9b-410e-afe3-2902d90d0004\"},{\"properties\":{\"displayName\":\"Vulnerabilities - on your SQL databases should be remediated\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of the policy\"},\"allowedValues\":[\"AuditIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"field\":\"type\",\"in\":[\"Microsoft.Sql/servers\",\"Microsoft.Sql/managedinstances\"]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"type\":\"Microsoft.Security/assessments\",\"name\":\"82e20e14-edc5-4373-bfc4-f13121257c37\",\"existenceCondition\":{\"field\":\"Microsoft.Security/assessments/status.code\",\"in\":[\"NotApplicable\",\"Healthy\"]}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"feedbf84-6b99-488c-acc2-71c829aa5ffc\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1407 - Maintenance Tools | Prevent Unauthorized Removal\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Maintenance control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1407\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ff9fbd83-1d8d-4b41-aac2-94cb44b33976\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ff9fbd83-1d8d-4b41-aac2-94cb44b33976\"},{\"properties\":{\"displayName\":\"Deploy - export to Log Analytics workspace for Azure Security Center data\",\"policyType\":\"BuiltIn\",\"mode\":\"All\",\"description\":\"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.\",\"metadata\":{\"version\":\"3.0.0\",\"category\":\"Security - Center\"},\"parameters\":{\"resourceGroupName\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group name\",\"description\":\"The resource group name where the export to - Log Analytics workspace configuration is created. If you enter a name for - a resource group that doesn't exist, it'll be created in the subscription. - Note that each resource group can only have one export to Log Analytics workspace - configured.\"}},\"resourceGroupLocation\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Resource - group location\",\"description\":\"The location where the resource group and - the export to Log Analytics workspace configuration are created.\",\"strongType\":\"location\"}},\"exportedDataTypes\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Exported - data types\",\"description\":\"The data types to be exported. To export a - snapshot (preview) of the data once a week, choose the data types which contains - 'snapshot', other data types will be sent in real-time streaming.\"},\"allowedValues\":[\"Security - recommendations\",\"Security alerts\",\"Overall secure score\",\"Secure score - controls\",\"Regulatory compliance\",\"Overall secure score - snapshot\",\"Secure - score controls - snapshot\",\"Regulatory compliance - snapshot\"]},\"recommendationNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - IDs\",\"description\":\"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons (';'). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments.\"}},\"recommendationSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Recommendation - severities\",\"description\":\"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"isSecurityFindingsEnabled\":{\"type\":\"Boolean\",\"metadata\":{\"displayName\":\"Include - security findings\",\"description\":\"Security findings are results from vulnerability - assessment solutions, and can be thought of as 'sub' recommendations grouped - into a 'parent' recommendation.\"},\"allowedValues\":[true,false]},\"secureScoreControlsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Secure - Score Controls IDs\",\"description\":\"Applicable only for export of secure - score controls. To export all secure score controls, leave this empty. To - export specific secure score controls, enter a list of secure score controls - IDs separated by semicolons (';'). Secure score controls IDs are available - through the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols.\"}},\"alertSeverities\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Alert - severities\",\"description\":\"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;\"},\"allowedValues\":[\"High\",\"Medium\",\"Low\"]},\"regulatoryComplianceStandardsNames\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Regulatory - compliance standards names\",\"description\":\"Applicable only for export - of regulatory compliance. To export all regulatory compliance, leave this - empty. To export specific regulatory compliance standards, enter a list of - these standards names separated by semicolons (';'). Regulatory compliance - standards names are available through the regulatory compliance standards - API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards.\"}},\"workspaceResourceId\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Log - Analytics workspace\",\"description\":\"The Log Analytics workspace of where - the data should be exported to.\",\"strongType\":\"Microsoft.OperationalInsights/workspaces\",\"assignPermissions\":true}}},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Resources/subscriptions\"},\"then\":{\"effect\":\"deployIfNotExists\",\"details\":{\"type\":\"Microsoft.Security/automations\",\"name\":\"ExportToWorkspace\",\"existenceScope\":\"resourcegroup\",\"ResourceGroupName\":\"[parameters('resourceGroupName')]\",\"deploymentScope\":\"subscription\",\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Security/automations/isEnabled\",\"equals\":true},{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\"},\"equals\":\"[if(parameters('isSecurityFindingsEnabled'),add(length(parameters('exportedDataTypes')),1),length(parameters('exportedDataTypes')))]\"},{\"count\":{\"value\":\"[parameters('exportedDataTypes')]\",\"name\":\"dataType\",\"where\":{\"count\":{\"field\":\"Microsoft.Security/automations/sources[*]\",\"where\":{\"anyOf\":[{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Assessments\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - recommendations\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"Alerts\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Security - alerts\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScores\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControls\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessment\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoresSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Overall - secure score - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"SecureScoreControlsSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Secure - score controls - snapshot\"}]},{\"allOf\":[{\"field\":\"Microsoft.Security/automations/sources[*].eventSource\",\"equals\":\"RegulatoryComplianceAssessmentSnapshot\"},{\"value\":\"[current('dataType')]\",\"equals\":\"Regulatory - compliance - snapshot\"}]}]}},\"equals\":1}},\"equals\":\"[length(parameters('exportedDataTypes'))]\"}]},\"deployment\":{\"location\":\"westeurope\",\"properties\":{\"mode\":\"incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"resourceGroupName\":{\"type\":\"string\"},\"resourceGroupLocation\":{\"type\":\"string\"},\"exportedDataTypes\":{\"type\":\"array\"},\"isSecurityFindingsEnabled\":{\"type\":\"bool\"},\"recommendationNames\":{\"type\":\"array\"},\"recommendationSeverities\":{\"type\":\"array\"},\"alertSeverities\":{\"type\":\"array\"},\"secureScoreControlsNames\":{\"type\":\"array\"},\"regulatoryComplianceStandardsNames\":{\"type\":\"array\"},\"workspaceResourceId\":{\"type\":\"string\"},\"guidValue\":{\"type\":\"string\",\"defaultValue\":\"[newGuid()]\"}},\"variables\":{\"scopeDescription\":\"scope - for subscription {0}\",\"subAssessmentRuleExpectedValue\":\"/assessments/{0}/\",\"recommendationNamesLength\":\"[length(parameters('recommendationNames'))]\",\"secureScoreControlsNamesLength\":\"[length(parameters('secureScoreControlsNames'))]\",\"secureScoreControlsLengthIfEmpty\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), 1, variables('secureScoreControlsNamesLength'))]\",\"regulatoryComplianceStandardsNamesLength\":\"[length(parameters('regulatoryComplianceStandardsNames'))]\",\"regulatoryComplianceStandardsNamesLengthIfEmpty\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), 1, variables('regulatoryComplianceStandardsNamesLength'))]\",\"recommendationSeveritiesLength\":\"[length(parameters('recommendationSeverities'))]\",\"alertSeveritiesLength\":\"[length(parameters('alertSeverities'))]\",\"recommendationNamesLengthIfEmpty\":\"[if(equals(variables('recommendationNamesLength'), - 0), 1, variables('recommendationNamesLength'))]\",\"recommendationSeveritiesLengthIfEmpty\":\"[if(equals(variables('recommendationSeveritiesLength'), - 0), 1, variables('recommendationSeveritiesLength'))]\",\"alertSeveritiesLengthIfEmpty\":\"[if(equals(variables('alertSeveritiesLength'), - 0), 1, variables('alertSeveritiesLength'))]\",\"totalRuleCombinationsForOneRecommendationName\":\"[variables('recommendationSeveritiesLengthIfEmpty')]\",\"totalRuleCombinationsForOneRecommendationSeverity\":1,\"exportedDataTypesLength\":\"[length(parameters('exportedDataTypes'))]\",\"exportedDataTypesLengthIfEmpty\":\"[if(equals(variables('exportedDataTypesLength'), - 0), 1, variables('exportedDataTypesLength'))]\",\"dataTypeMap\":{\"Security - recommendations\":\"Assessments\",\"Security alerts\":\"Alerts\",\"Overall - secure score\":\"SecureScores\",\"Secure score controls\":\"SecureScoreControls\",\"Regulatory - compliance\":\"RegulatoryComplianceAssessment\",\"Overall secure score - snapshot\":\"SecureScoresSnapshot\",\"Secure - score controls - snapshot\":\"SecureScoreControlsSnapshot\",\"Regulatory compliance - - snapshot\":\"RegulatoryComplianceAssessmentSnapshot\"},\"alertSeverityMap\":{\"High\":\"high\",\"Medium\":\"medium\",\"Low\":\"low\"},\"ruleSetsForAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForAssessmentsArr\",\"count\":\"[mul(variables('recommendationNamesLengthIfEmpty'),variables('recommendationSeveritiesLengthIfEmpty'))]\",\"input\":{\"rules\":[{\"propertyJPath\":\"[if(equals(variables('recommendationNamesLength'),0),'type','name')]\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'),0),'Microsoft.Security/assessments',parameters('recommendationNames')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationName')),variables('recommendationNamesLength'))])]\",\"operator\":\"Contains\"},{\"propertyJPath\":\"properties.metadata.severity\",\"propertyType\":\"string\",\"expectedValue\":\"[parameters('recommendationSeverities')[mod(div(copyIndex('ruleSetsForAssessmentsArr'),variables('totalRuleCombinationsForOneRecommendationSeverity')),variables('recommendationSeveritiesLength'))]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSubAssessmentsObj\":{\"copy\":[{\"name\":\"ruleSetsForSubAssessmentsArr\",\"count\":\"[variables('recommendationNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), replace(variables('subAssessmentRuleExpectedValue'),'{0}', - parameters('recommendationNames')[copyIndex('ruleSetsForSubAssessmentsArr')]))]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForAlertsObj\":{\"copy\":[{\"name\":\"ruleSetsForAlertsArr\",\"count\":\"[variables('alertSeveritiesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"Severity\",\"propertyType\":\"string\",\"expectedValue\":\"[variables('alertSeverityMap')[parameters('alertSeverities')[mod(copyIndex('ruleSetsForAlertsArr'),variables('alertSeveritiesLengthIfEmpty'))]]]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForSecureScoreControlsObj\":{\"copy\":[{\"name\":\"ruleSetsForSecureScoreControlsArr\",\"count\":\"[variables('secureScoreControlsLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"name\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), parameters('secureScoreControlsNames')[copyIndex('ruleSetsForSecureScoreControlsArr')])]\",\"operator\":\"Equals\"}]}}]},\"customRuleSetsForRegulatoryComplianceObj\":{\"copy\":[{\"name\":\"ruleSetsForRegulatoryCompliancArr\",\"count\":\"[variables('regulatoryComplianceStandardsNamesLengthIfEmpty')]\",\"input\":{\"rules\":[{\"propertyJPath\":\"id\",\"propertyType\":\"string\",\"expectedValue\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), parameters('regulatoryComplianceStandardsNames')[copyIndex('ruleSetsForRegulatoryCompliancArr')])]\",\"operator\":\"Contains\"}]}}]},\"ruleSetsForSecureScoreControlsObj\":\"[if(equals(variables('secureScoreControlsNamesLength'), - 0), json('null'), variables('customRuleSetsForSecureScoreControlsObj').ruleSetsForSecureScoreControlsArr)]\",\"ruleSetsForSecureRegulatoryComplianceObj\":\"[if(equals(variables('regulatoryComplianceStandardsNamesLength'), - 0), json('null'), variables('customRuleSetsForRegulatoryComplianceObj').ruleSetsForRegulatoryCompliancArr)]\",\"ruleSetsForSubAssessmentsObj\":\"[if(equals(variables('recommendationNamesLength'), - 0), json('null'), variables('customRuleSetsForSubAssessmentsObj').ruleSetsForSubAssessmentsArr)]\",\"subAssessmentSource\":[{\"eventSource\":\"SubAssessments\",\"ruleSets\":\"[variables('ruleSetsForSubAssessmentsObj')]\"}],\"ruleSetsMap\":{\"Security - recommendations\":\"[variables('ruleSetsForAssessmentsObj').ruleSetsForAssessmentsArr]\",\"Security - alerts\":\"[variables('ruleSetsForAlertsObj').ruleSetsForAlertsArr]\",\"Overall - secure score\":null,\"Secure score controls\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\",\"Overall - secure score - snapshot\":null,\"Secure score controls - snapshot\":\"[variables('ruleSetsForSecureScoreControlsObj')]\",\"Regulatory - compliance - snapshot\":\"[variables('ruleSetsForSecureRegulatoryComplianceObj')]\"},\"sourcesWithoutSubAssessments\":{\"copy\":[{\"name\":\"sources\",\"count\":\"[variables('exportedDataTypesLengthIfEmpty')]\",\"input\":{\"eventSource\":\"[variables('dataTypeMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\",\"ruleSets\":\"[variables('ruleSetsMap')[parameters('exportedDataTypes')[copyIndex('sources')]]]\"}}]},\"sourcesWithSubAssessments\":\"[concat(variables('subAssessmentSource'),variables('sourcesWithoutSubAssessments').sources)]\",\"sources\":\"[if(equals(parameters('isSecurityFindingsEnabled'),bool('true')),variables('sourcesWithSubAssessments'),variables('sourcesWithoutSubAssessments').sources)]\"},\"resources\":[{\"name\":\"[parameters('resourceGroupName')]\",\"type\":\"Microsoft.Resources/resourceGroups\",\"apiVersion\":\"2019-10-01\",\"location\":\"[parameters('resourceGroupLocation')]\",\"tags\":{},\"properties\":{}},{\"type\":\"Microsoft.Resources/deployments\",\"apiVersion\":\"2019-10-01\",\"name\":\"[concat('nestedAutomationDeployment', - '_', parameters('guidValue'))]\",\"resourceGroup\":\"[parameters('resourceGroupName')]\",\"dependsOn\":[\"[resourceId('Microsoft.Resources/resourceGroups/', - parameters('resourceGroupName'))]\"],\"properties\":{\"mode\":\"Incremental\",\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{},\"variables\":{},\"resources\":[{\"tags\":{},\"apiVersion\":\"2019-01-01-preview\",\"location\":\"[parameters('resourceGroupLocation')]\",\"name\":\"ExportToWorkspace\",\"type\":\"Microsoft.Security/automations\",\"dependsOn\":[],\"properties\":{\"description\":\"Export - Azure Security Center data to Log Analytics workspace via policy\",\"isEnabled\":true,\"scopes\":[{\"description\":\"[replace(variables('scopeDescription'),'{0}', - subscription().subscriptionId)]\",\"scopePath\":\"[subscription().id]\"}],\"sources\":\"[variables('sources')]\",\"actions\":[{\"actionType\":\"Workspace\",\"workspaceResourceId\":\"[parameters('workspaceResourceId')]\"}]}}]}}}]},\"parameters\":{\"resourceGroupName\":{\"value\":\"[parameters('resourceGroupName')]\"},\"resourceGroupLocation\":{\"value\":\"[parameters('resourceGroupLocation')]\"},\"exportedDataTypes\":{\"value\":\"[parameters('exportedDataTypes')]\"},\"isSecurityFindingsEnabled\":{\"value\":\"[parameters('isSecurityFindingsEnabled')]\"},\"recommendationNames\":{\"value\":\"[parameters('recommendationNames')]\"},\"secureScoreControlsNames\":{\"value\":\"[parameters('secureScoreControlsNames')]\"},\"recommendationSeverities\":{\"value\":\"[parameters('recommendationSeverities')]\"},\"alertSeverities\":{\"value\":\"[parameters('alertSeverities')]\"},\"regulatoryComplianceStandardsNames\":{\"value\":\"[parameters('regulatoryComplianceStandardsNames')]\"},\"workspaceResourceId\":{\"value\":\"[parameters('workspaceResourceId')]\"}}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"ffb6f416-7bd2-4488-8828-56585fef2be9\"},{\"properties\":{\"displayName\":\"Microsoft - Managed Control 1158 - Security Authorization\",\"policyType\":\"Static\",\"mode\":\"Indexed\",\"description\":\"Microsoft - implements this Security Assessment and Authorization control\",\"metadata\":{\"version\":\"1.0.0\",\"category\":\"Regulatory - Compliance\",\"additionalMetadataId\":\"/providers/Microsoft.PolicyInsights/policyMetadata/ACF1158\"},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"in\":[\"Microsoft.Resources/subscriptions\",\"Microsoft.Resources/subscriptions/resourceGroups\"]},{\"value\":\"false\",\"equals\":\"true\"}]},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/fff50cf2-28eb-45b4-b378-c99412688907\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"fff50cf2-28eb-45b4-b378-c99412688907\"},{\"properties\":{\"displayName\":\"zhoxing-test\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T09:41:45.9065425Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04a22d7e-273d-45f2-8a10-02070dbcefca\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"04a22d7e-273d-45f2-8a10-02070dbcefca\"},{\"properties\":{\"displayName\":\"Audit - virtual machines without disaster recovery configured\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"test\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:21:49.7174918Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c510c21-8404-40b2-a351-73e881e707dc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"1c510c21-8404-40b2-a351-73e881e707dc\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:27:12.8058713Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2252\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2252\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:23:21.8111815Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2591\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"2591\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:26:50.197239Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3580\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3580\"},{\"properties\":{\"displayName\":\"CanCrudPolicyDefinition - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:22:08.493423Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3738\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"3738\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:26.9683736Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7204\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7204\"},{\"properties\":{\"displayName\":\"ValidatePolicySetDefinitionErrorHandling - Policy Definition $[Auto Test]\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"1aa92e15-ee4e-4dda-9e61-5b4dc35d280b\",\"createdOn\":\"2020-05-20T05:28:03.7222043Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"source\":\"action\",\"equals\":\"ResourceProviderTestHost/TestResourceType/TestResourceTypeNestedOne/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7771\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"7771\"},{\"properties\":{\"displayName\":\"zhoxing_test_new_policy_test_length_exceed_name\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"\u6D4B\u8BD5\u4E00\u4E0B\u540D\u5B57\u8D85\u957F\u7684\u7B56\u7565\u54E6\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-25T03:14:59.2983062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of allowed locations for resources.\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8720f898-d316-4608-b43d-203ce23c2a8d\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"8720f898-d316-4608-b43d-203ce23c2a8d\"},{\"properties\":{\"displayName\":\"test_policyzkglcmhug\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-15T16:22:21.5862872Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy2noobkz62\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy2noobkz62\"},{\"properties\":{\"displayName\":\"test_policy6iqdav32l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:20:01.1577308Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy4zz266ek6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy4zz266ek6\"},{\"properties\":{\"displayName\":\"test_policybsix632z6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T03:24:37.437303Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy57hfk7oid\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy57hfk7oid\"},{\"properties\":{\"displayName\":\"test_policyy7ioozyyj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:23.9954862Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5erexjjq4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5erexjjq4\"},{\"properties\":{\"displayName\":\"test_policy3ulbefgq5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy5rxcsbgyu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy5rxcsbgyu\"},{\"properties\":{\"displayName\":\"test_policy66vwzao4g\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:12:26.4310804Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy63bzujayf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy63bzujayf\"},{\"properties\":{\"displayName\":\"test_policyvrud2j572\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6rmvrx2ug\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6rmvrx2ug\"},{\"properties\":{\"displayName\":\"test_policyqr33lcjpy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:02:21.3055647Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy6vduv5kcq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy6vduv5kcq\"},{\"properties\":{\"displayName\":\"test_policyeezgnn3tf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy72fpbk6om\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy72fpbk6om\"},{\"properties\":{\"displayName\":\"test_policylzld56g3c\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy75lhjp2qz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy75lhjp2qz\"},{\"properties\":{\"displayName\":\"test_policyoe7miqz26\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:47:49.5570894Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:47:50.4353792Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy767hseibh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy767hseibh\"},{\"properties\":{\"displayName\":\"test_policyac3dg2mjn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:20:41.768722Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7nfzu5aac\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7nfzu5aac\"},{\"properties\":{\"displayName\":\"test_policyf5jlokaxi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T03:07:58.9010046Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy7o4ad6aix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policy7o4ad6aix\"},{\"properties\":{\"displayName\":\"test_policy4leaozaze\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyafjaspbln\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyafjaspbln\"},{\"properties\":{\"displayName\":\"test_policytz5xijuco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyaip6dvuui\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyaip6dvuui\"},{\"properties\":{\"displayName\":\"test_policy7f4jaqite\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:12:15.3049726Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyakuce4o7r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyakuce4o7r\"},{\"properties\":{\"displayName\":\"test_policyk2ipvteje\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policycc24wg2ai\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policycc24wg2ai\"},{\"properties\":{\"displayName\":\"test_policy3fqevgg5o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T07:30:30.8196821Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyda63cvhit\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyda63cvhit\"},{\"properties\":{\"displayName\":\"test_policymjacbnsg7_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:04:25.7488473Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-10-27T10:04:27.1575214Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydmu7kh7xj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydmu7kh7xj\"},{\"properties\":{\"displayName\":\"test_policyusm7pczwi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-04T22:57:00.9569478Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policydntotaowa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policydntotaowa\"},{\"properties\":{\"displayName\":\"test_policytxax3vq3l\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:13:20.7569455Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeal5hjxel\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeal5hjxel\"},{\"properties\":{\"displayName\":\"test_policynek2j6dvx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyebyt2or2s\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyebyt2or2s\"},{\"properties\":{\"displayName\":\"test_policym2n2mkhuj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:36:14.7157952Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyeertdx3jy\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyeertdx3jy\"},{\"properties\":{\"displayName\":\"test_policyptdmg43m5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-11T01:19:22.5360453Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf3muninsw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf3muninsw\"},{\"properties\":{\"displayName\":\"test_policyo57mbgttt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4gvztvgz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4gvztvgz\"},{\"properties\":{\"displayName\":\"test_policycw5l4ec3o\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T09:53:22.3770924Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T09:53:23.5360696Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyf4ltzkbwi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyf4ltzkbwi\"},{\"properties\":{\"displayName\":\"test_policyry7ktdqpn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfneqctrjx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfneqctrjx\"},{\"properties\":{\"displayName\":\"test_policyhproaqyb2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T07:55:49.8973296Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfo7wr4vix\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfo7wr4vix\"},{\"properties\":{\"displayName\":\"test_policy4leengd3v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:12:58.1947822Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T11:12:59.1206342Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyfr4tbot23\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyfr4tbot23\"},{\"properties\":{\"displayName\":\"test_policyfufe2htyd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:17:08.3329915Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyftxdxfati\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyftxdxfati\"},{\"properties\":{\"displayName\":\"test_policypq5w4fcp5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhavmopeay\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhavmopeay\"},{\"properties\":{\"displayName\":\"test_policyzhxn622hb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhb6kmyq63\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhb6kmyq63\"},{\"properties\":{\"displayName\":\"test_policydharb4zp4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T02:05:42.6649124Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhbjxkxwks\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhbjxkxwks\"},{\"properties\":{\"displayName\":\"test_policykgwumxuqb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-13T06:17:21.0669019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyhkjjldsou\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyhkjjldsou\"},{\"properties\":{\"displayName\":\"test_policyzbi2xb6y7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyismcbfzwf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyismcbfzwf\"},{\"properties\":{\"displayName\":\"test_policyunbs5wtft\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-08T23:45:16.8769261Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyj2uyuq36z\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyj2uyuq36z\"},{\"properties\":{\"displayName\":\"test_policy2wlyo2jcx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T08:52:29.0384373Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T08:52:29.6504961Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjatom4uiu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjatom4uiu\"},{\"properties\":{\"displayName\":\"test_policyyulsilxiw\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyjp2hqpyxg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyjp2hqpyxg\"},{\"properties\":{\"displayName\":\"test_policy3b7x23vtu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:09:59.3205891Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyk7i5cvli7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyk7i5cvli7\"},{\"properties\":{\"displayName\":\"test_policykr5rg52qb\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-20T07:02:32.8430887Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyko7fuaryl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyko7fuaryl\"},{\"properties\":{\"displayName\":\"test_policyjkxzydsm5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T05:09:53.6571753Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T05:09:54.3894578Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyky6dtxljg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyky6dtxljg\"},{\"properties\":{\"displayName\":\"test_policy4atse2a5f\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-18T01:16:56.8049894Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl23wlrlgw\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl23wlrlgw\"},{\"properties\":{\"displayName\":\"test_policym7v6bzkep\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyl5e3igsku\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyl5e3igsku\"},{\"properties\":{\"displayName\":\"test_policyr5ivz4uoy\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policylw4dif6k4\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policylw4dif6k4\"},{\"properties\":{\"displayName\":\"test_policytbp7jr4ui\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:32:31.9256236Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyma7xpif5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyma7xpif5f\"},{\"properties\":{\"displayName\":\"test_policyrtqlhqwqd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:17:54.6200885Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:17:55.4591371Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymh2rzn2jb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymh2rzn2jb\"},{\"properties\":{\"displayName\":\"test_policyltbuxqxmj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:01:18.5679417Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymhawrsfdj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymhawrsfdj\"},{\"properties\":{\"displayName\":\"test_policytl4ywcz3z\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T11:59:59.5189007Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:00:00.440502Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policympgeea7oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policympgeea7oc\"},{\"properties\":{\"displayName\":\"test_policyjgu2d4mwc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-25T11:29:24.0188349Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymroawkgak\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymroawkgak\"},{\"properties\":{\"displayName\":\"test_policyp2yhkolhg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policymxx4vzibo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policymxx4vzibo\"},{\"properties\":{\"displayName\":\"test_policy7o4q6lhb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-08-24T14:26:08.158904Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyn6dnypap3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyn6dnypap3\"},{\"properties\":{\"displayName\":\"test_policy4ljtwhrb3\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T09:04:36.2666163Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-16T09:04:36.9195862Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policynphpv4hoz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policynphpv4hoz\"},{\"properties\":{\"displayName\":\"test_policywr7fgwb3h_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-03-25T07:14:53.2365929Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-03-25T07:14:54.8167247Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyoawd757s5\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyoawd757s5\"},{\"properties\":{\"displayName\":\"test_policyt252aa3in\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyose3kehj3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyose3kehj3\"},{\"properties\":{\"displayName\":\"test_policybdhp4fxco\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T10:48:46.5988423Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T10:48:47.7233071Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyp2ohl2hf3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyp2ohl2hf3\"},{\"properties\":{\"displayName\":\"test_policy7q6xzfojd\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:48:58.771927Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policypm6ined27\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policypm6ined27\"},{\"properties\":{\"displayName\":\"test_policyg5g7wrd63\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqcexugiyb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqcexugiyb\"},{\"properties\":{\"displayName\":\"test_policyrhqz2lkr7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:06:49.1738752Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyqsscwoy4k\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyqsscwoy4k\"},{\"properties\":{\"displayName\":\"test_policyfn5bvohrv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-15T07:02:13.594025Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr45j67nyp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr45j67nyp\"},{\"properties\":{\"displayName\":\"test_policygciiyb5ye\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:07:22.3409618Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7fhjcb3r\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7fhjcb3r\"},{\"properties\":{\"displayName\":\"test_policyqq6qt33lj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:20:54.595452Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:20:55.7954891Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyr7kvszw3l\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyr7kvszw3l\"},{\"properties\":{\"displayName\":\"test_policy6x3ypmkcv\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"createdOn\":\"2020-04-26T02:34:00.9817352Z\",\"updatedBy\":\"f0f844e0-d2fe-4aa3-8e2c-2e429618f305\",\"updatedOn\":\"2020-04-26T02:34:01.934025Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrdnkhjxie\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrdnkhjxie\"},{\"properties\":{\"displayName\":\"test_policy2k3hcktfx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:18:07.741136Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrnepsjpsa\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrnepsjpsa\"},{\"properties\":{\"displayName\":\"test_policy5u5ook2zf\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrs5zxfokx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrs5zxfokx\"},{\"properties\":{\"displayName\":\"test_policyepxuvmnrs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrtseayuym\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrtseayuym\"},{\"properties\":{\"displayName\":\"test_policyeglfwi2os\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyrzih7n7ws\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyrzih7n7ws\"},{\"properties\":{\"displayName\":\"test_policyrjb7ausww\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-26T07:06:57.89264Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysh2ld2fbf\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysh2ld2fbf\"},{\"properties\":{\"displayName\":\"test_policybflkk7cf2\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-19T08:48:53.5703427Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2021-04-19T08:48:54.2065695Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policysnxqzmcgi\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policysnxqzmcgi\"},{\"properties\":{\"displayName\":\"test_policyeop2lxcb7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytaxuus2zo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytaxuus2zo\"},{\"properties\":{\"displayName\":\"test_policyx5a3znshs\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-26T09:10:23.421479Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytl5ocnpv2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytl5ocnpv2\"},{\"properties\":{\"displayName\":\"test_policymichd2ukj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytrkoh7vio\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytrkoh7vio\"},{\"properties\":{\"displayName\":\"test_policylx6vwejtr\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2020-07-21T12:40:37.6778137Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policytuqroqvkg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policytuqroqvkg\"},{\"properties\":{\"displayName\":\"test_policymhqqjyizg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyunv6j3gfp\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyunv6j3gfp\"},{\"properties\":{\"displayName\":\"test_policykwxjihjgn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-10-27T10:06:34.9091521Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyuwuomvfjq\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyuwuomvfjq\"},{\"properties\":{\"displayName\":\"test_policyf2qzg3ba4\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"displayName\":\"Allowed - locations\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"in\":\"[parameters('allowedLocations')]\",\"field\":\"location\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv3qavzpbx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv3qavzpbx\"},{\"properties\":{\"displayName\":\"test_policy5koxubsg5\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv53qgvql6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv53qgvql6\"},{\"properties\":{\"displayName\":\"test_policycaxoe7agu\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T02:14:31.5587491Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyv6bc2zdey\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyv6bc2zdey\"},{\"properties\":{\"displayName\":\"test_policy65zhk56oe\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T09:12:22.7078165Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvmph7iatk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvmph7iatk\"},{\"properties\":{\"displayName\":\"test_policy7t2i6ysv7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyvpb2ircbl\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyvpb2ircbl\"},{\"properties\":{\"displayName\":\"test_policyc2n4hwvff\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-06T10:21:23.3432499Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policywsslcs6dz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policywsslcs6dz\"},{\"properties\":{\"displayName\":\"test_policyn67yt2fld_new\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-06-11T06:51:10.2516Z\",\"updatedBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"updatedOn\":\"2019-06-11T06:51:13.9885473Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations 2\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"audit\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyx5j3fsjzb\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyx5j3fsjzb\"},{\"properties\":{\"displayName\":\"test_policyltxpwmbyi\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T02:44:15.0960062Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy3ipsjspu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy3ipsjspu\"},{\"properties\":{\"displayName\":\"test_policy574uc23jc\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2019-12-09T08:14:59.7674009Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyy7mglfglo\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyy7mglfglo\"},{\"properties\":{\"displayName\":\"test_policyao7uqj3gn\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T01:39:03.0784792Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyc6uhp7bs\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyc6uhp7bs\"},{\"properties\":{\"displayName\":\"test_policyycy3trxsx\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-26T03:03:25.8356774Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyym2rnjbh7\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyym2rnjbh7\"},{\"properties\":{\"displayName\":\"test_policyif4bjggk7\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"category\":\"test2\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyuuoin4oc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyuuoin4oc\"},{\"properties\":{\"displayName\":\"test_policyzfxjndvdt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123_new\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-07-23T12:30:20.8339545Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-07-23T12:30:21.6951075Z\"},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyyymu25cvk\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyyymu25cvk\"},{\"properties\":{\"displayName\":\"test_policyvy7eweevk\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"category\":\"test\",\"createdBy\":\"93a01e49-673a-4e15-8230-51214a737962\",\"createdOn\":\"2019-02-19T07:01:55.8648869Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"Array\",\"metadata\":{\"description\":\"The - list of locations that can be specified when deploying resources\",\"strongType\":\"location\",\"displayName\":\"Allowed - locations\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policyzyhzyddss\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"azure-cli-test-policyzyhzyddss\"},{\"properties\":{\"displayName\":\"deny_load_balancer_rules_and_inbound_nat_rules\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"createdOn\":\"2020-04-16T10:26:15.3658751Z\",\"updatedBy\":\"b5ed59e8-f00d-4396-af62-8297e36d8b52\",\"updatedOn\":\"2020-04-16T10:30:05.8140661Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/loadBalancers\"},{\"anyOf\":[{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/inboundNatRules')), - 0)]\",\"equals\":\"true\"},{\"value\":\"[greater(length(field('Microsoft.Network/loadBalancers/loadBalancingRules')), - 0)]\",\"equals\":\"true\"}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"bfedda4d-ba65-4ba3-9df1-9eb8a13a0f09\"},{\"properties\":{\"displayName\":\"clitestvgcwukwfkdrnt\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:08:49.3743392Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitest7syw4jlpt6vnzk5vvmal7tz\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitest7syw4jlpt6vnzk5vvmal7tz\"},{\"properties\":{\"displayName\":\"clitestmwd5emng54d7h\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:29.7005931Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesta744fed3lbeyk3atxfl22hh\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesta744fed3lbeyk3atxfl22hh\"},{\"properties\":{\"displayName\":\"clitestasb6ki5xu3s5n\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:32.4697746Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestaccirnpsjl4xcry6egrdxcc\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestaccirnpsjl4xcry6egrdxcc\"},{\"properties\":{\"displayName\":\"clitestyfehqscfzl66v\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:18:08.1664207Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestatcrgfr7h3bzxn2n2l643lx\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestatcrgfr7h3bzxn2n2l643lx\"},{\"properties\":{\"displayName\":\"clitest546cgekm2cmto\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T08:58:45.8641083Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestiympxjk7m7b7zm5ife6siwj\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestiympxjk7m7b7zm5ife6siwj\"},{\"properties\":{\"displayName\":\"clitestx3chgt5ixyfdg\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T06:59:50.0631487Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestkhjp2fkvvvmtlfh54o7b7db\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestkhjp2fkvvvmtlfh54o7b7db\"},{\"properties\":{\"displayName\":\"clitestcv4zaidsjskxz\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-04-19T07:29:01.5383822Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestlgubbwxnbxedc6oqemfvyul\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestlgubbwxnbxedc6oqemfvyul\"},{\"properties\":{\"displayName\":\"clitest4t542r65t7vdo\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-12T09:21:45.5602849Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestm2i27iey5uu3k34mmckjoc6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestm2i27iey5uu3k34mmckjoc6\"},{\"properties\":{\"displayName\":\"clitest4fmzwsy5ekwaj\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-13T09:02:35.0596019Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestr3x24dreg2li4idugas3fi3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestr3x24dreg2li4idugas3fi3\"},{\"properties\":{\"displayName\":\"clitestsoroll7id56c6\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-15T06:09:20.8262259Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitestxxdb7o7f2qrwygu4p4pupsu\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitestxxdb7o7f2qrwygu4p4pupsu\"},{\"properties\":{\"displayName\":\"clitestlcamaprqvpmyp\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"desc_for_test_policy_123\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2021-04-16T02:09:29.9142438Z\",\"updatedBy\":null,\"updatedOn\":null},\"parameters\":{\"allowedLocations\":{\"type\":\"array\",\"metadata\":{\"displayName\":\"Allowed - locations\",\"description\":\"The list of locations that can be specified - when deploying resources\",\"strongType\":\"location\"}}},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":\"[parameters('allowedLocations')]\"}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/clitesty3kzkcsdlkgkwcocvpjwcyr\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"clitesty3kzkcsdlkgkwcocvpjwcyr\"},{\"properties\":{\"displayName\":\"deny-nic-no-nsg\",\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:38.9080299Z\",\"updatedBy\":\"0a592c45-613e-4f1b-9023-7c4414fd53bf\",\"updatedOn\":\"2020-05-08T06:00:01.7905233Z\"},\"parameters\":{},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkInterfaces\"},{\"field\":\"Microsoft.Network/networkInterfaces/networkSecurityGroup\",\"exists\":false},{\"count\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*]\",\"where\":{\"field\":\"Microsoft.Network/networkInterfaces/ipConfigurations[*].publicIpAddress\",\"exists\":true}},\"greater\":0}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nic-no-nsg\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nic-no-nsg\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:17.0826822Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups\"},{\"count\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*]\",\"where\":{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules[*].sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}},\"greaterOrEquals\":1}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"0d504196-1423-4569-9a6e-15149656f0ee\",\"createdOn\":\"2020-03-02T10:36:31.0309112Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Network/networkSecurityGroups/securityRules\"},{\"allOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/access\",\"equals\":\"Allow\"},{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/direction\",\"equals\":\"Inbound\"},{\"anyOf\":[{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix\",\"in\":[\"*\",\"Internet\"]},{\"not\":{\"field\":\"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]\",\"notIn\":[\"*\",\"Internet\"]}}]}]}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deny-nsg-rule-internet-inbound\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"deny-nsg-rule-internet-inbound\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"Deny - cool access tiering for storage\",\"metadata\":{\"createdBy\":\"89ed5be8-ff97-41b5-ab11-055e1e3cc34b\",\"createdOn\":\"2019-03-09T04:29:39.8836867Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts\"},{\"field\":\"kind\",\"equals\":\"BlobStorage\"},{\"not\":{\"field\":\"Microsoft.Storage/storageAccounts/accessTier\",\"equals\":\"cool\"}}]},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/denyCoolTiering\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"denyCoolTiering\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:35.9462109Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T05:58:36.2899714Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1d6a287496763bd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1d6a287496763bd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"All\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.3616782Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-08T04:25:20.5689022Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd1ff115351d7d620\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd1ff115351d7d620\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:58:36.5087248Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd226f944793a0edd\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd226f944793a0edd\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T04:25:20.9593945Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pd248103959e1b89a\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pd248103959e1b89a\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:53:56.4821495Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn4b00229168b529\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn4b00229168b529\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:12:02.5562119Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdn7d459478c62e5f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdn7d459478c62e5f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:16:25.1651266Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdndd5095457eae7f\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdndd5095457eae7f\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:21:56.3757672Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pdnfc173081e3e1c6\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pdnfc173081e3e1c6\"},{\"properties\":{\"displayName\":\"pol-defdis-2169\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:43:22.5629692Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-2601\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-2601\"},{\"properties\":{\"displayName\":\"pol-dis-5258\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:57:59.3671014Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3066\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3066\"},{\"properties\":{\"displayName\":\"pol-defdis-1797\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-08T05:59:42.1212637Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-3604\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-3604\"},{\"properties\":{\"displayName\":\"pol-defdis-8885\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:51:26.6479837Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4703\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4703\"},{\"properties\":{\"displayName\":\"pol-defdis-5984\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:44:44.5908405Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-4803\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-4803\"},{\"properties\":{\"displayName\":\"pol-dis-2866\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T09:59:29.3473453Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-7444\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-7444\"},{\"properties\":{\"displayName\":\"pol-defdis-3052\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:50:49.8743418Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-834\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-834\"},{\"properties\":{\"displayName\":\"pol-dis-6545\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:01:11.8439197Z\",\"updatedBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"updatedOn\":\"2019-11-07T10:01:13.5984375Z\"},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-900\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-900\"},{\"properties\":{\"displayName\":\"pol-defdis-412\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"policy - definition description\",\"metadata\":{\"createdBy\":\"5b5e6b07-55b8-419b-a446-20fe0aa5b459\",\"createdOn\":\"2019-11-07T10:39:00.9481726Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/pol-def-9447\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"pol-def-9447\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"createdOn\":\"2021-02-25T23:50:17.3899118Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:30:32.2645779Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"westus2\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-bicep-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-bicep-test\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"a9aa6a31-a53e-4776-afab-8ba3ea5dd918\",\"createdOn\":\"2020-05-26T10:35:24.5235655Z\",\"updatedBy\":\"181c08fa-7ac8-48a6-a869-342ab74566a4\",\"updatedOn\":\"2021-04-19T07:26:03.8364554Z\"},\"policyRule\":{\"if\":{\"field\":\"location\",\"equals\":\"northeurope\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policy-for-what-if-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policy-for-what-if-test\"},{\"properties\":{\"displayName\":\"mypolicy017769\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:30:12.0928123Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policye4e52460\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policye4e52460\"},{\"properties\":{\"displayName\":\"mypolicy934651\",\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"description\":\"This - is my policy\",\"metadata\":{\"createdBy\":\"d36e0017-aac8-4dd3-8ccf-0ab8a7049c35\",\"createdOn\":\"2020-04-28T09:41:17.395858Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"not\":{\"field\":\"location\",\"in\":[\"northeurope\",\"westeurope\"]}},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/policyf7441099\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"policyf7441099\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-02-12T13:23:03.0790705Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-02-12T13:23:32.6581852Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/readOnlyStorage\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"readOnlyStorage\"},{\"properties\":{\"displayName\":\"Sumit- - NSG X on every subnet\",\"policyType\":\"Custom\",\"mode\":\"All\",\"description\":\"This - policy enforces a specific NSG on every subnet\",\"metadata\":{\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-01-02T03:24:40.1850198Z\",\"updatedBy\":null,\"updatedOn\":null},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/sumit-enforce-nsg-on-subnett2\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"sumit-enforce-nsg-on-subnett2\"},{\"properties\":{\"policyType\":\"Custom\",\"mode\":\"Indexed\",\"metadata\":{\"'version\":\"1.0.0\",\"category\":\"location'\",\"createdBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"createdOn\":\"2020-08-07T07:23:08.643979Z\",\"updatedBy\":\"9ac534f1-d577-4034-a32d-48de400dacbf\",\"updatedOn\":\"2020-08-07T07:23:54.2756856Z\"},\"policyRule\":{\"if\":{\"field\":\"type\",\"equals\":\"Microsoft.Storage/storageAccounts/write\"},\"then\":{\"effect\":\"deny\"}}},\"id\":\"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/zhoxing-test\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"zhoxing-test\"}]}" - headers: - cache-control: - - no-cache - content-length: - - '2900424' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit virtual machines without disaster - recovery configured","policyType":"BuiltIn","mode":"All","description":"Audit - virtual machines which do not have disaster recovery configured. To learn - more about disaster recovery, visit https://aka.ms/asr-doc.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.Resources/links","existenceCondition":{"field":"name","like":"ASR-Protect-*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56","type":"Microsoft.Authorization/policyDefinitions","name":"0015ea4d-51ff-4ce3-8d8c-f3f8f0179a56"}' - headers: - cache-control: - - no-cache - content-length: - - '814' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''001802d1-4969-4c82-a700-c29c6c6f9bbd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Sockets state - for a Function App","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within an Function app must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/001802d1-4969-4c82-a700-c29c6c6f9bbd","type":"Microsoft.Authorization/policyDefinitions","name":"001802d1-4969-4c82-a700-c29c6c6f9bbd"}' - headers: - cache-control: - - no-cache - content-length: - - '1253' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0049a6b3-a662-4f3e-8635-39cf44ace45a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerability assessment should be enabled - on your Synapse workspaces","policyType":"BuiltIn","mode":"Indexed","description":"Discover, - track, and remediate potential vulnerabilities by configuring recurring SQL - vulnerability assessment scans on your Synapse workspaces.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Synapse/workspaces/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0049a6b3-a662-4f3e-8635-39cf44ace45a","type":"Microsoft.Authorization/policyDefinitions","name":"0049a6b3-a662-4f3e-8635-39cf44ace45a"}' - headers: - cache-control: - - no-cache - content-length: - - '1077' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0088bc63-6dee-4a9c-9d29-91cfdc848952'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Server Integration Services integration - runtimes on Azure Data Factory should be joined to a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Virtual Network deployment provides enhanced security and isolation for your - SQL Server Integration Services integration runtimes on Azure Data Factory, - as well as subnets, access control policies, and other features to further - restrict access.","metadata":{"version":"1.0.0","category":"Data Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories/integrationRuntimes"},{"field":"Microsoft.DataFactory/factories/integrationruntimes/type","equals":"Managed"},{"field":"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.vnetProperties.vnetId","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0088bc63-6dee-4a9c-9d29-91cfdc848952","type":"Microsoft.Authorization/policyDefinitions","name":"0088bc63-6dee-4a9c-9d29-91cfdc848952"}' - headers: - cache-control: - - no-cache - content-length: - - '1307' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''009a0c92-f5b4-4776-9b66-4ed2b4775563'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint connections on Batch - accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections allow secure communication by enabling private connectivity - to Batch accounts without a need for public IP addresses at the source or - destination. Learn more about private endpoints in Batch at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/009a0c92-f5b4-4776-9b66-4ed2b4775563","type":"Microsoft.Authorization/policyDefinitions","name":"009a0c92-f5b4-4776-9b66-4ed2b4775563"}' - headers: - cache-control: - - no-cache - content-length: - - '1219' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''013e242c-8828-4970-87b3-ab247555486d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Backup should be enabled for Virtual - Machines","policyType":"BuiltIn","mode":"Indexed","description":"Ensure protection - of your Azure Virtual Machines by enabling Azure Backup. Azure Backup is a - secure and cost effective data protection solution for Azure.","metadata":{"version":"1.0.1","category":"Backup"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.RecoveryServices/backupprotecteditems"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/013e242c-8828-4970-87b3-ab247555486d","type":"Microsoft.Authorization/policyDefinitions","name":"013e242c-8828-4970-87b3-ab247555486d"}' - headers: - cache-control: - - no-cache - content-length: - - '922' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''02a84be7-c304-421f-9bb7-5d2c26af54ad'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs on which the remote connection status does not match the specified - one","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines on which the remote host connection status does not match - the specified one. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsRemoteConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/02a84be7-c304-421f-9bb7-5d2c26af54ad","type":"Microsoft.Authorization/policyDefinitions","name":"02a84be7-c304-421f-9bb7-5d2c26af54ad"}' - headers: - cache-control: - - no-cache - content-length: - - '3241' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''037eea7a-bd0a-46c5-9a66-03aea78705d3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should restrict - network access","policyType":"BuiltIn","mode":"Indexed","description":"Network - access to Cognitive Services accounts should be restricted. Configure network - rules so only applications from allowed networks can access the Cognitive - Services account. To allow connections from specific internet or on-premises - clients, access can be granted to traffic from specific Azure virtual networks - or to public internet IP address ranges.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/037eea7a-bd0a-46c5-9a66-03aea78705d3","type":"Microsoft.Authorization/policyDefinitions","name":"037eea7a-bd0a-46c5-9a66-03aea78705d3"}' - headers: - cache-control: - - no-cache - content-length: - - '1211' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''040732e8-d947-40b8-95d6-854c95024bf8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Kubernetes Service Private Clusters - should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Enable - the private cluster feature for your Azure Kubernetes Service cluster to ensure - network traffic between your API server and your node pools remains on the - private network only. This is a common requirement in many regulatory and - industry compliance standards.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster","notEquals":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/040732e8-d947-40b8-95d6-854c95024bf8","type":"Microsoft.Authorization/policyDefinitions","name":"040732e8-d947-40b8-95d6-854c95024bf8"}' - headers: - cache-control: - - no-cache - content-length: - - '1111' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0447bc18-e2f7-4c0d-aa20-bff034275be1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Linux machines that have the specified - applications installed","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are installed.","metadata":{"category":"Guest Configuration","version":"3.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"not_installed_application_linux","version":"1.*","configurationParameter":{"ApplicationName":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names","description":"A semicolon-separated list of the names of the applications - that should not be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', parameters(''ApplicationName'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0447bc18-e2f7-4c0d-aa20-bff034275be1","type":"Microsoft.Authorization/policyDefinitions","name":"0447bc18-e2f7-4c0d-aa20-bff034275be1"}' - headers: - cache-control: - - no-cache - content-length: - - '5399' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0473574d-2d43-4217-aefe-941fcdf7e684'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB allowed locations","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to restrict the locations your organization can specify - when deploying Azure Cosmos DB resources. Use to enforce your geo-compliance - requirements.","metadata":{"version":"1.0.0","category":"Cosmos DB"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"displayName":"Allowed - locations","description":"The list of locations that can be specified when - deploying Azure Cosmos DB resources.","strongType":"location"}},"policyEffect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["deny","audit","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/Locations[*]","where":{"value":"[replace(toLower(first(field(''Microsoft.DocumentDB/databaseAccounts/Locations[*].locationName''))), - '' '', '''')]","in":"[parameters(''listOfAllowedLocations'')]"}},"notEquals":"[length(field(''Microsoft.DocumentDB/databaseAccounts/Locations[*]''))]"}]},"then":{"effect":"[parameters(''policyEffect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0473574d-2d43-4217-aefe-941fcdf7e684","type":"Microsoft.Authorization/policyDefinitions","name":"0473574d-2d43-4217-aefe-941fcdf7e684"}' - headers: - cache-control: - - no-cache - content-length: - - '1420' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''048248b0-55cd-46da-b1ff-39efd52db260'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL managed instances should use customer-managed - keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Implementing - Transparent Data Encryption (TDE) with your own key provides you with increased - transparency and control over the TDE Protector, increased security with an - HSM-backed external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/encryptionProtector","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/managedInstances/encryptionProtector/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.Sql/managedInstances/encryptionProtector/uri","notEquals":""},{"field":"Microsoft.Sql/managedInstances/encryptionProtector/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/048248b0-55cd-46da-b1ff-39efd52db260","type":"Microsoft.Authorization/policyDefinitions","name":"048248b0-55cd-46da-b1ff-39efd52db260"}' - headers: - cache-control: - - no-cache - content-length: - - '1429' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''04c4380f-3fae-46e8-96c9-30193528f602'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Network traffic data collection - agent should be installed on Linux virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable Dependency Agent for Linux VMs monitoring"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04c4380f-3fae-46e8-96c9-30193528f602","type":"Microsoft.Authorization/policyDefinitions","name":"04c4380f-3fae-46e8-96c9-30193528f602"}' - headers: - cache-control: - - no-cache - content-length: - - '2947' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''04c655fe-0ac7-48ae-9a32-3a2e208c7624'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Shared dashboards should not have markdown - tiles with inline content","policyType":"BuiltIn","mode":"Indexed","description":"Disallow - creating a shared dashboard that has inline content in markdown tiles and - enforce that the content should be stored as a markdown file that''s hosted - online. If you use inline content in the markdown tile, you cannot manage - encryption of the content. By configuring your own storage, you can encrypt, - double encrypt and even bring your own keys. Enabling this policy restricts - users to use 2020-09-01-preview or above version of shared dashboards REST - API.","metadata":{"version":"1.0.0","category":"Portal"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Portal/dashboards"},{"anyof":[{"not":{"value":"[requestContext().apiVersion]","greaterOrEquals":"2020-09-01-alpha"}},{"count":{"field":"Microsoft.Portal/dashboards/lenses[*].parts[*]","where":{"allOf":[{"field":"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.type","equals":"Extension/HubsExtension/PartType/MarkdownPart"},{"anyOf":[{"field":"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownUri","exists":"false"},{"field":"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource","exists":"false"},{"field":"Microsoft.Portal/dashboards/lenses[*].parts[*].metadata.Extension-HubsExtension-PartType-MarkdownPart.settings.content.settings.markdownSource","equals":"1"}]}]}},"greater":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04c655fe-0ac7-48ae-9a32-3a2e208c7624","type":"Microsoft.Authorization/policyDefinitions","name":"04c655fe-0ac7-48ae-9a32-3a2e208c7624"}' - headers: - cache-control: - - no-cache - content-length: - - '2065' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''04d53d87-841c-4f23-8a5b-21564380b55e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Service - Bus to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Service Bus to stream to a regional Log Analytics - workspace when any Service Bus which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/04d53d87-841c-4f23-8a5b-21564380b55e","type":"Microsoft.Authorization/policyDefinitions","name":"04d53d87-841c-4f23-8a5b-21564380b55e"}' - headers: - cache-control: - - no-cache - content-length: - - '3644' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''051cba44-2429-45b9-9649-46cec11c7119'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure API for FHIR should use a customer-managed - key to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - a customer-managed key to control the encryption at rest of the data stored - in Azure API for FHIR when this is a regulatory or compliance requirement. - Customer-managed keys also deliver double encryption by adding a second layer - of encryption on top of the default one done with service-managed keys.","metadata":{"version":"1.0.1","category":"API - for FHIR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["audit","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HealthcareApis/services"},{"field":"Microsoft.HealthcareApis/services/cosmosDbConfiguration.keyVaultKeyUri","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/051cba44-2429-45b9-9649-46cec11c7119","type":"Microsoft.Authorization/policyDefinitions","name":"051cba44-2429-45b9-9649-46cec11c7119"}' - headers: - cache-control: - - no-cache - content-length: - - '1135' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''053d3325-282c-4e5c-b944-24faffd30d77'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Log Analytics agent for Linux - VMs","policyType":"BuiltIn","mode":"Indexed","description":"Deploy Log Analytics - agent for Linux VMs if the VM Image (OS) is in the list defined and the agent - is not installed.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"},{"field":"Microsoft.Compute/imageSKU","like":"8*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"},{"field":"Microsoft.Compute/imageSKU","like":"15*"}]}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"sles-12-sp*"},{"field":"Microsoft.Compute/imageOffer","like":"sles-15-sp*"}]},{"field":"Microsoft.Compute/imageSKU","in":["gen1","gen2"]}]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","0001-com-ubuntu-server-focal"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16_04*lts-gen2"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18_04*lts-gen2"},{"field":"Microsoft.Compute/imageSKU","like":"20_04*lts"},{"field":"Microsoft.Compute/imageSKU","like":"20_04*lts-gen2"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"8*"},{"field":"Microsoft.Compute/imageSKU","like":"9*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"},{"field":"Microsoft.Compute/imageSKU","like":"8*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"OMSAgentForLinux","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.13"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/053d3325-282c-4e5c-b944-24faffd30d77","type":"Microsoft.Authorization/policyDefinitions","name":"053d3325-282c-4e5c-b944-24faffd30d77"}' - headers: - cache-control: - - no-cache - content-length: - - '5861' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''055aa869-bc98-4af8-bafc-23f1ab6ffe2c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web Application Firewall (WAF) should - be enabled for Azure Front Door Service service","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.","metadata":{"version":"1.0.1","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoors"},{"field":"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/055aa869-bc98-4af8-bafc-23f1ab6ffe2c","type":"Microsoft.Authorization/policyDefinitions","name":"055aa869-bc98-4af8-bafc-23f1ab6ffe2c"}' - headers: - cache-control: - - no-cache - content-length: - - '1328' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0564d078-92f5-4f97-8398-b9f58a51f70b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint should be enabled for - PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for PostgreSQL. Configure a private endpoint connection - to enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0564d078-92f5-4f97-8398-b9f58a51f70b","type":"Microsoft.Authorization/policyDefinitions","name":"0564d078-92f5-4f97-8398-b9f58a51f70b"}' - headers: - cache-control: - - no-cache - content-length: - - '1235' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerability Assessment settings for - SQL server should contain an email address to receive scan reports","policyType":"BuiltIn","mode":"Indexed","description":"Ensure - that an email address is provided for the ''Send scan reports to'' field in - the Vulnerability Assessment settings. This email address receives scan result - summary after a periodic scan runs on SQL servers.","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/vulnerabilityAssessments","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]","notEquals":""},{"count":{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/default.recurringScans.emails[*]"},"notEquals":0}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9","type":"Microsoft.Authorization/policyDefinitions","name":"057d6cfe-9c4f-4a6d-bc60-14420ea1f1a9"}' - headers: - cache-control: - - no-cache - content-length: - - '1288' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''057ef27e-665e-4328-8ea3-04b3122bd9fb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Azure Data Lake Store - should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised","metadata":{"version":"4.0.1","category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/057ef27e-665e-4328-8ea3-04b3122bd9fb","type":"Microsoft.Authorization/policyDefinitions","name":"057ef27e-665e-4328-8ea3-04b3122bd9fb"}' - headers: - cache-control: - - no-cache - content-length: - - '1948' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''06695360-db88-47f6-b976-7500d4297475'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure File Sync to use private - DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"To access - the private endpoint(s) for Storage Sync Service resource interfaces from - a registered server, you need to configure your DNS to resolve the correct - names to your private endpoint''s private IP addresses. This policy creates - the requisite Azure Private DNS Zone and A records for the interfaces of your - Storage Sync Service private endpoint(s).","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"privateDnsZoneId","strongType":"Microsoft.Network/privateDnsZones","description":"Private - DNS Zone Identifier"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"afs"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b12aa53e-6015-4669-85d0-8515ebb3ae7f","/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink-afs","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06695360-db88-47f6-b976-7500d4297475","type":"Microsoft.Authorization/policyDefinitions","name":"06695360-db88-47f6-b976-7500d4297475"}' - headers: - cache-control: - - no-cache - content-length: - - '2590' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''06a78e20-9358-41c9-923c-fb736d382a12'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit SQL DB Level Audit - Setting","policyType":"BuiltIn","mode":"All","description":"Audit DB level - audit setting for SQL databases","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"setting":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/auditingSettings","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a12"}' - headers: - cache-control: - - no-cache - content-length: - - '959' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''06a78e20-9358-41c9-923c-fb736d382a4d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit VMs that do not use managed disks","policyType":"BuiltIn","mode":"All","description":"This - policy audits VMs that do not use managed disks","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/osDisk.uri","exists":"True"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/VirtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/VirtualMachineScaleSets/osDisk.vhdContainers","exists":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/osdisk.imageUrl","exists":"True"}]}]}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/06a78e20-9358-41c9-923c-fb736d382a4d","type":"Microsoft.Authorization/policyDefinitions","name":"06a78e20-9358-41c9-923c-fb736d382a4d"}' - headers: - cache-control: - - no-cache - content-length: - - '915' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0725b4dd-7e76-479c-a735-68e7ee23d5ca'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that Cognitive Services - account isn''t exposed on the public internet. Creating private endpoints - can limit exposure of Cognitive Services account. Learn more at: https://go.microsoft.com/fwlink/?linkid=2129800. - ","metadata":{"version":"1.0.1","category":"Cognitive Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0725b4dd-7e76-479c-a735-68e7ee23d5ca","type":"Microsoft.Authorization/policyDefinitions","name":"0725b4dd-7e76-479c-a735-68e7ee23d5ca"}' - headers: - cache-control: - - no-cache - content-length: - - '1132' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0820b7b9-23aa-4725-a1ce-ae4558f718e5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"CORS should not allow every resource - to access your Function Apps","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your Function - app. Allow only required domains to interact with your Function app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0820b7b9-23aa-4725-a1ce-ae4558f718e5","type":"Microsoft.Authorization/policyDefinitions","name":"0820b7b9-23aa-4725-a1ce-ae4558f718e5"}' - headers: - cache-control: - - no-cache - content-length: - - '1064' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0868462e-646c-4fe3-9ced-a733534b6a2c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Log Analytics agent - to be enabled on Windows virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Log Analytics workspace is used to receive - performance data. If this workspace is outside of the scope of the assignment - you must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - values: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MicrosoftMonitoringAgent","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0868462e-646c-4fe3-9ced-a733534b6a2c","type":"Microsoft.Authorization/policyDefinitions","name":"0868462e-646c-4fe3-9ced-a733534b6a2c"}' - headers: - cache-control: - - no-cache - content-length: - - '6352' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines on which the DSC - configuration is not compliant","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-DSCConfigurationStatus returns that the DSC configuration for - the machine is not compliant.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsDscConfiguration","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDscConfiguration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd","type":"Microsoft.Authorization/policyDefinitions","name":"08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd"}' - headers: - cache-control: - - no-cache - content-length: - - '3518' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''08b1442b-7789-4130-8506-4f99a97226a7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Data Factories to disable public - network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your Data Factory so that it is not accessible over - the public internet. This can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data - Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"field":"Microsoft.DataFactory/factories/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2018-06-01'')]","operation":"addOrReplace","field":"Microsoft.DataFactory/factories/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b1442b-7789-4130-8506-4f99a97226a7","type":"Microsoft.Authorization/policyDefinitions","name":"08b1442b-7789-4130-8506-4f99a97226a7"}' - headers: - cache-control: - - no-cache - content-length: - - '1377' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''08b17839-76c6-4015-90e0-33d9d54d219c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08b17839-76c6-4015-90e0-33d9d54d219c","type":"Microsoft.Authorization/policyDefinitions","name":"08b17839-76c6-4015-90e0-33d9d54d219c"}' - headers: - cache-control: - - no-cache - content-length: - - '1278' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''08ba64b8-738f-4918-9686-730d2ed79c7d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Search - Services to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Search Services to stream to a regional Log Analytics - workspace when any Search Services which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Search/searchServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08ba64b8-738f-4918-9686-730d2ed79c7d","type":"Microsoft.Authorization/policyDefinitions","name":"08ba64b8-738f-4918-9686-730d2ed79c7d"}' - headers: - cache-control: - - no-cache - content-length: - - '3654' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''08e6af2d-db70-460a-bfe9-d5bd474ba9d6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Adaptive network hardening recommendations - should be applied on internet facing virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Security Center analyzes the traffic patterns of Internet facing virtual machines - and provides Network Security Group rule recommendations that reduce the potential - attack surface","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"f9f0eed0-f143-47bf-b856-671ea2eeed62","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/08e6af2d-db70-460a-bfe9-d5bd474ba9d6","type":"Microsoft.Authorization/policyDefinitions","name":"08e6af2d-db70-460a-bfe9-d5bd474ba9d6"}' - headers: - cache-control: - - no-cache - content-length: - - '1145' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''09024ccc-0c5f-475e-9457-b7c0d9ed487b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"There should be more than one owner assigned - to your subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate more than one subscription owner in order to have - administrator access redundancy.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"2c79b4af-f830-b61e-92b9-63dfa30f16e4","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09024ccc-0c5f-475e-9457-b7c0d9ed487b","type":"Microsoft.Authorization/policyDefinitions","name":"09024ccc-0c5f-475e-9457-b7c0d9ed487b"}' - headers: - cache-control: - - no-cache - content-length: - - '1038' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0961003e-5a0a-4549-abde-af6a37f2724d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Disk encryption should be applied on - virtual machines","policyType":"BuiltIn","mode":"All","description":"Virtual - machines without an enabled disk encryption will be monitored by Azure Security - Center as recommendations.","metadata":{"version":"2.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"d57a4221-a804-52ca-3dea-768284f06bb7","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0961003e-5a0a-4549-abde-af6a37f2724d","type":"Microsoft.Authorization/policyDefinitions","name":"0961003e-5a0a-4549-abde-af6a37f2724d"}' - headers: - cache-control: - - no-cache - content-length: - - '1068' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''09ce66bc-1220-4153-8104-e3f51c936913'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure backup on virtual machines - without a given tag to an existing recovery services vault in the same location","policyType":"BuiltIn","mode":"Indexed","description":"Enforce - backup for all virtual machines by backing them up to an existing central - recovery services vault in the same location and subscription as the virtual - machine. Doing this is useful when there is a central team in your organization - managing backups for all resources in a subscription. You can optionally exclude - virtual machines containing a specified tag to control the scope of assignment. - See https://aka.ms/AzureVMCentralBackupExcludeTag.","metadata":{"version":"2.0.0","category":"Backup"},"parameters":{"vaultLocation":{"type":"String","metadata":{"displayName":"Location - (Specify the location of the VMs that you want to protect)","description":"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - southeastasia.","strongType":"location"}},"backupPolicyId":{"type":"String","metadata":{"displayName":"Backup - Policy (of type Azure VM from a vault in the location chosen above)","description":"Specify - the id of the Azure backup policy to configure backup of the virtual machines. - The selected Azure backup policy should be of type Azure virtual machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/.","strongType":"Microsoft.RecoveryServices/vaults/backupPolicies"}},"exclusionTagName":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Name of the tag to use for excluding VMs from the - scope of this policy. This should be used along with the Exclusion Tag Value - parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy."}},"exclusionTagValue":{"type":"Array","metadata":{"displayName":"Exclusion - Tag Values","description":"Value of the tag to use for excluding VMs from - the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy."},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","equals":"[parameters(''vaultLocation'')]"},{"field":"id","notContains":"/resourceGroups/databricks-rg-"},{"anyOf":[{"not":{"field":"[concat(''tags['', - parameters(''exclusionTagName''), '']'')]","in":"[parameters(''exclusionTagValue'')]"}},{"value":"[empty(parameters(''exclusionTagValue''))]","equals":"true"},{"value":"[empty(parameters(''exclusionTagName''))]","equals":"true"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2019"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"20.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b"],"type":"Microsoft.RecoveryServices/backupprotecteditems","deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"apiVersion":"2017-05-10","name":"[concat(''DeployProtection-'',uniqueString(parameters(''protectedItems'')))]","type":"Microsoft.Resources/deployments","resourceGroup":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 4))]","subscriptionId":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 2))]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"type":"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems","name":"[concat(first(skip(split(parameters(''backupPolicyId''), - ''/''), 8)), ''/'', parameters(''fabricName''), ''/'',parameters(''protectionContainers''), - ''/'', parameters(''protectedItems''))]","apiVersion":"2016-06-01","properties":{"protectedItemType":"Microsoft.Compute/virtualMachines","policyId":"[parameters(''backupPolicyId'')]","sourceResourceId":"[parameters(''sourceResourceId'')]"}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"[parameters(''fabricName'')]"},"protectionContainers":{"value":"[parameters(''protectionContainers'')]"},"protectedItems":{"value":"[parameters(''protectedItems'')]"},"sourceResourceId":{"value":"[parameters(''sourceResourceId'')]"}}}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"Azure"},"protectionContainers":{"value":"[concat(''iaasvmcontainer;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"protectedItems":{"value":"[concat(''vm;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"sourceResourceId":{"value":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/'', resourceGroup().name, - ''/providers/Microsoft.Compute/virtualMachines/'',field(''name''))]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/09ce66bc-1220-4153-8104-e3f51c936913","type":"Microsoft.Authorization/policyDefinitions","name":"09ce66bc-1220-4153-8104-e3f51c936913"}' - headers: - cache-control: - - no-cache - content-length: - - '10181' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0a1302fb-a631-4106-9753-f3d494733990'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint should be enabled for - MariaDB servers","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MariaDB. Configure a private endpoint connection to - enable access to traffic coming only from known networks and prevent access - from all other IP addresses, including within Azure.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMariaDB/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforMariaDB/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a1302fb-a631-4106-9753-f3d494733990","type":"Microsoft.Authorization/policyDefinitions","name":"0a1302fb-a631-4106-9753-f3d494733990"}' - headers: - cache-control: - - no-cache - content-length: - - '1220' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:38:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0a15ec92-a229-4763-bb14-0ea34a568f8d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:38:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Policy Add-on for Kubernetes service - (AKS) should be installed and enabled on your clusters","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Policy Add-on for Kubernetes service (AKS) extends Gatekeeper v3, an admission - controller webhook for Open Policy Agent (OPA), to apply at-scale enforcements - and safeguards on your clusters in a centralized, consistent manner.","metadata":{"version":"1.0.2","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a15ec92-a229-4763-bb14-0ea34a568f8d","type":"Microsoft.Authorization/policyDefinitions","name":"0a15ec92-a229-4763-bb14-0ea34a568f8d"}' - headers: - cache-control: - - no-cache - content-length: - - '1215' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0a914e76-4921-4c19-b460-a2d36003525a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit resource location matches resource - group location","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that the resource location matches its resource group location","metadata":{"version":"2.0.0","category":"General"},"policyRule":{"if":{"allOf":[{"field":"location","notEquals":"[resourcegroup().location]"},{"field":"location","notEquals":"global"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a914e76-4921-4c19-b460-a2d36003525a","type":"Microsoft.Authorization/policyDefinitions","name":"0a914e76-4921-4c19-b460-a2d36003525a"}' - headers: - cache-control: - - no-cache - content-length: - - '621' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0a9991e6-21be-49f9-8916-a06d934bcf29'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Account Management''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountManagement","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesAccountManagement"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0a9991e6-21be-49f9-8916-a06d934bcf29","type":"Microsoft.Authorization/policyDefinitions","name":"0a9991e6-21be-49f9-8916-a06d934bcf29"}' - headers: - cache-control: - - no-cache - content-length: - - '5803' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0aa61e00-0a01-4a3c-9945-e93cffedf0e6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Container Instance container group - should use customer-managed key for encryption","policyType":"BuiltIn","mode":"Indexed","description":"Secure - your containers with greater flexibility using customer-managed keys. When - you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.","metadata":{"version":"1.0.0","category":"Container Instance"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerInstance/containerGroups"},{"anyOf":[{"field":"Microsoft.ContainerInstance/containerGroups/encryptionProperties.vaultBaseUrl","exists":false},{"field":"Microsoft.ContainerInstance/containerGroups/encryptionProperties.keyName","exists":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0aa61e00-0a01-4a3c-9945-e93cffedf0e6","type":"Microsoft.Authorization/policyDefinitions","name":"0aa61e00-0a01-4a3c-9945-e93cffedf0e6"}' - headers: - cache-control: - - no-cache - content-length: - - '1322' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0b15565f-aa9e-48ba-8619-45960f2c314d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Email notification to subscription owner - for high severity alerts should be enabled","policyType":"BuiltIn","mode":"All","description":"To - ensure your subscription owners are notified when there is a potential security - breach in their subscription, set email notifications to subscription owners - for high severity alerts in Security Center.","metadata":{"version":"2.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceScope":"subscription","existenceCondition":{"not":{"allOf":[{"field":"Microsoft.Security/securityContacts/alertsToAdmins","equals":"Off"},{"field":"Microsoft.Security/securityContacts/alertNotifications.minimalSeverity","equals":"High"}]}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b15565f-aa9e-48ba-8619-45960f2c314d","type":"Microsoft.Authorization/policyDefinitions","name":"0b15565f-aa9e-48ba-8619-45960f2c314d"}' - headers: - cache-control: - - no-cache - content-length: - - '1247' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0b60c0b2-2dc2-4e1c-b5c9-abbed971de53'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Key vaults should have purge protection - enabled","policyType":"BuiltIn","mode":"Indexed","description":"Malicious - deletion of a key vault can lead to permanent data loss. A malicious insider - in your organization can potentially delete and purge key vaults. Purge protection - protects you from insider attacks by enforcing a mandatory retention period - for soft deleted key vaults. No one inside your organization or Microsoft - will be able to purge your key vaults during the soft delete retention period.","metadata":{"version":"1.1.1","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","exists":"false"},{"field":"Microsoft.KeyVault/vaults/enablePurgeProtection","exists":"false"},{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","equals":"false"},{"field":"Microsoft.KeyVault/vaults/enablePurgeProtection","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b60c0b2-2dc2-4e1c-b5c9-abbed971de53","type":"Microsoft.Authorization/policyDefinitions","name":"0b60c0b2-2dc2-4e1c-b5c9-abbed971de53"}' - headers: - cache-control: - - no-cache - content-length: - - '1406' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0b7ef78e-a035-4f23-b9bd-aff122a1b1cf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB throughput should be - limited","policyType":"BuiltIn","mode":"All","description":"This policy enables - you to restrict the maximum throughput your organization can specify when - creating Azure Cosmos DB databases and containers through the resource provider. - It blocks the creation of autoscale resources.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"throughputMax":{"type":"Integer","metadata":{"displayName":"Max - RUs","description":"The maximum throughput (RU/s) that can be assigned to - a container via the Resource Provider during create or update."}},"effect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"anyOf":[{"field":"type","like":"Microsoft.DocumentDB/databaseAccounts/*/throughputSettings"},{"field":"type","in":["Microsoft.DocumentDB/databaseAccounts/sqlDatabases","Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers","Microsoft.DocumentDB/databaseAccounts/mongodbDatabases","Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections","Microsoft.DocumentDB/databaseAccounts/gremlinDatabases","Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs","Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces","Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables","Microsoft.DocumentDB/databaseAccounts/tables"]}]},{"anyOf":[{"value":"[requestContext().apiVersion]","less":"2019-08-01"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/cassandraKeyspaces/tables/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/gremlinDatabases/graphs/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/mongodbDatabases/collections/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"},{"value":"[if(equals(field(''Microsoft.DocumentDB/databaseAccounts/tables/options.throughput''), - ''''), 0, int(field(''Microsoft.DocumentDB/databaseAccounts/tables/options.throughput'')))]","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/options","containsKey":"ProvisionedThroughputSettings"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.throughput","greater":"[parameters(''throughputMax'')]"},{"field":"Microsoft.DocumentDB/databaseAccounts/tables/throughputSettings/default.resource.provisionedThroughputSettings","exists":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0b7ef78e-a035-4f23-b9bd-aff122a1b1cf","type":"Microsoft.Authorization/policyDefinitions","name":"0b7ef78e-a035-4f23-b9bd-aff122a1b1cf"}' - headers: - cache-control: - - no-cache - content-length: - - '7961' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0c192fe8-9cbb-4516-85b3-0ade8bd03886'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure API app has ''Client Certificates - (Incoming client certificates)'' set to ''On''","policyType":"BuiltIn","mode":"Indexed","description":"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c192fe8-9cbb-4516-85b3-0ade8bd03886","type":"Microsoft.Authorization/policyDefinitions","name":"0c192fe8-9cbb-4516-85b3-0ade8bd03886"}' - headers: - cache-control: - - no-cache - content-length: - - '980' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0c2b3618-68a8-4034-a150-ff4abc873462'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint connections on Automation - Accounts should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections allow secure communication by enabling private connectivity - to Automation accounts without a need for public IP addresses at the source - or destination. Learn more about private endpoints in Azure Automation at - https://docs.microsoft.com/azure/automation/how-to/private-link-security","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0c2b3618-68a8-4034-a150-ff4abc873462","type":"Microsoft.Authorization/policyDefinitions","name":"0c2b3618-68a8-4034-a150-ff4abc873462"}' - headers: - cache-control: - - no-cache - content-length: - - '1287' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0d134df8-db83-46fb-ad72-fe0c9428c8dd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL servers should use customer-managed - keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Implementing - Transparent Data Encryption (TDE) with your own key provides increased transparency - and control over the TDE Protector, increased security with an HSM-backed - external service, and promotion of separation of duties. This recommendation - applies to organizations with a related compliance requirement.","metadata":{"version":"2.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/encryptionProtector","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/servers/encryptionProtector/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.Sql/servers/encryptionProtector/uri","notEquals":""},{"field":"Microsoft.Sql/servers/encryptionProtector/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d134df8-db83-46fb-ad72-fe0c9428c8dd","type":"Microsoft.Authorization/policyDefinitions","name":"0d134df8-db83-46fb-ad72-fe0c9428c8dd"}' - headers: - cache-control: - - no-cache - content-length: - - '1420' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0d40b058-9f95-4a19-93e3-9b0330baa2a3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint should be enabled for - IoT Hub","policyType":"BuiltIn","mode":"Indexed","description":"Private endpoint - connections enforce secure communication by enabling private connectivity - to IoT Hub. Configure a private endpoint connection to enable access to traffic - coming only from known networks and prevent access from all other IP addresses, - including within Azure.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/IotHubs"},{"count":{"field":"Microsoft.Devices/IotHubs/privateEndpointConnections[*]","where":{"field":"Microsoft.Devices/IotHubs/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d40b058-9f95-4a19-93e3-9b0330baa2a3","type":"Microsoft.Authorization/policyDefinitions","name":"0d40b058-9f95-4a19-93e3-9b0330baa2a3"}' - headers: - cache-control: - - no-cache - content-length: - - '1197' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0d9b45ff-9ddd-43fc-bf59-fbd1c8423053'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs on which Windows Defender Exploit Guard is not enabled","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which Windows Defender Exploit Guard - is not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053","type":"Microsoft.Authorization/policyDefinitions","name":"0d9b45ff-9ddd-43fc-bf59-fbd1c8423053"}' - headers: - cache-control: - - no-cache - content-length: - - '3208' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0da106f2-4ca3-48e8-bc85-c638fe6aea8f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed identity should be used in your - Function App","policyType":"BuiltIn","mode":"Indexed","description":"Use a - managed identity for enhanced authentication security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"},{"field":"Microsoft.Web/sites/config/xmanagedServiceIdentityId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f","type":"Microsoft.Authorization/policyDefinitions","name":"0da106f2-4ca3-48e8-bc85-c638fe6aea8f"}' - headers: - cache-control: - - no-cache - content-length: - - '1056' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0db34a60-64f4-4bf6-bd44-f95c16cf34b9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy a flow log resource with target - network security group","policyType":"BuiltIn","mode":"Indexed","description":"Configures - flow log for specific network security group. It will allow to log information - about IP traffic flowing through an network security group. Flow log helps - to identify unknown or undesired traffic, verify network isolation and compliance - with enterprise access rules, analyze network flows from compromised IPs and - network interfaces.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"nsgRegion":{"type":"String","metadata":{"displayName":"NSG - Region","description":"This Policy will review NSGs only in the selected region. - You can create other assignments to include other regions.","strongType":"location"}},"storageId":{"type":"String","metadata":{"displayName":"Storage - id","description":"A string with the storage id for the flowlogs to be sent - to. It will be used for deployment purposes only. Make sure this storage account - is located in the same region as the NSG. The format must be: ''/subscriptions/{subscription - id}/resourceGroups/{resourceGroup name}/providers/Microsoft.Storage/storageAccounts/{storage - account name}","assignPermissions":"true"}},"networkWatcherRG":{"type":"String","metadata":{"displayName":"Network - Watchers RG","description":"The name of the resource group where the flowLog - resources will be created. This will be used only if a deployment is required. - This is the resource group where the Network Watchers are located.","strongType":"existingResourceGroups"}},"networkWatcherName":{"type":"String","metadata":{"displayName":"Network - Watcher name","description":"The name of the network watcher under which the - flowLog resources will be created. Make sure it belongs to the same region - as the NSG."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"field":"location","equals":"[parameters(''nsgRegion'')]"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Network/networkWatchers/flowlogs","resourceGroupName":"[if(empty(coalesce(field(''Microsoft.Network/networkSecurityGroups/flowLogs''))), - parameters(''networkWatcherRG''), split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[4])]","name":"[if(empty(coalesce(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id''))), - ''null/null'', concat(split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[8], ''/'', split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[10]))]","existenceCondition":{"allOf":[{"field":"Microsoft.Network/networkWatchers/flowLogs/enabled","equals":"true"},{"field":"Microsoft.Network/networkWatchers/flowLogs/storageId","equals":"[parameters(''storageId'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"storageId":{"type":"String"},"networkWatcherRG":{"type":"String"},"networkWatcherName":{"type":"String"},"flowlogName":{"type":"String"},"location":{"type":"String"},"targetResource":{"type":"string"}},"resources":[{"type":"Microsoft.Resources/deployments","name":"[concat(''flowlogDeployment-'', - uniqueString(parameters(''flowlogName'')))]","apiVersion":"2019-10-01","resourceGroup":"[parameters(''networkWatcherRG'')]","properties":{"mode":"incremental","parameters":{},"template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"resources":[{"type":"Microsoft.Network/networkWatchers/flowLogs","name":"[concat(parameters(''networkWatcherName''), - ''/'', parameters(''flowlogName''))]","apiVersion":"2019-11-01","location":"[parameters(''location'')]","properties":{"targetResourceId":"[parameters(''targetResource'')]","storageId":"[parameters(''storageId'')]","enabled":"true","retentionPolicy":{"days":"0","enabled":"false"}}}]}}}]},"parameters":{"storageId":{"value":"[parameters(''storageId'')]"},"networkWatcherRG":{"value":"[if(empty(coalesce(field(''Microsoft.Network/networkSecurityGroups/flowLogs''))), - parameters(''networkWatcherRG''), split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[4])]"},"networkWatcherName":{"value":"[if(empty(coalesce(field(''Microsoft.Network/networkSecurityGroups/flowLogs''))), - parameters(''networkWatcherName''), split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[8])]"},"flowlogName":{"value":"[if(empty(coalesce(field(''Microsoft.Network/networkSecurityGroups/flowLogs''))), - concat(field(''name''), ''-'', resourceGroup().name, ''-'', ''flowlog''), - split(first(field(''Microsoft.Network/networkSecurityGroups/flowLogs[*].id'')), - ''/'')[10])]"},"location":{"value":"[field(''location'')]"},"targetResource":{"value":"[concat(resourceGroup().id, - ''/providers/Microsoft.Network/networkSecurityGroups/'', field(''name''))]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0db34a60-64f4-4bf6-bd44-f95c16cf34b9","type":"Microsoft.Authorization/policyDefinitions","name":"0db34a60-64f4-4bf6-bd44-f95c16cf34b9"}' - headers: - cache-control: - - no-cache - content-length: - - '5277' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0e07b2e9-6cd9-4c40-9ccb-52817b95133b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Modify - Configure Azure File Sync to - disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"The - Azure File Sync''s internet-accessible public endpoint are disabled by your - organizational policy. You may still access the Storage Sync Service via its - private endpoint(s).","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.StorageSync/storageSyncServices"},{"field":"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy","notEquals":"AllowVirtualNetworksOnly"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"Audit","operations":[{"condition":"[greater(requestContext().apiVersion, - ''2019-10-01'')]","operation":"addOrReplace","field":"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy","value":"AllowVirtualNetworksOnly"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e07b2e9-6cd9-4c40-9ccb-52817b95133b","type":"Microsoft.Authorization/policyDefinitions","name":"0e07b2e9-6cd9-4c40-9ccb-52817b95133b"}' - headers: - cache-control: - - no-cache - content-length: - - '1386' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0e246bcf-5f6f-4f87-bc6f-775d4712c7ea'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authorized IP ranges should be defined - on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"Restrict - access to the Kubernetes Service Management API by granting API access only - to IP addresses in specific ranges. It is recommended to limit access to authorized - IP ranges to ensure that only applications from allowed networks can access - the cluster.","metadata":{"version":"2.0.1","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"field":"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.authorizedIPRanges","exists":"false"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/apiServerAccessProfile.enablePrivateCluster","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e246bcf-5f6f-4f87-bc6f-775d4712c7ea","type":"Microsoft.Authorization/policyDefinitions","name":"0e246bcf-5f6f-4f87-bc6f-775d4712c7ea"}' - headers: - cache-control: - - no-cache - content-length: - - '1339' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0e60b895-3786-45da-8377-9c6b4b6ac5f9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Remote debugging should be turned off - for Function Apps","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on function apps. Remote debugging - should be turned off.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e60b895-3786-45da-8377-9c6b4b6ac5f9","type":"Microsoft.Authorization/policyDefinitions","name":"0e60b895-3786-45da-8377-9c6b4b6ac5f9"}' - headers: - cache-control: - - no-cache - content-length: - - '1006' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0e6763cc-5078-4e64-889d-ff4d9a839047'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for Key Vault should be - enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for Key Vault provides an additional layer of protection and security intelligence - by detecting unusual and potentially harmful attempts to access or exploit - key vault accounts.","metadata":{"version":"1.0.3","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"KeyVaults","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0e6763cc-5078-4e64-889d-ff4d9a839047","type":"Microsoft.Authorization/policyDefinitions","name":"0e6763cc-5078-4e64-889d-ff4d9a839047"}' - headers: - cache-control: - - no-cache - content-length: - - '1084' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0ec47710-77ff-4a3d-9181-6aa50af424d0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Geo-redundant backup should be enabled - for Azure Database for MariaDB","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Database for MariaDB allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},{"field":"Microsoft.DBforMariaDB/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ec47710-77ff-4a3d-9181-6aa50af424d0","type":"Microsoft.Authorization/policyDefinitions","name":"0ec47710-77ff-4a3d-9181-6aa50af424d0"}' - headers: - cache-control: - - no-cache - content-length: - - '1222' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0ecd903d-91e7-4726-83d3-a229d7f2e293'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - enable Guest Configuration Policy on Windows VMs.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Windows VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ecd903d-91e7-4726-83d3-a229d7f2e293","type":"Microsoft.Authorization/policyDefinitions","name":"0ecd903d-91e7-4726-83d3-a229d7f2e293"}' - headers: - cache-control: - - no-cache - content-length: - - '4320' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0ef5aac7-c064-427a-b87b-d47b3ddcaf73'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Batch accounts with private - endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Batch - accounts, you can reduce data leakage risks. Learn more about private links - at: https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","equals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Batch/batchAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Batch/batchAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["batchAccount"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0ef5aac7-c064-427a-b87b-d47b3ddcaf73","type":"Microsoft.Authorization/policyDefinitions","name":"0ef5aac7-c064-427a-b87b-d47b3ddcaf73"}' - headers: - cache-control: - - no-cache - content-length: - - '3590' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0f2d8593-4667-4932-acca-6a9f187af109'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Audit Azure Spring Cloud instances - where distributed tracing is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"Distributed - tracing tools in Azure Spring Cloud allow debugging and monitoring the complex - interconnections between microservices in an application. Distributed tracing - tools should be enabled and in a healthy state.","metadata":{"version":"1.0.0-preview","category":"App - Platform","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppPlatform/Spring"},{"anyOf":[{"field":"Microsoft.AppPlatform/Spring/trace.enabled","notEquals":"true"},{"field":"Microsoft.AppPlatform/Spring/trace.state","notEquals":"Succeeded"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0f2d8593-4667-4932-acca-6a9f187af109","type":"Microsoft.Authorization/policyDefinitions","name":"0f2d8593-4667-4932-acca-6a9f187af109"}' - headers: - cache-control: - - no-cache - content-length: - - '1149' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0fda3595-9f2b-4592-8675-4231d6fa82fe'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cognitive Search services should - use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Cognitive Search, - data leakage risks are reduced. Learn more about private links at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"version":"1.0.0","category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"count":{"field":"Microsoft.Search/searchServices/privateEndpointConnections[*]","where":{"field":"Microsoft.Search/searchServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fda3595-9f2b-4592-8675-4231d6fa82fe","type":"Microsoft.Authorization/policyDefinitions","name":"0fda3595-9f2b-4592-8675-4231d6fa82fe"}' - headers: - cache-control: - - no-cache - content-length: - - '1376' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0fdf0491-d080-4575-b627-ad0e843cba0f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for Container registries","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that container registries - are not exposed on the public internet. Creating private endpoints can limit - exposure of container registry resources. Learn more at: https://aka.ms/acr/portal/public-network - and https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"field":"Microsoft.ContainerRegistry/registries/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fdf0491-d080-4575-b627-ad0e843cba0f","type":"Microsoft.Authorization/policyDefinitions","name":"0fdf0491-d080-4575-b627-ad0e843cba0f"}' - headers: - cache-control: - - no-cache - content-length: - - '1131' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''0fea8f8a-4169-495d-8307-30ec335f387d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"CORS should not allow every domain to - access your API for FHIR","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API for - FHIR. To protect your API for FHIR, remove access for all domains and explicitly - define the domains allowed to connect.","metadata":{"version":"1.0.0","category":"API - for FHIR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["audit","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HealthcareApis/services"},{"not":{"field":"Microsoft.HealthcareApis/services/corsConfiguration.origins[*]","notEquals":"*"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/0fea8f8a-4169-495d-8307-30ec335f387d","type":"Microsoft.Authorization/policyDefinitions","name":"0fea8f8a-4169-495d-8307-30ec335f387d"}' - headers: - cache-control: - - no-cache - content-length: - - '1024' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''106ccbe4-a791-4f33-a44a-06796944b8d5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not contain the specified certificates in Trusted - Root","policyType":"BuiltIn","mode":"Indexed","description":"This policy creates - a Guest Configuration assignment to audit Windows VMs that do not contain - the specified certificates in the Trusted Root Certification Authorities certificate - store (Cert:\\LocalMachine\\Root). It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"CertificateThumbprints":{"type":"String","metadata":{"displayName":"[Deprecated]: - Certificate thumbprints","description":"A semicolon-separated list of certificate - thumbprints that should exist under the Trusted Root certificate store (Cert:\\LocalMachine\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsCertificateInTrustedRoot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprints'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsCertificateInTrustedRoot"},"CertificateThumbprints":{"value":"[parameters(''CertificateThumbprints'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"CertificateThumbprints":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprints'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprints'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/106ccbe4-a791-4f33-a44a-06796944b8d5","type":"Microsoft.Authorization/policyDefinitions","name":"106ccbe4-a791-4f33-a44a-06796944b8d5"}' - headers: - cache-control: - - no-cache - content-length: - - '6793' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''10c1859c-e1a7-4df3-ab97-a487fa8059f6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that ''.NET Framework'' - version is the latest, if used as a part of the Function App","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/10c1859c-e1a7-4df3-ab97-a487fa8059f6","type":"Microsoft.Authorization/policyDefinitions","name":"10c1859c-e1a7-4df3-ab97-a487fa8059f6"}' - headers: - cache-control: - - no-cache - content-length: - - '1144' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Custom subscription owner roles should - not exist","policyType":"BuiltIn","mode":"All","description":"This policy - ensures that no custom subscription owner roles exist.","metadata":{"version":"2.0.0","category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"},{"anyOf":[{"not":{"field":"Microsoft.Authorization/roleDefinitions/permissions[*].actions[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Authorization/roleDefinitions/permissions.actions[*]","notEquals":"*"}}]},{"anyOf":[{"not":{"field":"Microsoft.Authorization/roleDefinitions/assignableScopes[*]","notIn":["[concat(subscription().id,''/'')]","[subscription().id]","/"]}},{"not":{"field":"Microsoft.Authorization/roleDefinitions/assignableScopes[*]","notLike":"/providers/Microsoft.Management/*"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9","type":"Microsoft.Authorization/policyDefinitions","name":"10ee2ea2-fb4d-45b8-a7e9-a2e770044cd9"}' - headers: - cache-control: - - no-cache - content-length: - - '1346' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''114eec6e-5e59-4bad-999d-6eceeb39d582'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Modify - Configure Azure IoT Hubs to - disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint. This policy disables - public network access on IoT Hub resources.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/IotHubs"},{"field":"Microsoft.Devices/IotHubs/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2020-03-01'')]","operation":"addOrReplace","field":"Microsoft.Devices/IotHubs/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/114eec6e-5e59-4bad-999d-6eceeb39d582","type":"Microsoft.Authorization/policyDefinitions","name":"114eec6e-5e59-4bad-999d-6eceeb39d582"}' - headers: - cache-control: - - no-cache - content-length: - - '1348' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''11566b39-f7f7-4b82-ab06-68d8700eb0a4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should use - customer owned storage or enable data encryption.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using customer owned storage - nor data encryption. For each Cognitive Services account with storage, use - either customer owned storage or enable data encryption.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"count":{"field":"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]"},"less":1},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11566b39-f7f7-4b82-ab06-68d8700eb0a4","type":"Microsoft.Authorization/policyDefinitions","name":"11566b39-f7f7-4b82-ab06-68d8700eb0a4"}' - headers: - cache-control: - - no-cache - content-length: - - '1180' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''11ac78e3-31bc-4f0c-8434-37ab963cea07'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Dependency agent should be enabled for - listed virtual machine images","policyType":"BuiltIn","mode":"Indexed","description":"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed. The list of OS images is updated - over time as support is updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/11ac78e3-31bc-4f0c-8434-37ab963cea07","type":"Microsoft.Authorization/policyDefinitions","name":"11ac78e3-31bc-4f0c-8434-37ab963cea07"}' - headers: - cache-control: - - no-cache - content-length: - - '6160' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''12017595-5a75-4bb1-9d97-4c2c939ea3c3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - System settings''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - System settings'' for certificate rules on executables for SRP and - optional subsystems. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsSystemsettings","version":"1.*","configurationParameter":{"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"type":"String","metadata":{"displayName":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies","description":"Specifies whether digital certificates are processed - when software restriction policies are enabled and a user or process attempts - to run software with an .exe file name extension. It enables or disables certificate - rules (a type of software restriction policies rule). For certificate rules - to take effect in software restriction policies, you must enable this policy - setting."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemsettings","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue'', ''='', parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12017595-5a75-4bb1-9d97-4c2c939ea3c3","type":"Microsoft.Authorization/policyDefinitions","name":"12017595-5a75-4bb1-9d97-4c2c939ea3c3"}' - headers: - cache-control: - - no-cache - content-length: - - '5013' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1221c620-d201-468c-81e7-2817e6107e84'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Network Security''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Network Security'' for including Local System behavior, PKU2U, LAN - Manager, LDAP client, and NTLM SSP. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsNetworkSecurity","version":"1.*","configurationParameter":{"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue","NetworkSecurityLANManagerAuthenticationLevel":"Network - security: LAN Manager authentication level;ExpectedValue","NetworkSecurityLDAPClientSigningRequirements":"Network - security: LDAP client signing requirements;ExpectedValue","NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue","NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"type":"String","metadata":{"displayName":"Network - Security: Configure encryption types allowed for Kerberos","description":"Specifies - the encryption types that Kerberos is allowed to use."}},"NetworkSecurityLANManagerAuthenticationLevel":{"type":"String","metadata":{"displayName":"Network - security: LAN Manager authentication level","description":"Specify which challenge-response - authentication protocol is used for network logons. This choice affects the - level of authentication protocol used by clients, the level of session security - negotiated, and the level of authentication accepted by servers."}},"NetworkSecurityLDAPClientSigningRequirements":{"type":"String","metadata":{"displayName":"Network - security: LDAP client signing requirements","description":"Specify the level - of data signing that is requested on behalf of clients that issue LDAP BIND - requests."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"type":"String","metadata":{"displayName":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients","description":"Specifies which behaviors are allowed by clients for - applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers","description":"Specifies which behaviors are allowed by servers for - applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkSecurity","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue'', - ''='', parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos''), - '','', ''Network security: LAN Manager authentication level;ExpectedValue'', - ''='', parameters(''NetworkSecurityLANManagerAuthenticationLevel''), '','', - ''Network security: LDAP client signing requirements;ExpectedValue'', ''='', - parameters(''NetworkSecurityLDAPClientSigningRequirements''), '','', ''Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients''), - '','', ''Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1221c620-d201-468c-81e7-2817e6107e84","type":"Microsoft.Authorization/policyDefinitions","name":"1221c620-d201-468c-81e7-2817e6107e84"}' - headers: - cache-control: - - no-cache - content-length: - - '7614' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''123a3936-f020-408a-ba0c-47873faf1534'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allowlist rules in your adaptive application - control policy should be updated","policyType":"BuiltIn","mode":"All","description":"Monitor - for changes in behavior on groups of machines configured for auditing by Azure - Security Center''s adaptive application controls. Security Center uses machine - learning to analyze the running processes on your machines and suggest a list - of known-safe applications. These are presented as recommended apps to allow - in adaptive application control policies.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"1234abcd-1b53-4fd4-9835-2c2fa3935313","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/123a3936-f020-408a-ba0c-47873faf1534","type":"Microsoft.Authorization/policyDefinitions","name":"123a3936-f020-408a-ba0c-47873faf1534"}' - headers: - cache-control: - - no-cache - content-length: - - '1339' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''12430be1-6cc8-4527-a9a8-e3d38f250096'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web Application Firewall (WAF) should - use the specified mode for Application Gateway","policyType":"BuiltIn","mode":"Indexed","description":"Mandates - the use of ''Detection'' or ''Prevention'' mode to be active on all Web Application - Firewall policies for Application Gateway.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"modeRequirement":{"type":"String","metadata":{"displayName":"Mode - Requirement","description":"Mode required for all WAF policies"},"allowedValues":["Prevention","Detection"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies"},{"field":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12430be1-6cc8-4527-a9a8-e3d38f250096","type":"Microsoft.Authorization/policyDefinitions","name":"12430be1-6cc8-4527-a9a8-e3d38f250096"}' - headers: - cache-control: - - no-cache - content-length: - - '1226' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''127ef6d7-242f-43b3-9eef-947faf1725d0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Data Factory linked - services should use Key Vault for storing secrets","policyType":"BuiltIn","mode":"All","description":"To - ensure secrets (such as connection strings) are managed securely, require - users to provide secrets using an Azure Key Vault instead of specifying them - inline in linked services.","metadata":{"version":"1.0.0-preview","category":"Data - Factory","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories/linkedservices"},{"anyOf":[{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","exists":"true"},{"anyOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"AccountKey="},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"PWD="},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"Password="},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"CredString="},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"pwd="}]}]},{"field":"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type","equals":"SecureString"},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/SqlServer.typeProperties.password.type","exists":"false"}]},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureSearch.typeProperties.key.type","equals":"SecureString"},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri.type","notEquals":"AzureKeyVaultSecret"}]},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureBlobStorage.typeProperties.servicePrincipalKey.type","notEquals":"AzureKeyVaultSecret"}]},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/CosmosDb.typeProperties.accountKey.type","notEquals":"AzureKeyVaultSecret"}]},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.encryptedCredential","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.mwsAuthToken.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/AmazonMWS.typeProperties.secretKey.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/AmazonS3.typeProperties.secretAccessKey.type","equals":"SecureString"},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/Dynamics.typeProperties.servicePrincipalCredential.type","equals":"SecureString"}]},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken.type","equals":"SecureString"}]},{"field":"Microsoft.DataFactory/factories/linkedservices/Odbc.typeProperties.credential.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/GoogleAdWords.typeProperties.developerToken.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.clientSecret.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/GoogleBigQuery.typeProperties.refreshToken.type","equals":"SecureString"},{"allOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/type","in":["MongoDbAtlas","MongoDbV2"]},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString.type","notEquals":"AzureKeyVaultSecret"}]},{"field":"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCert.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/OData.typeProperties.servicePrincipalEmbeddedCertPassword.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.privateKeyContent.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/Sftp.typeProperties.passPhrase.type","equals":"SecureString"},{"field":"Microsoft.DataFactory/factories/linkedservices/Salesforce.typeProperties.securityToken.type","equals":"SecureString"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/127ef6d7-242f-43b3-9eef-947faf1725d0","type":"Microsoft.Authorization/policyDefinitions","name":"127ef6d7-242f-43b3-9eef-947faf1725d0"}' - headers: - cache-control: - - no-cache - content-length: - - '5511' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''12ae2d24-3805-4b37-9fa9-465968bfbcfa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - System objects''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - System objects''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemobjects","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsSystemobjects"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12ae2d24-3805-4b37-9fa9-465968bfbcfa","type":"Microsoft.Authorization/policyDefinitions","name":"12ae2d24-3805-4b37-9fa9-465968bfbcfa"}' - headers: - cache-control: - - no-cache - content-length: - - '5769' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''12f7e5d0-42a7-4630-80d8-54fb7cff9bd6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"installedApplication":{"type":"String","metadata":{"displayName":"[Deprecated]: - Application names (supports wildcards)","description":"A semicolon-separated - list of the names of the applications that should be installed. e.g. ''Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL - Server 2014*'' (to match any application starting with ''Microsoft SQL Server - 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]bwhitelistedapp;Name'', - ''='', parameters(''installedApplication'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WhitelistedApplication"},"installedApplication":{"value":"[parameters(''installedApplication'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"installedApplication":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]bwhitelistedapp;Name","value":"[parameters(''installedApplication'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]bwhitelistedapp;Name","value":"[parameters(''installedApplication'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/12f7e5d0-42a7-4630-80d8-54fb7cff9bd6","type":"Microsoft.Authorization/policyDefinitions","name":"12f7e5d0-42a7-4630-80d8-54fb7cff9bd6"}' - headers: - cache-control: - - no-cache - content-length: - - '6696' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''13ce0167-8ca6-4048-8e6b-f996402e3c1b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Configure machines to receive - the Qualys vulnerability assessment agent","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Defender includes vulnerability scanning for your machines at no extra cost. - You don''t need a Qualys license or even a Qualys account - everything''s - handled seamlessly inside Security Center. Machines which don''t have the - Qualys vulnerability assessment agent deployed automatically receive the agent - if this policy is enabled.","metadata":{"category":"Security Center","preview":true,"version":"2.0.0-preview"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.HybridCompute/machines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"ffff0522-1e88-47fc-8382-2a80ba848f5d","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]},"deployment":{"properties":{"mode":"Incremental","template":{"contentVersion":"1.0.0.0","$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","parameters":{"vmName":{"type":"String"},"resourceType":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''resourceType'')), - toLower(''microsoft.compute/virtualmachines''))]","type":"Microsoft.Compute/virtualMachines/providers/serverVulnerabilityAssessments","name":"[concat(parameters(''vmName''), - ''/Microsoft.Security/default'')]","apiVersion":"2020-01-01"},{"condition":"[equals(toLower(parameters(''resourceType'')), - toLower(''microsoft.hybridcompute/machines''))]","type":"Microsoft.HybridCompute/machines/providers/serverVulnerabilityAssessments","name":"[concat(parameters(''vmName''), - ''/Microsoft.Security/default'')]","apiVersion":"2020-01-01"}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"resourceType":{"value":"[field(''type'')]"}}}},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/13ce0167-8ca6-4048-8e6b-f996402e3c1b","type":"Microsoft.Authorization/policyDefinitions","name":"13ce0167-8ca6-4048-8e6b-f996402e3c1b"}' - headers: - cache-control: - - no-cache - content-length: - - '2492' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1417908b-4bff-46ee-a2a6-4acc899320ab'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that contain certificates - expiring within the specified number of days","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if certificates in - the specified store have an expiration date out of range for the number of - days given as parameter. The policy also provides the option to only check - for specific certificates or exclude specific certificates, and whether to - report on expired certificates.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"CertificateExpiration","version":"1.*","configurationParameter":{"CertificateStorePath":"[CertificateStore]CertificateStore1;CertificateStorePath","ExpirationLimitInDays":"[CertificateStore]CertificateStore1;ExpirationLimitInDays","CertificateThumbprintsToInclude":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","CertificateThumbprintsToExclude":"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude","IncludeExpiredCertificates":"[CertificateStore]CertificateStore1;IncludeExpiredCertificates"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"CertificateStorePath":{"type":"String","metadata":{"displayName":"Certificate - store path","description":"The path to the certificate store containing the - certificates to check the expiration dates of. Default value is ''Cert:'' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: ''Cert:\\LocalMachine'', ''Cert:\\LocalMachine\\TrustedPublisher'', - ''Cert:\\CurrentUser''"}},"ExpirationLimitInDays":{"type":"String","metadata":{"displayName":"Expiration - limit in days","description":"An integer indicating the number of days within - which to check for certificates that are expiring. For example, if this value - is 30, any certificate expiring within the next 30 days will cause this policy - to be non-compliant."}},"CertificateThumbprintsToInclude":{"type":"String","metadata":{"displayName":"Certificate - thumbprints to include","description":"A semicolon-separated list of certificate - thumbprints to check under the specified path. If a value is not specified, - all certificates under the certificate store path will be checked. If a value - is specified, no certificates other than those with the thumbprints specified - will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}},"CertificateThumbprintsToExclude":{"type":"String","metadata":{"displayName":"Certificate - thumbprints to exclude","description":"A semicolon-separated list of certificate - thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}},"IncludeExpiredCertificates":{"type":"String","metadata":{"displayName":"Include - expired certificates","description":"Must be ''true'' or ''false''. True indicates - that any found certificates that have already expired will also make this - policy non-compliant. False indicates that certificates that have expired - will be be ignored."},"allowedValues":["true","false"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"CertificateExpiration","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateStorePath'', - ''='', parameters(''CertificateStorePath''), '','', ''[CertificateStore]CertificateStore1;ExpirationLimitInDays'', - ''='', parameters(''ExpirationLimitInDays''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprintsToInclude''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude'', - ''='', parameters(''CertificateThumbprintsToExclude''), '','', ''[CertificateStore]CertificateStore1;IncludeExpiredCertificates'', - ''='', parameters(''IncludeExpiredCertificates'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1417908b-4bff-46ee-a2a6-4acc899320ab","type":"Microsoft.Authorization/policyDefinitions","name":"1417908b-4bff-46ee-a2a6-4acc899320ab"}' - headers: - cache-control: - - no-cache - content-length: - - '6720' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''144f1397-32f9-4598-8c88-118decc3ccba'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs if the Administrators group contains any of the specified - members","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group contains any of the specified members. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"MembersToExclude":{"type":"String","metadata":{"displayName":"[Deprecated]: - Members to exclude","description":"A semicolon-separated list of members that - should be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToExclude'', - ''='', parameters(''MembersToExclude'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembersToExclude"},"MembersToExclude":{"value":"[parameters(''MembersToExclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MembersToExclude":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToExclude","value":"[parameters(''MembersToExclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToExclude","value":"[parameters(''MembersToExclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba","type":"Microsoft.Authorization/policyDefinitions","name":"144f1397-32f9-4598-8c88-118decc3ccba"}' - headers: - cache-control: - - no-cache - content-length: - - '6596' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1537496a-b1e8-482b-a06a-1cc2415cdc7b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy - Configure Windows - machines to automatically install the Azure Security agent","policyType":"BuiltIn","mode":"Indexed","description":"Configure - Windows machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.","metadata":{"category":"Security - Center","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":["australiacentral","australiaeast","australiasoutheast","centralindia","centralus","eastasia","eastus2euap","eastus","eastus2","germanywestcentral","japaneast","northcentralus","northeurope","southcentralus","southeastasia","uksouth","westcentralus","westeurope","westus","westus2"]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"AzureSecurityWindowsAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/Publisher","equals":"Microsoft.Azure.Security.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","in":["Succeeded","Provisioning - succeeded"]}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"eastus","properties":{"mode":"incremental","parameters":{"resourceGroup":{"value":"[resourceGroup().name]"},"location":{"value":"[field(''location'')]"},"vmName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroup":{"type":"string"},"location":{"type":"string"},"vmName":{"type":"string"}},"variables":{"pairedLocations":{"australiacentral":"australiacentral","australiaeast":"australiaeast","australiasoutheast":"australiasoutheast","centralindia":"centralindia","centralus":"centralus","eastasia":"eastasia","eastus2euap":"eastus2euap","eastus":"eastus","eastus2":"eastus2","germanywestcentral":"germanywestcentral","japaneast":"japaneast","northcentralus":"northcentralus","northeurope":"northeurope","southcentralus":"southcentralus","southeastasia":"southeastasia","uksouth":"uksouth","westcentralus":"westcentralus","westeurope":"westeurope","westus":"westus","westus2":"westus2"},"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus2euap":"eus2p","eastus":"EUS","eastus2":"EUS2","germanywestcentral":"DEWC","japaneast":"EJP","northcentralus":"NCUS","northeurope":"NEU","southcentralus":"SCUS","southeastasia":"SEA","uksouth":"SUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2"},"locationCode":"[variables(''locationLongNameToShortMap'')[variables(''pairedLocations'')[parameters(''location'')]]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'', - variables(''locationCode''))]","defaultRGLocation":"[variables(''pairedLocations'')[parameters(''location'')]]","workspaceName":"[concat(''defaultWorkspace-'', - variables(''subscriptionId''),''-'', variables(''locationCode''))]","dcrName":"[concat(''Microsoft-Security-'', - variables(''locationCode''), ''-dcr'')]","dcrId":"[concat(''/subscriptions/'', - variables(''subscriptionId''), ''/resourceGroups/'', variables(''defaultRGName''), - ''/providers/Microsoft.Insights/dataCollectionRules/'', variables(''dcrName''))]","dcraName":"[concat(parameters(''vmName''),''/Microsoft.Insights/Security-RulesAssociation'')]","deployAzureSecurityWindowsAgent":"[concat(''deployAzureSecurityWindowsAgent-'', - uniqueString(deployment().name))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'', - uniqueString(deployment().name))]","deployDataCollectionRulesAssociation":"[concat(''deployDataCollectionRulesAssociation-'', - uniqueString(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''deployAzureSecurityWindowsAgent'')]","apiVersion":"2020-06-01","resourceGroup":"[parameters(''resourceGroup'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"vmName":{"value":"[parameters(''vmName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"vmName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', ''AzureSecurityWindowsAgent'')]","apiVersion":"2019-03-01","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Security.Monitoring","type":"AzureSecurityWindowsAgent","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":"true","settings":{},"protectedsettings":{}}}]}}},{"type":"Microsoft.Resources/resourceGroups","name":"[variables(''defaultRGName'')]","apiVersion":"2019-05-01","location":"[variables(''defaultRGLocation'')]"},{"type":"Microsoft.Resources/deployments","name":"[variables(''deployDefaultAscResourceGroup'')]","apiVersion":"2020-06-01","resourceGroup":"[variables(''defaultRGName'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"defaultRGLocation":{"value":"[variables(''defaultRGLocation'')]"},"workspaceName":{"value":"[variables(''workspaceName'')]"},"dcrName":{"value":"[variables(''dcrName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"defaultRGLocation":{"type":"string"},"workspaceName":{"type":"string"},"dcrName":{"type":"string"}},"variables":{"securitySolution":{"Name":"[Concat(''Security'', - ''('', parameters(''workspaceName''), '')'')]","GalleryName":"Security"},"securityCenterFreeSolution":{"Name":"[Concat(''SecurityCenterFree'', - ''('', parameters(''workspaceName''), '')'')]","GalleryName":"SecurityCenterFree"}},"resources":[{"type":"Microsoft.OperationalInsights/workspaces","name":"[parameters(''workspaceName'')]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","properties":{"sku":{"name":"pernode"},"retentionInDays":30,"features":{"searchVersion":1}}},{"type":"Microsoft.OperationsManagement/solutions","name":"[variables(''securitySolution'').Name]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]"},"plan":{"name":"[variables(''securitySolution'').Name]","publisher":"Microsoft","product":"[Concat(''OMSGallery/'', - variables(''securitySolution'').GalleryName)]","promotionCode":""}},{"type":"Microsoft.OperationsManagement/solutions","name":"[variables(''securityCenterFreeSolution'').Name]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]"},"plan":{"name":"[variables(''securityCenterFreeSolution'').Name]","publisher":"Microsoft","product":"[Concat(''OMSGallery/'', - variables(''securityCenterFreeSolution'').GalleryName)]","promotionCode":""}},{"type":"Microsoft.Insights/dataCollectionRules","name":"[parameters(''dcrName'')]","apiVersion":"2019-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"description":"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.","dataSources":{"windowsEventLogs":[{"name":"RomeDetectionEventDataSource","streams":["Microsoft-RomeDetectionEvent"],"scheduledTransferPeriod":"PT5M","xPathQueries":["Security!*","Microsoft-Windows-AppLocker/EXE - and DLL!*"]}],"syslog":[{"name":"SyslogDataSource","streams":["Microsoft-Syslog"],"facilityNames":["kern","auth","authpriv","cron","user","daemon","syslog","local0"],"logLevels":["Debug","Critical","Emergency"]}],"extensions":[{"extensionName":"AzureSecurityLinuxAgent","name":"AscLinuxDataSource","streams":["Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-SecurityBaselineSummary","Microsoft-ProcessInvestigator","Microsoft-Auditd","Microsoft-ProtectionStatus","Microsoft-Heartbeat"],"extensionSettings":{"scanners":[{"name":"heartbeat","frequency":"PT1H"},{"name":"time","frequency":"PT8H"},{"name":"antimalware","frequency":"PT8H"},{"name":"codeintegrity","frequency":"P1D"},{"name":"processinvestigator","frequency":"PT1H"},{"name":"baseline","frequency":"P1D","options":[{"name":"Baseline","value":"Azure.Ubuntu"},{"name":"AscBaseline","value":"OMS.Linux"}]},{"name":"docker","frequency":"P1D","options":[{"name":"Baseline","value":"Azure.Docker.Linux"},{"name":"AscBaseline","value":"OMS.Docker.Linux"}]}]}},{"extensionName":"AzureSecurityWindowsAgent","name":"AsaWindowsDataSource","streams":["Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-ProcessInvestigator","Microsoft-ProtectionStatus","Microsoft-SecurityBaselineSummary"],"extensionSettings":{"scanners":[{"name":"heartbeat","frequency":"PT1H"},{"name":"baseline","frequency":"P1D"},{"name":"antimalware","frequency":"P1D"},{"name":"processinvestigator","frequency":"PT1H"}]}}]},"destinations":{"logAnalytics":[{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]","name":"LogAnalyticsDest"}]},"dataFlows":[{"streams":["Microsoft-Syslog","Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-SecurityBaselineSummary","Microsoft-RomeDetectionEvent","Microsoft-ProcessInvestigator","Microsoft-Auditd","Microsoft-ProtectionStatus","Microsoft-Heartbeat"],"destinations":["LogAnalyticsDest"]}]}}]}},"dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups'', - variables(''defaultRGName''))]"]},{"type":"Microsoft.Resources/deployments","name":"[variables(''deployDataCollectionRulesAssociation'')]","apiVersion":"2020-06-01","resourceGroup":"[parameters(''resourceGroup'')]","dependsOn":["[variables(''deployDefaultAscResourceGroup'')]"],"properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"vmName":{"value":"[parameters(''vmName'')]"},"dcrId":{"value":"[variables(''dcrId'')]"},"dcraName":{"value":"[variables(''dcraName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"vmName":{"type":"string"},"dcrId":{"type":"string"},"dcraName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations","name":"[parameters(''dcraName'')]","apiVersion":"2019-11-01-preview","properties":{"description":"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.","dataCollectionRuleId":"[parameters(''dcrId'')]"}}]}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1537496a-b1e8-482b-a06a-1cc2415cdc7b","type":"Microsoft.Authorization/policyDefinitions","name":"1537496a-b1e8-482b-a06a-1cc2415cdc7b"}' - headers: - cache-control: - - no-cache - content-length: - - '14423' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''16390df4-2f73-4b42-af13-c801066763df'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have a minimum password age of 1 day","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a minimum password age of 1 day. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MinimumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16390df4-2f73-4b42-af13-c801066763df","type":"Microsoft.Authorization/policyDefinitions","name":"16390df4-2f73-4b42-af13-c801066763df"}' - headers: - cache-control: - - no-cache - content-length: - - '5675' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''16f9b37c-4408-4c30-bc17-254958f2e2d6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have the specified Windows PowerShell modules installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified Windows PowerShell - modules installed. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellModules","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/16f9b37c-4408-4c30-bc17-254958f2e2d6","type":"Microsoft.Authorization/policyDefinitions","name":"16f9b37c-4408-4c30-bc17-254958f2e2d6"}' - headers: - cache-control: - - no-cache - content-length: - - '3231' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''17763ad9-70c0-4794-9397-53d765932634'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy associations for a managed application","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - an association resource that associates selected resource types to the specified - managed application. This policy deployment does not support nested resource - types.","metadata":{"version":"1.0.0","category":"Managed Application"},"parameters":{"targetManagedApplicationId":{"type":"String","metadata":{"displayName":"Managed - application ID","description":"Resource ID of the managed application to which - resources need to be associated."}},"resourceTypesToAssociate":{"type":"Array","metadata":{"displayName":"Resource - types to associate","description":"The list of resource types to be associated - to the managed application.","strongType":"resourceTypes"}},"associationNamePrefix":{"type":"String","metadata":{"displayName":"Association - name prefix","description":"Prefix to be added to the name of the association - resource being created."}}},"policyRule":{"if":{"field":"type","in":"[parameters(''resourceTypesToAssociate'')]"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.CustomProviders/Associations","name":"[concat(parameters(''associationNamePrefix''), - ''-'', uniqueString(parameters(''targetManagedApplicationId'')))]","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"associatedResourceName":{"type":"string"},"resourceTypesToAssociate":{"type":"string"},"targetManagedApplicationId":{"type":"string"},"associationNamePrefix":{"type":"string"}},"variables":{"resourceType":"[concat(parameters(''resourceTypesToAssociate''), - ''/providers/associations'')]","resourceName":"[concat(parameters(''associatedResourceName''), - ''/microsoft.customproviders/'', parameters(''associationNamePrefix''), ''-'', - uniqueString(parameters(''targetManagedApplicationId'')))]"},"resources":[{"type":"Microsoft.Resources/deployments","apiVersion":"2017-05-10","name":"[concat(deployment().Name, - ''-2'')]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"type":"[variables(''resourceType'')]","name":"[variables(''resourceName'')]","apiVersion":"2018-09-01-preview","properties":{"targetResourceId":"[parameters(''targetManagedApplicationId'')]"}}]}}}]},"parameters":{"resourceTypesToAssociate":{"value":"[field(''type'')]"},"associatedResourceName":{"value":"[field(''name'')]"},"targetManagedApplicationId":{"value":"[parameters(''targetManagedApplicationId'')]"},"associationNamePrefix":{"value":"[parameters(''associationNamePrefix'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17763ad9-70c0-4794-9397-53d765932634","type":"Microsoft.Authorization/policyDefinitions","name":"17763ad9-70c0-4794-9397-53d765932634"}' - headers: - cache-control: - - no-cache - content-length: - - '3044' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''17b3de92-f710-4cf4-aa55-0e7859f1ed7b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[ASC Private Preview] Deploy - Configure - system-assigned managed identity to enable Azure Monitor assignments on VMs","policyType":"BuiltIn","mode":"Indexed","description":"[ASC - Private Preview] Configure system-assigned managed identity to virtual machines - hosted in Azure that are supported by Azure Monitor that do not have a system-assigned - managed identity. A system-assigned managed identity is a prerequisite for - all Azure Monitor assignments and must be added to machines before using any - Azure Monitor extension. Target virtual machines must be in a supported location.","metadata":{"category":"Monitoring","version":"1.2.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":["australiacentral","australiaeast","australiasoutheast","centralindia","centralus","eastasia","eastus2euap","eastus","eastus2","germanywestcentral","japaneast","northcentralus","northeurope","southcentralus","southeastasia","uksouth","westcentralus","westeurope","westus","westus2"]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["debian"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"8"},{"field":"Microsoft.Compute/imageSKU","like":"9"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Debian"},{"field":"Microsoft.Compute/imageOffer","in":["debian-10"]},{"field":"Microsoft.Compute/imageSKU","like":"10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"value":"[requestContext().apiVersion]","greaterOrEquals":"2018-10-01"},{"field":"identity.type","notContains":"SystemAssigned"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"operations":[{"operation":"addOrReplace","field":"identity.type","value":"[if(contains(field(''identity.type''), - ''UserAssigned''), concat(field(''identity.type''), '',SystemAssigned''), - ''SystemAssigned'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17b3de92-f710-4cf4-aa55-0e7859f1ed7b","type":"Microsoft.Authorization/policyDefinitions","name":"17b3de92-f710-4cf4-aa55-0e7859f1ed7b"}' - headers: - cache-control: - - no-cache - content-length: - - '6418' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''17k78e20-9358-41c9-923c-fb736d382a12'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Transparent Data Encryption on SQL databases - should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Transparent - data encryption should be enabled to protect data-at-rest and meet compliance - requirements","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"enabled"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/17k78e20-9358-41c9-923c-fb736d382a12","type":"Microsoft.Authorization/policyDefinitions","name":"17k78e20-9358-41c9-923c-fb736d382a12"}' - headers: - cache-control: - - no-cache - content-length: - - '1064' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''18adea5e-f416-4d0f-8aa8-d24321e3e274'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Bring your own key data protection should - be enabled for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your PostgreSQL - servers. By default, the data is encrypted at rest with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management.","metadata":{"version":"1.0.3","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/keys","existenceCondition":{"allOf":[{"field":"Microsoft.DBforPostgreSQL/servers/keys/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.DBforPostgreSQL/servers/keys/uri","notEquals":""},{"field":"Microsoft.DBforPostgreSQL/servers/keys/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/18adea5e-f416-4d0f-8aa8-d24321e3e274","type":"Microsoft.Authorization/policyDefinitions","name":"18adea5e-f416-4d0f-8aa8-d24321e3e274"}' - headers: - cache-control: - - no-cache - content-length: - - '1495' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''19be9779-c776-4dfa-8a15-a2fd5dc843d6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Logon-Logoff''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Logon-Logoff'' for auditing IPSec, network policy, claims, - account lockout, group membership, and logon/logoff events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","version":"1.*","configurationParameter":{"AuditGroupMembership":"Audit - Group Membership;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditGroupMembership":{"type":"String","metadata":{"displayName":"Audit - Group Membership","description":"Specifies whether audit events are generated - when group memberships are enumerated on the client computer."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Group Membership;ExpectedValue'', ''='', parameters(''AuditGroupMembership'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/19be9779-c776-4dfa-8a15-a2fd5dc843d6","type":"Microsoft.Authorization/policyDefinitions","name":"19be9779-c776-4dfa-8a15-a2fd5dc843d6"}' - headers: - cache-control: - - no-cache - content-length: - - '4448' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1a4e592a-6a6e-44a5-9814-e36264ca96e7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor log profile should collect - logs for categories ''write,'' ''delete,'' and ''action''","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that a log profile collects logs for categories ''write,'' - ''delete,'' and ''action''","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logprofiles","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Write"}},{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Delete"}},{"not":{"field":"Microsoft.Insights/logProfiles/categories[*]","notEquals":"Action"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a4e592a-6a6e-44a5-9814-e36264ca96e7","type":"Microsoft.Authorization/policyDefinitions","name":"1a4e592a-6a6e-44a5-9814-e36264ca96e7"}' - headers: - cache-control: - - no-cache - content-length: - - '1181' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1a833ff1-d297-4a0f-9944-888428f8e0ff'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Access to App Services - should be restricted","policyType":"BuiltIn","mode":"All","description":"Azure - security center has discovered that the networking configuration of some of - your app services are overly permissive and allow inbound traffic from ranges - that are too broad","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Web/sites"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"restrictAccessToAppServices","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1a833ff1-d297-4a0f-9944-888428f8e0ff","type":"Microsoft.Authorization/policyDefinitions","name":"1a833ff1-d297-4a0f-9944-888428f8e0ff"}' - headers: - cache-control: - - no-cache - content-length: - - '1128' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1adadefe-5f21-44f7-b931-a59b54ccdb45'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Event Grid topics should disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that the resource isn''t - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/topics"},{"field":"kind","notEquals":"AzureArc"},{"field":"Microsoft.EventGrid/topics/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1adadefe-5f21-44f7-b931-a59b54ccdb45","type":"Microsoft.Authorization/policyDefinitions","name":"1adadefe-5f21-44f7-b931-a59b54ccdb45"}' - headers: - cache-control: - - no-cache - content-length: - - '1080' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1b7aa243-30e4-4c9e-bca8-d0d3022b634a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerability assessment should be enabled - on SQL Managed Instance","policyType":"BuiltIn","mode":"Indexed","description":"Audit - each SQL Managed Instance which doesn''t have recurring vulnerability assessment - scans enabled. Vulnerability assessment can discover, track, and help you - remediate potential database vulnerabilities.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1b7aa243-30e4-4c9e-bca8-d0d3022b634a","type":"Microsoft.Authorization/policyDefinitions","name":"1b7aa243-30e4-4c9e-bca8-d0d3022b634a"}' - headers: - cache-control: - - no-cache - content-length: - - '1137' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1b8ca024-1d5c-4dec-8995-b1a932b41780'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access on Azure SQL Database - should be disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - SQL Database can only be accessed from a private endpoint. This configuration - denies all logins that match IP or virtual network based firewall rules.","metadata":{"version":"1.1.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"Microsoft.Sql/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1b8ca024-1d5c-4dec-8995-b1a932b41780","type":"Microsoft.Authorization/policyDefinitions","name":"1b8ca024-1d5c-4dec-8995-b1a932b41780"}' - headers: - cache-control: - - no-cache - content-length: - - '1016' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''PHP version'' is the latest, - if used as a part of the API app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for API - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"Latest - PHP version","description":"Latest supported PHP version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba","type":"Microsoft.Authorization/policyDefinitions","name":"1bc1795e-d44a-4d48-9b3b-6fff0fd5f9ba"}' - headers: - cache-control: - - no-cache - content-length: - - '1571' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1c06e275-d63d-4540-b761-71f364c2111d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Service Bus namespaces should use - private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Service Bus namespaces, - data leakage risks are reduced. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"field":"Microsoft.ServiceBus/namespaces/sku.tier","equals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c06e275-d63d-4540-b761-71f364c2111d","type":"Microsoft.Authorization/policyDefinitions","name":"1c06e275-d63d-4540-b761-71f364c2111d"}' - headers: - cache-control: - - no-cache - content-length: - - '1450' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1c210e94-a481-4beb-95fa-1571b434fb04'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Dependency agent to - be enabled on Windows virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Windows virtual machines if the virtual machine image - is in the list defined and the agent is not installed.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgentWindows","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1c210e94-a481-4beb-95fa-1571b434fb04","type":"Microsoft.Authorization/policyDefinitions","name":"1c210e94-a481-4beb-95fa-1571b434fb04"}' - headers: - cache-control: - - no-cache - content-length: - - '5630' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1cf164be-6819-4a50-b8fa-4bcaa4f98fb6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access on Azure Data Factory - should be disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - Data Factory can only be accessed from a private endpoint.","metadata":{"version":"1.0.0","category":"Data - Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"field":"Microsoft.DataFactory/factories/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1cf164be-6819-4a50-b8fa-4bcaa4f98fb6","type":"Microsoft.Authorization/policyDefinitions","name":"1cf164be-6819-4a50-b8fa-4bcaa4f98fb6"}' - headers: - cache-control: - - no-cache - content-length: - - '953' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1d320205-c6a1-4ac6-873d-46224024e8e2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure File Sync should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Creating - a private endpoint for the indicated Storage Sync Service resource allows - you to address your Storage Sync Service resource from within the private - IP address space of your organization''s network, rather than through the - internet-accessible public endpoint. Creating a private endpoint by itself - does not disable the public endpoint.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StorageSync/storageSyncServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections","existenceCondition":{"allOf":[{"field":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateEndpoint","exists":"true"},{"field":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/provisioningState","equals":"Succeeded"},{"field":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d320205-c6a1-4ac6-873d-46224024e8e2","type":"Microsoft.Authorization/policyDefinitions","name":"1d320205-c6a1-4ac6-873d-46224024e8e2"}' - headers: - cache-control: - - no-cache - content-length: - - '1536' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1d61c4d2-aef2-432b-87fc-7f96b019b7e1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Kubernetes clusters with specified - GitOps configuration using no secrets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - a ''sourceControlConfiguration'' to Kubernetes clusters to assure that the - clusters get their source of truth for workloads and configurations from the - defined git repo. This definition requires no secrets. For instructions, visit - https://aka.ms/K8sGitOpsPolicy.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"configurationResourceName":{"type":"String","metadata":{"displayName":"Configuration - resource name","description":"The name for the sourceControlConfiguration. Learn - more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps."}},"operatorInstanceName":{"type":"String","metadata":{"displayName":"Operator - instance name","description":"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character."}},"operatorNamespace":{"type":"String","metadata":{"displayName":"Operator - namespace","description":"Namespace within which the operators will be installed. - Maximum of 23 lowercase alphanumeric characters or hyphen. Must start and - end with an alphanumeric character."}},"operatorScope":{"type":"String","metadata":{"displayName":"Operator - scope","description":"The permission scope for the operator. Possible values - are ''cluster'' (full access) or ''namespace'' (restricted access)."},"allowedValues":["cluster","namespace"]},"operatorType":{"type":"String","metadata":{"displayName":"Operator - type","description":"The type of operator to install. Currently, ''Flux'' - is supported."},"allowedValues":["Flux"]},"operatorParams":{"type":"String","metadata":{"displayName":"Operator - parameters","description":"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams."}},"repositoryUrl":{"type":"String","metadata":{"displayName":"Repository - Url","description":"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters"}},"enableHelmOperator":{"type":"String","metadata":{"displayName":"Enable - Helm","description":"Indicate whether to enable Helm for this instance of - Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm."},"allowedValues":["true","false"]},"chartVersion":{"type":"String","metadata":{"displayName":"Helm - chart version for installing Flux Helm","description":"The version of the - Helm chart for installing Flux Helm. For example, 1.2.0"}},"chartValues":{"type":"String","metadata":{"displayName":"Helm - chart parameters for installing Flux Helm","description":"Parameters for the - Helm chart for installing Flux Helm, separated by spaces. For example, --set - helm.versions=v3"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/sourceControlConfigurations","name":"[parameters(''configurationResourceName'')]","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deploymentScope":"ResourceGroup","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams","in":["[parameters(''operatorParams'')]","[concat(''--git-readonly - '',parameters(''operatorParams''))]"]},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl","equals":"[parameters(''repositoryUrl'')]"},{"anyOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"false"},{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"true"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion","equals":"[parameters(''chartVersion'')]"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues","equals":"[parameters(''chartValues'')]"}]}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"configurationResourceName":{"type":"string"},"clusterLocation":{"type":"string"},"clusterName":{"type":"string"},"operatorInstanceName":{"type":"string"},"operatorNamespace":{"type":"string"},"operatorScope":{"type":"string"},"operatorType":{"type":"string"},"operatorParams":{"type":"string"},"repositoryUrl":{"type":"string"},"enableHelmOperator":{"type":"string"},"chartVersion":{"type":"string"},"chartValues":{"type":"string"},"clusterResourceType":{"type":"string"}},"resources":[{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''connectedclusters''))]","type":"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"}}},{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''managedclusters''))]","type":"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"}}}]},"parameters":{"clusterLocation":{"value":"[field(''location'')]"},"clusterName":{"value":"[field(''name'')]"},"configurationResourceName":{"value":"[parameters(''configurationResourceName'')]"},"operatorInstanceName":{"value":"[parameters(''operatorInstanceName'')]"},"operatorNamespace":{"value":"[parameters(''operatorNamespace'')]"},"operatorScope":{"value":"[parameters(''operatorScope'')]"},"operatorType":{"value":"[parameters(''operatorType'')]"},"operatorParams":{"value":"[parameters(''operatorParams'')]"},"repositoryUrl":{"value":"[parameters(''repositoryUrl'')]"},"enableHelmOperator":{"value":"[parameters(''enableHelmOperator'')]"},"chartVersion":{"value":"[parameters(''chartVersion'')]"},"chartValues":{"value":"[parameters(''chartValues'')]"},"clusterResourceType":{"value":"[field(''type'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d61c4d2-aef2-432b-87fc-7f96b019b7e1","type":"Microsoft.Authorization/policyDefinitions","name":"1d61c4d2-aef2-432b-87fc-7f96b019b7e1"}' - headers: - cache-control: - - no-cache - content-length: - - '7759' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1d84d5fb-01f6-4d12-ba4f-4a26081d403d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual machines should be migrated to - new Azure Resource Manager resources","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager for your virtual machines to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachines"]},{"value":"[field(''type'')]","equals":"Microsoft.ClassicCompute/virtualMachines"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1d84d5fb-01f6-4d12-ba4f-4a26081d403d","type":"Microsoft.Authorization/policyDefinitions","name":"1d84d5fb-01f6-4d12-ba4f-4a26081d403d"}' - headers: - cache-control: - - no-cache - content-length: - - '1249' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1de7b11d-1870-41a5-8181-507e7c663cfb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit API Applications - that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1de7b11d-1870-41a5-8181-507e7c663cfb","type":"Microsoft.Authorization/policyDefinitions","name":"1de7b11d-1870-41a5-8181-507e7c663cfb"}' - headers: - cache-control: - - no-cache - content-length: - - '1207' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1e30110a-5ceb-460c-a204-c1c3969c6d62'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require a tag and its value on resources","policyType":"BuiltIn","mode":"Indexed","description":"Enforces - a required tag and its value. Does not apply to resource groups.","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"not":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","equals":"[parameters(''tagValue'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e30110a-5ceb-460c-a204-c1c3969c6d62","type":"Microsoft.Authorization/policyDefinitions","name":"1e30110a-5ceb-460c-a204-c1c3969c6d62"}' - headers: - cache-control: - - no-cache - content-length: - - '852' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1e5ed725-f16c-478b-bd4b-7bfa2f7940b9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Synapse workspaces to - use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Synapse - workspace. Learn more at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-from-restricted-network#appendix-dns-registration-for-private-endpoint.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone id","description":"A private DNS zone Id","strongType":"Microsoft.Network/privateDnsZones"}},"targetSubResource":{"type":"String","metadata":{"displayName":"Target - sub-resource","description":"Target sub resource the private endpoint connects - to"},"allowedValues":["Dev","Sql","SqlOnDemand"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"[parameters(''targetSubResource'')]"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"synapse-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e5ed725-f16c-478b-bd4b-7bfa2f7940b9","type":"Microsoft.Authorization/policyDefinitions","name":"1e5ed725-f16c-478b-bd4b-7bfa2f7940b9"}' - headers: - cache-control: - - no-cache - content-length: - - '2729' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Key vaults should have soft delete enabled","policyType":"BuiltIn","mode":"Indexed","description":"Deleting - a key vault without soft delete enabled permanently deletes all secrets, keys, - and certificates stored in the key vault. Accidental deletion of a key vault - can lead to permanent data loss. Soft delete allows you to recover an accidentally - deleted key vault for a configurable retention period.","metadata":{"version":"1.0.2","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","exists":"false"},{"field":"Microsoft.KeyVault/vaults/enableSoftDelete","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d","type":"Microsoft.Authorization/policyDefinitions","name":"1e66c121-a66a-4b1f-9b83-0fd99bf0fc2d"}' - headers: - cache-control: - - no-cache - content-length: - - '1151' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1ee56206-5dd1-42ab-b02d-8aae8b1634ce'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure API for FHIR should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure API for - FHIR should have at least one approved private endpoint connection. Clients - in a virtual network can securely access resources that have private endpoint - connections through private links. For more information, visit: https://aka.ms/fhir-privatelink.","metadata":{"version":"1.0.0","category":"API - for FHIR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HealthcareApis/services"},{"count":{"field":"Microsoft.HealthcareApis/services/privateEndpointConnections[*]","where":{"field":"Microsoft.HealthcareApis/services/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1ee56206-5dd1-42ab-b02d-8aae8b1634ce","type":"Microsoft.Authorization/policyDefinitions","name":"1ee56206-5dd1-42ab-b02d-8aae8b1634ce"}' - headers: - cache-control: - - no-cache - content-length: - - '1201' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1f314764-cb73-4fc9-b863-8eca98ac36e9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"An Azure Active Directory administrator - should be provisioned for SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - provisioning of an Azure Active Directory administrator for your SQL server - to enable Azure AD authentication. Azure AD authentication enables simplified - permission management and centralized identity management of database users - and other Microsoft services","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/administrators"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f314764-cb73-4fc9-b863-8eca98ac36e9","type":"Microsoft.Authorization/policyDefinitions","name":"1f314764-cb73-4fc9-b863-8eca98ac36e9"}' - headers: - cache-control: - - no-cache - content-length: - - '1032' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1f68a601-6e6d-4e42-babf-3f643a047ea2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor Logs clusters should be - encrypted with customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Create - Azure Monitor logs cluster with customer-managed keys encryption. By default, - the log data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance. Customer-managed - key in Azure Monitor gives you more control over the access to you data, see - https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"anyOf":[{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVaultUri","exists":"false"}]},{"anyOf":[{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","equals":""},{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyName","exists":"false"}]},{"not":{"field":"Microsoft.OperationalInsights/clusters/keyVaultProperties.keyVersion","exists":"true"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f68a601-6e6d-4e42-babf-3f643a047ea2","type":"Microsoft.Authorization/policyDefinitions","name":"1f68a601-6e6d-4e42-babf-3f643a047ea2"}' - headers: - cache-control: - - no-cache - content-length: - - '1678' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1f6e93e8-6b31-41b1-83f6-36e449a42579'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Event - Hub to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Event Hub to stream to a regional Log Analytics - workspace when any Event Hub which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.EventHub/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ArchiveLogs","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutoScaleLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaCoordinatorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaUserErrorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"EventHubVNetConnectionEvent","enabled":"[parameters(''logsEnabled'')]"},{"category":"CustomerManagedKeyUserLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f6e93e8-6b31-41b1-83f6-36e449a42579","type":"Microsoft.Authorization/policyDefinitions","name":"1f6e93e8-6b31-41b1-83f6-36e449a42579"}' - headers: - cache-control: - - no-cache - content-length: - - '4105' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1f8c20ce-3414-4496-8b26-0e902a1541da'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Shutdown''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Shutdown''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"type":"String","metadata":{"displayName":"[Deprecated]: - Shutdown: Allow system to be shut down without having to log on","description":"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen."}},"ShutdownClearVirtualMemoryPagefile":{"type":"String","metadata":{"displayName":"[Deprecated]: - Shutdown: Clear virtual memory pagefile","description":"Specifies whether - the virtual memory pagefile is cleared when the system is shut down. When - this policy setting is enabled, the system pagefile is cleared each time that - the system shuts down properly. For systems with large amounts of RAM, this - could result in substantial time needed to complete the shutdown."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsShutdown","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Shutdown: - Allow system to be shut down without having to log on;ExpectedValue'', ''='', - parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn''), '','', - ''Shutdown: Clear virtual memory pagefile;ExpectedValue'', ''='', parameters(''ShutdownClearVirtualMemoryPagefile'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsShutdown"},"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},"ShutdownClearVirtualMemoryPagefile":{"value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"type":"string"},"ShutdownClearVirtualMemoryPagefile":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue","value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},{"name":"Shutdown: - Clear virtual memory pagefile;ExpectedValue","value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue","value":"[parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn'')]"},{"name":"Shutdown: - Clear virtual memory pagefile;ExpectedValue","value":"[parameters(''ShutdownClearVirtualMemoryPagefile'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f8c20ce-3414-4496-8b26-0e902a1541da","type":"Microsoft.Authorization/policyDefinitions","name":"1f8c20ce-3414-4496-8b26-0e902a1541da"}' - headers: - cache-control: - - no-cache - content-length: - - '8002' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1f905d99-2ab7-462c-a6b0-f709acca6c8f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB accounts should use customer-managed - keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your Azure Cosmos - DB. By default, the data is encrypted at rest with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/cosmosdb-cmk.","metadata":{"version":"1.0.2","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/keyVaultKeyUri","exists":false},{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1f905d99-2ab7-462c-a6b0-f709acca6c8f","type":"Microsoft.Authorization/policyDefinitions","name":"1f905d99-2ab7-462c-a6b0-f709acca6c8f"}' - headers: - cache-control: - - no-cache - content-length: - - '1303' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Logic Apps Integration Service Environment - should be encrypted with customer-managed keys","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - into Integration Service Environment to manage encryption at rest of Logic - Apps data using customer-managed keys. By default, customer data is encrypted - with service-managed keys, but customer-managed keys are commonly required - to meet regulatory compliance standards. Customer-managed keys enable the - data to be encrypted with an Azure Key Vault key created and owned by you. - You have full control and responsibility for the key lifecycle, including - rotation and management.","metadata":{"version":"1.0.0","category":"Logic - Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Logic/integrationServiceEnvironments"},{"field":"Microsoft.Logic/integrationServiceEnvironments/encryptionConfiguration","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5","type":"Microsoft.Authorization/policyDefinitions","name":"1fafeaf6-7927-4059-a50a-8eb2a7a6f2b5"}' - headers: - cache-control: - - no-cache - content-length: - - '1344' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure HDInsight clusters should use encryption - at host to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Enabling - encryption at host helps protect and safeguard your data to meet your organizational - security and compliance commitments. When you enable encryption at host, data - stored on the VM host is encrypted at rest and flows encrypted to the Storage - service.","metadata":{"version":"1.0.0","category":"HDInsight"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"anyOf":[{"field":"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost","exists":false},{"field":"Microsoft.HDInsight/clusters/diskEncryptionProperties.encryptionAtHost","equals":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6","type":"Microsoft.Authorization/policyDefinitions","name":"1fd32ebd-e4c3-4e13-a54a-d7422d4d95f6"}' - headers: - cache-control: - - no-cache - content-length: - - '1198' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''201ea587-7c90-41c3-910f-c280ae01cfd6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Web ports should be restricted - on Network Security Groups associated to your VM","policyType":"BuiltIn","mode":"All","description":"Azure - security center has discovered that some of your virtual machines are running - web applications, and the NSGs associated to these virtual machines are overly - permissive with regards to the web application ports","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"unprotectedWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/201ea587-7c90-41c3-910f-c280ae01cfd6","type":"Microsoft.Authorization/policyDefinitions","name":"201ea587-7c90-41c3-910f-c280ae01cfd6"}' - headers: - cache-control: - - no-cache - content-length: - - '1254' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2154edb9-244f-4741-9970-660785bccdaa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"VM Image Builder templates should use - private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your VM Image Builder building - resources, data leakage risks are reduced. Learn more about private links - at: https://docs.microsoft.com/azure/virtual-machines/linux/image-builder-networking#deploy-using-an-existing-vnet.","metadata":{"version":"1.1.0","category":"VM - Image Builder"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.VirtualMachineImages/imageTemplates"},{"field":"Microsoft.VirtualMachineImages/imageTemplates/vmProfile.vnetConfig","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2154edb9-244f-4741-9970-660785bccdaa","type":"Microsoft.Authorization/policyDefinitions","name":"2154edb9-244f-4741-9970-660785bccdaa"}' - headers: - cache-control: - - no-cache - content-length: - - '1327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''21a8cd35-125e-4d13-b82d-2e19b7208bb7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for Azure File Sync","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public endpoint allows you to restrict access to your Storage Sync Service - resource to requests destined to approved private endpoints on your organization''s - network. There is nothing inherently insecure about allowing requests to the - public endpoint, however, you may wish to disable it to meet regulatory, legal, - or organizational policy requirements. You can disable the public endpoint - for a Storage Sync Service by setting the incomingTrafficPolicy of the resource - to AllowVirtualNetworksOnly.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.StorageSync/storageSyncServices"},{"field":"Microsoft.StorageSync/storageSyncServices/incomingTrafficPolicy","notEquals":"AllowVirtualNetworksOnly"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21a8cd35-125e-4d13-b82d-2e19b7208bb7","type":"Microsoft.Authorization/policyDefinitions","name":"21a8cd35-125e-4d13-b82d-2e19b7208bb7"}' - headers: - cache-control: - - no-cache - content-length: - - '1352' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''21a9766a-82a5-4747-abb5-650b6dbba6d0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure SignalR Service should disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"To - improve the security of Azure SignalR Service resource, ensure that it isn''t - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.SignalRService/SignalR"},{"anyOf":[{"field":"Microsoft.SignalRService/SignalR/networkACLs.defaultAction","equals":"Allow"},{"field":"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow","exists":false},{"count":{"field":"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]"},"greater":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21a9766a-82a5-4747-abb5-650b6dbba6d0","type":"Microsoft.Authorization/policyDefinitions","name":"21a9766a-82a5-4747-abb5-650b6dbba6d0"}' - headers: - cache-control: - - no-cache - content-length: - - '1456' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''21e2995e-683e-497a-9e81-2f42ad07050a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Audit''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Audit''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAudit","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/21e2995e-683e-497a-9e81-2f42ad07050a","type":"Microsoft.Authorization/policyDefinitions","name":"21e2995e-683e-497a-9e81-2f42ad07050a"}' - headers: - cache-control: - - no-cache - content-length: - - '3231' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''224da9fe-0d38-4e79-adb3-0a6e2af942ac'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit API Apps that are - not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a API app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/224da9fe-0d38-4e79-adb3-0a6e2af942ac","type":"Microsoft.Authorization/policyDefinitions","name":"224da9fe-0d38-4e79-adb3-0a6e2af942ac"}' - headers: - cache-control: - - no-cache - content-length: - - '1144' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''225e937e-d32e-4713-ab74-13ce95b3519a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Account Management''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountManagement","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/225e937e-d32e-4713-ab74-13ce95b3519a","type":"Microsoft.Authorization/policyDefinitions","name":"225e937e-d32e-4713-ab74-13ce95b3519a"}' - headers: - cache-control: - - no-cache - content-length: - - '3283' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''22730e10-96f6-4aac-ad84-9383d35b5917'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Management ports should be closed on - your virtual machines","policyType":"BuiltIn","mode":"All","description":"Open - remote management ports are exposing your VM to a high level of risk from - Internet-based attacks. These attacks attempt to brute force credentials to - gain admin access to the machine.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"bc303248-3d14-44c2-96a0-55f5c326b5fe","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917","type":"Microsoft.Authorization/policyDefinitions","name":"22730e10-96f6-4aac-ad84-9383d35b5917"}' - headers: - cache-control: - - no-cache - content-length: - - '1147' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''22bee202-a82f-4305-9a2a-6d7f44d4dedb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Only secure connections to your Azure - Cache for Redis should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of only connections via SSL to Azure Cache for Redis. Use of secure - connections ensures authentication between the server and the service and - protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/enableNonSslPort","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/22bee202-a82f-4305-9a2a-6d7f44d4dedb","type":"Microsoft.Authorization/policyDefinitions","name":"22bee202-a82f-4305-9a2a-6d7f44d4dedb"}' - headers: - cache-control: - - no-cache - content-length: - - '1085' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''23020aa6-1135-4be2-bae2-149982b06eca'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not restrict the minimum password length to 14 characters","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not restrict the minimum password length to 14 characters. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MinimumPasswordLength"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/23020aa6-1135-4be2-bae2-149982b06eca","type":"Microsoft.Authorization/policyDefinitions","name":"23020aa6-1135-4be2-bae2-149982b06eca"}' - headers: - cache-control: - - no-cache - content-length: - - '5715' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''235359c5-7c52-4b82-9055-01c75cf9f60e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Service Bus should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Service Bus not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/virtualNetworkRules","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/235359c5-7c52-4b82-9055-01c75cf9f60e","type":"Microsoft.Authorization/policyDefinitions","name":"235359c5-7c52-4b82-9055-01c75cf9f60e"}' - headers: - cache-control: - - no-cache - content-length: - - '993' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''237b38db-ca4d-4259-9e47-7882441ca2c0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:39:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not have - a minimum password age of 1 day","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a minimum password age of 1 day","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"MinimumPasswordAge","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0","type":"Microsoft.Authorization/policyDefinitions","name":"237b38db-ca4d-4259-9e47-7882441ca2c0"}' - headers: - cache-control: - - no-cache - content-length: - - '3628' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:39:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''237e0f7e-b0e8-4ec4-ad46-8c12cb66d673'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Stream - Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Log Analytics - workspace when any Stream Analytics which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingjobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Execution","enabled":"[parameters(''logsEnabled'')]"},{"category":"Authoring","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/237e0f7e-b0e8-4ec4-ad46-8c12cb66d673","type":"Microsoft.Authorization/policyDefinitions","name":"237e0f7e-b0e8-4ec4-ad46-8c12cb66d673"}' - headers: - cache-control: - - no-cache - content-length: - - '3734' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''23b36a7c-9d26-4288-a8fd-c1d2fa284d8c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Automation accounts to - disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for Azure Automation account so that it isn''t accessible - over the public internet. This configuration helps protect them against data - leakage risks. You can limit exposure of the your Automation account resources - by creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.","metadata":{"category":"Automation","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":false}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","value":false}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/23b36a7c-9d26-4288-a8fd-c1d2fa284d8c","type":"Microsoft.Authorization/policyDefinitions","name":"23b36a7c-9d26-4288-a8fd-c1d2fa284d8c"}' - headers: - cache-control: - - no-cache - content-length: - - '1424' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''24dde96d-f0b1-425e-884f-4a1421e2dcdc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have a maximum password age of 70 days","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a maximum password age - of 70 days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/24dde96d-f0b1-425e-884f-4a1421e2dcdc","type":"Microsoft.Authorization/policyDefinitions","name":"24dde96d-f0b1-425e-884f-4a1421e2dcdc"}' - headers: - cache-control: - - no-cache - content-length: - - '3191' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''24fba194-95d6-48c0-aea7-f65bf859c598'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Infrastructure encryption should be enabled - for Azure Database for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Enable - infrastructure encryption for Azure Database for PostgreSQL servers to have - higher level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/infrastructureEncryption","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/24fba194-95d6-48c0-aea7-f65bf859c598","type":"Microsoft.Authorization/policyDefinitions","name":"24fba194-95d6-48c0-aea7-f65bf859c598"}' - headers: - cache-control: - - no-cache - content-length: - - '1093' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''25763a0a-5783-4f14-969e-79d4933eb74b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Data Lake - Storage Gen1 to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Log Analytics workspace when any Data Lake Storage Gen1 which is missing this - diagnostic settings is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/25763a0a-5783-4f14-969e-79d4933eb74b","type":"Microsoft.Authorization/policyDefinitions","name":"25763a0a-5783-4f14-969e-79d4933eb74b"}' - headers: - cache-control: - - no-cache - content-length: - - '3733' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''26a828e1-e88f-464e-bbb3-c134a282b9de'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Endpoint protection solution should be - installed on virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Audit - the existence and health of an endpoint protection solution on your virtual - machines scale sets, to protect them from threats and vulnerabilities.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"e71020c2-860c-3235-cd39-04f3f8c936d2","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de","type":"Microsoft.Authorization/policyDefinitions","name":"26a828e1-e88f-464e-bbb3-c134a282b9de"}' - headers: - cache-control: - - no-cache - content-length: - - '1102' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Metric alert rules should be configured - on Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Audit - configuration of metric alert rules on Batch account to enable the required - metric","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"metricName":{"type":"String","metadata":{"displayName":"Metric - name","description":"The metric name that an alert rule must be enabled on"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/alertRules","existenceScope":"Subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/alertRules/isEnabled","equals":"true"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.metricName","equals":"[parameters(''metricName'')]"},{"field":"Microsoft.Insights/alertRules/condition.dataSource.resourceUri","equals":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourcegroups/'', resourceGroup().name, - ''/providers/Microsoft.Batch/batchAccounts/'', field(''name''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7","type":"Microsoft.Authorization/policyDefinitions","name":"26ee67a2-f81a-4ba8-b9ce-8550bd5ee1a7"}' - headers: - cache-control: - - no-cache - content-length: - - '1473' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''270610db-8c04-438a-a739-e8e6745b22d3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3?api-version=2016-12-01 - response: - body: - string: "{\"properties\":{\"displayName\":\"Configure virtual machines to be - onboarded to Azure Automanage\",\"policyType\":\"BuiltIn\",\"mode\":\"Indexed\",\"description\":\"Azure - Automanage enrolls, configures, and monitors virtual machines with best practice - as defined in the Microsoft Cloud Adoption Framework for Azure. Use this policy - to apply Automanage to your selected scope.\",\"metadata\":{\"version\":\"4.0.0\",\"category\":\"Automanage\"},\"parameters\":{\"automanageAccount\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Automanage - account\",\"description\":\"The Automanage account is an Azure managed identity - under which virtual machine operations are performed. If this account is outside - of the scope of the assignment you must manually grant 'Contributor' permissions - (or similar) on the account to the policy assignment's principal ID.\",\"strongType\":\"Microsoft.Automanage/accounts\",\"assignPermissions\":true}},\"configurationProfileAssignment\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Configuration - profile\",\"description\":\"The management services provided are based on - whether the machine is intended to be used in a dev/test environment or production.\"},\"allowedValues\":[\"Azure - virtual machine best practices \u2013 Production\",\"Azure virtual machine - best practices \u2013 Dev/test\"]},\"effect\":{\"type\":\"String\",\"metadata\":{\"displayName\":\"Effect\",\"description\":\"Enable - or disable the execution of this policy\"},\"allowedValues\":[\"DeployIfNotExists\",\"Disabled\"]}},\"policyRule\":{\"if\":{\"allOf\":[{\"field\":\"location\",\"in\":[\"eastus\",\"eastus2\",\"westus\",\"westus2\",\"centralus\",\"southcentralus\",\"westcentralus\",\"northeurope\",\"westeurope\",\"canadacentral\",\"japaneast\",\"uksouth\",\"australiaeast\",\"australiasoutheast\"]},{\"field\":\"type\",\"equals\":\"Microsoft.Compute/virtualMachines\"},{\"anyOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"esri\",\"incredibuild\",\"MicrosoftDynamicsAX\",\"MicrosoftSharepoint\",\"MicrosoftVisualStudio\",\"MicrosoftWindowsDesktop\",\"MicrosoftWindowsServerHPCPack\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftWindowsServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"MicrosoftSQLServer\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"notLike\":\"SQL2008*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"dsvm-windows\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"standard-data-science-vm\",\"windows-data-science-vm\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"batch\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"rendering-windows2016\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"cis-windows-server-201*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"pivotal\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"bosh-windows-server*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloud-infrastructure-services\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"ad*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Windows*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]},{\"field\":\"Microsoft.Compute/imagePublisher\",\"in\":[\"microsoft-aks\",\"qubole-inc\",\"datastax\",\"couchbase\",\"scalegrid\",\"checkpoint\",\"paloaltonetworks\",\"debian\"]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"OpenLogic\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"CentOS*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"RHEL\",\"RHEL-HA\",\"RHEL-SAP\",\"RHEL-SAP-APPS\",\"RHEL-SAP-HA\",\"RHEL-SAP-HANA\",\"rhel-raw\"]},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"8*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"RedHat\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"osa\",\"rhel-byos\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"center-for-internet-security-inc\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"cis-centos-7-l1\",\"cis-centos-7-v2-1-1-l1\",\"cis-nginx-centos-7-v1-1-0-l1\",\"cis-oracle-linux-7-v2-0-0-l1\",\"cis-postgresql-11-centos-linux-7-level-1\",\"cis-rhel-7-l2\",\"cis-rhel-7-v2-2-0-l1\",\"cis-suse-linux-12-v2-0-0-l1\",\"cis-ubuntu-linux-1604-v1-0-0-l1\",\"cis-ubuntu-linux-1804-l1\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"credativ\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"11*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Suse\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"SLES*\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"15*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"Canonical\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"UbuntuServer\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"12*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-dsvm\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"in\":[\"linux-data-science-vm-ubuntu\",\"azureml\"]}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-centos-os\"},{\"field\":\"Microsoft.Compute/imageSKU\",\"notLike\":\"6*\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"cloudera\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"equals\":\"cloudera-altus-centos-os\"}]},{\"allOf\":[{\"field\":\"Microsoft.Compute/imagePublisher\",\"equals\":\"microsoft-ads\"},{\"field\":\"Microsoft.Compute/imageOffer\",\"like\":\"linux*\"}]},{\"allOf\":[{\"anyOf\":[{\"field\":\"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType\",\"like\":\"Linux*\"}]},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.id\",\"exists\":\"true\"},{\"field\":\"Microsoft.Compute/virtualMachines/storageProfile.imageReference.sku\",\"exists\":\"false\"}]}]}]},\"then\":{\"effect\":\"[parameters('effect')]\",\"details\":{\"roleDefinitionIds\":[\"/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c\"],\"type\":\"Microsoft.Automanage/configurationProfileAssignments\",\"name\":\"default\",\"existenceCondition\":{\"allOf\":[{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/configurationProfile\",\"equals\":\"[parameters('configurationProfileAssignment')]\"},{\"field\":\"Microsoft.Automanage/configurationProfileAssignments/accountId\",\"equals\":\"[parameters('automanageAccount')]\"}]},\"deployment\":{\"properties\":{\"mode\":\"incremental\",\"parameters\":{\"machineName\":{\"value\":\"[field('Name')]\"},\"automanageAccount\":{\"value\":\"[parameters('automanageAccount')]\"},\"configurationProfileAssignment\":{\"value\":\"[parameters('configurationProfileAssignment')]\"}},\"template\":{\"$schema\":\"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\"contentVersion\":\"1.0.0.0\",\"parameters\":{\"machineName\":{\"type\":\"String\"},\"automanageAccount\":{\"type\":\"string\"},\"configurationProfileAssignment\":{\"type\":\"string\"}},\"resources\":[{\"type\":\"Microsoft.Compute/virtualMachines/providers/configurationProfileAssignments\",\"apiVersion\":\"2020-06-30-preview\",\"name\":\"[concat(parameters('machineName'), - '/Microsoft.Automanage/', 'default')]\",\"properties\":{\"configurationProfile\":\"[parameters('configurationProfileAssignment')]\",\"accountId\":\"[parameters('automanageAccount')]\"}}]}}}}}}},\"id\":\"/providers/Microsoft.Authorization/policyDefinitions/270610db-8c04-438a-a739-e8e6745b22d3\",\"type\":\"Microsoft.Authorization/policyDefinitions\",\"name\":\"270610db-8c04-438a-a739-e8e6745b22d3\"}" - headers: - cache-control: - - no-cache - content-length: - - '8565' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''27960feb-a23c-4577-8d36-ef8b5f35e0be'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Flow logs should be enabled for every - network security group","policyType":"BuiltIn","mode":"Indexed","description":"Audit - for flow log resources to verify if flow log status is enabled. Enabling flow - logs allows to log information about IP traffic flowing through network security - group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"Microsoft.Network/networkWatchers/flowLogs"},{"field":"Microsoft.Network/networkWatchers/flowLogs/enabled","equals":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/27960feb-a23c-4577-8d36-ef8b5f35e0be","type":"Microsoft.Authorization/policyDefinitions","name":"27960feb-a23c-4577-8d36-ef8b5f35e0be"}' - headers: - cache-control: - - no-cache - content-length: - - '1089' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2835b622-407b-4114-9198-6f7064cbe0dc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy default Microsoft IaaSAntimalware - extension for Windows Server","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys a Microsoft IaaSAntimalware extension with a default configuration - when a VM is not configured with the antimalware extension.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"ExclusionsPaths":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file paths or locations to exclude from scanning"}},"ExclusionsExtensions":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of file extensions to exclude from scanning"}},"ExclusionsProcesses":{"type":"string","defaultValue":"","metadata":{"description":"Semicolon - delimited list of process names to exclude from scanning"}},"RealtimeProtectionEnabled":{"type":"string","defaultValue":"true","metadata":{"description":"Indicates - whether or not real time protection is enabled (default is true)"}},"ScheduledScanSettingsIsEnabled":{"type":"string","defaultValue":"false","metadata":{"description":"Indicates - whether or not custom scheduled scan settings are enabled (default is false)"}},"ScheduledScanSettingsScanType":{"type":"string","defaultValue":"Quick","metadata":{"description":"Indicates - whether scheduled scan setting type is set to Quick or Full (default is Quick)"}},"ScheduledScanSettingsDay":{"type":"string","defaultValue":"7","metadata":{"description":"Day - of the week for scheduled scan (1-Sunday, 2-Monday, ..., 7-Saturday)"}},"ScheduledScanSettingsTime":{"type":"string","defaultValue":"120","metadata":{"description":"When - to perform the scheduled scan, measured in minutes from midnight (0-1440). - For example: 0 = 12AM, 60 = 1AM, 120 = 2AM."}}},"resources":[{"name":"[concat(parameters(''vmName''),''/IaaSAntimalware'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.Azure.Security","type":"IaaSAntimalware","typeHandlerVersion":"1.3","autoUpgradeMinorVersion":true,"settings":{"AntimalwareEnabled":true,"RealtimeProtectionEnabled":"[parameters(''RealtimeProtectionEnabled'')]","ScheduledScanSettings":{"isEnabled":"[parameters(''ScheduledScanSettingsIsEnabled'')]","day":"[parameters(''ScheduledScanSettingsDay'')]","time":"[parameters(''ScheduledScanSettingsTime'')]","scanType":"[parameters(''ScheduledScanSettingsScanType'')]"},"Exclusions":{"Extensions":"[parameters(''ExclusionsExtensions'')]","Paths":"[parameters(''ExclusionsPaths'')]","Processes":"[parameters(''ExclusionsProcesses'')]"}}}}]},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"RealtimeProtectionEnabled":{"value":"true"},"ScheduledScanSettingsIsEnabled":{"value":"true"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2835b622-407b-4114-9198-6f7064cbe0dc","type":"Microsoft.Authorization/policyDefinitions","name":"2835b622-407b-4114-9198-6f7064cbe0dc"}' - headers: - cache-control: - - no-cache - content-length: - - '4574' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure SQL Server to disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property shuts down public connectivity such that - Azure SQL Server can only be accessed from a private endpoint. This configuration - disables the public network access for all databases under the Azure SQL Server.","metadata":{"category":"SQL","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"Microsoft.Sql/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Sql/servers/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b","type":"Microsoft.Authorization/policyDefinitions","name":"28b0b1e5-17ba-4963-a7a4-5a1ab4400a0b"}' - headers: - cache-control: - - no-cache - content-length: - - '1283' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2913021d-f2fd-4f3d-b958-22354e2bdbcb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for App Service should - be enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for App Service leverages the scale of the cloud, and the visibility that - Azure has as a cloud provider, to monitor for common web app attacks.","metadata":{"version":"1.0.3","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"AppServices","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2913021d-f2fd-4f3d-b958-22354e2bdbcb","type":"Microsoft.Authorization/policyDefinitions","name":"2913021d-f2fd-4f3d-b958-22354e2bdbcb"}' - headers: - cache-control: - - no-cache - content-length: - - '1054' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''295fc8b1-dc9f-4f53-9c61-3f313ceab40a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Service Bus Premium namespaces should - use a customer-managed key for encryption","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Service Bus supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Service Bus will use to encrypt data in your namespace. Note that Service - Bus only supports encryption with customer-managed keys for premium namespaces.","metadata":{"version":"1.0.0","category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"field":"Microsoft.ServiceBus/namespaces/sku.tier","equals":"Premium"},{"not":{"field":"Microsoft.ServiceBus/namespaces/encryption.keySource","equals":"Microsoft.Keyvault"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/295fc8b1-dc9f-4f53-9c61-3f313ceab40a","type":"Microsoft.Authorization/policyDefinitions","name":"295fc8b1-dc9f-4f53-9c61-3f313ceab40a"}' - headers: - cache-control: - - no-cache - content-length: - - '1323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''29829ec2-489d-4925-81b7-bda06b1718e0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - User Account Control''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - User Account Control''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsUserAccountControl","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/29829ec2-489d-4925-81b7-bda06b1718e0","type":"Microsoft.Authorization/policyDefinitions","name":"29829ec2-489d-4925-81b7-bda06b1718e0"}' - headers: - cache-control: - - no-cache - content-length: - - '3274' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2a0e14a6-b0a6-4fab-991a-187a4f81c498'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Append a tag and its value to resources","policyType":"BuiltIn","mode":"Indexed","description":"Appends - the specified tag and value when any resource which is missing this tag is - created or updated. Does not modify the tags of resources created before this - policy was applied until those resources are changed. Does not apply to resource - groups. New ''modify'' effect policies are available that support remediation - of tags on existing resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a0e14a6-b0a6-4fab-991a-187a4f81c498","type":"Microsoft.Authorization/policyDefinitions","name":"2a0e14a6-b0a6-4fab-991a-187a4f81c498"}' - headers: - cache-control: - - no-cache - content-length: - - '1237' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2a1a9cdf-e04d-429a-8416-3bfb72a1b26f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should restrict network - access using virtual network rules","policyType":"BuiltIn","mode":"Indexed","description":"Protect - your storage accounts from potential threats using virtual network rules as - a preferred method instead of IP-based filtering. Disabling IP-based filtering - prevents public IPs from accessing your storage accounts.","metadata":{"version":"1.0.1","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the audit policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"anyOf":[{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","notEquals":"Deny"},{"count":{"field":"Microsoft.Storage/storageAccounts/networkAcls.ipRules[*]"},"greaterOrEquals":1}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a1a9cdf-e04d-429a-8416-3bfb72a1b26f","type":"Microsoft.Authorization/policyDefinitions","name":"2a1a9cdf-e04d-429a-8416-3bfb72a1b26f"}' - headers: - cache-control: - - no-cache - content-length: - - '1160' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2a7a701e-dff3-4da9-9ec5-42cb98594c0b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Policy Change''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Policy Change'' for auditing changes to system audit policies. - This policy requires that the Guest Configuration prerequisites have been - deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesPolicyChange","version":"1.*","configurationParameter":{"AuditAuthenticationPolicyChange":"Audit - Authentication Policy Change;ExpectedValue","AuditAuthorizationPolicyChange":"Audit - Authorization Policy Change;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditAuthenticationPolicyChange":{"type":"String","metadata":{"displayName":"Audit - Authentication Policy Change","description":"Specifies whether audit events - are generated when changes are made to authentication policy. This setting - is useful for tracking changes in domain-level and forest-level trust and - privileges that are granted to user accounts or groups."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"AuditAuthorizationPolicyChange":{"type":"String","metadata":{"displayName":"Audit - Authorization Policy Change","description":"Specifies whether audit events - are generated for assignment and removal of user rights in user right policies, - changes in security token object permission, resource attributes changes and - Central Access Policy changes for file system objects."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPolicyChange","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Authentication Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthenticationPolicyChange''), - '','', ''Audit Authorization Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthorizationPolicyChange'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2a7a701e-dff3-4da9-9ec5-42cb98594c0b","type":"Microsoft.Authorization/policyDefinitions","name":"2a7a701e-dff3-4da9-9ec5-42cb98594c0b"}' - headers: - cache-control: - - no-cache - content-length: - - '5230' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2b18f286-371e-4b80-9887-04759970c0d3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Synapse workspace auditing settings should - have action groups configured to capture critical activities","policyType":"BuiltIn","mode":"Indexed","description":"To - ensure your audit logs are as thorough as possible, the AuditActionsAndGroups - property should include all the relevant groups. We recommend adding at least - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, FAILED_DATABASE_AUTHENTICATION_GROUP, - and BATCH_COMPLETED_GROUP. This is sometimes required for compliance with - regulatory standards.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/auditingSettings","name":"default","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]","notEquals":"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]","notEquals":"FAILED_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Synapse/workspaces/auditingSettings/auditActionsAndGroups[*]","notEquals":"BATCH_COMPLETED_GROUP"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2b18f286-371e-4b80-9887-04759970c0d3","type":"Microsoft.Authorization/policyDefinitions","name":"2b18f286-371e-4b80-9887-04759970c0d3"}' - headers: - cache-control: - - no-cache - content-length: - - '1613' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2b9ad585-36bc-4615-b300-fd4435808332'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed identity should be used in your - Web App","policyType":"BuiltIn","mode":"Indexed","description":"Use a managed - identity for enhanced authentication security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"},{"field":"Microsoft.Web/sites/config/xmanagedServiceIdentityId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332","type":"Microsoft.Authorization/policyDefinitions","name":"2b9ad585-36bc-4615-b300-fd4435808332"}' - headers: - cache-control: - - no-cache - content-length: - - '1043' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2bdd0062-9d75-436e-89df-487dd8e4b3c7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should enable - data encryption","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cognitive Services account not using data encryption. For - each Cognitive Services account with storage, should enable data encryption - with either customer managed or Microsoft managed key.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2bdd0062-9d75-436e-89df-487dd8e4b3c7","type":"Microsoft.Authorization/policyDefinitions","name":"2bdd0062-9d75-436e-89df-487dd8e4b3c7"}' - headers: - cache-control: - - no-cache - content-length: - - '1058' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2c89a2e5-7285-40fe-afe0-ae8654b92fab'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SSH access from the Internet should be - blocked","policyType":"BuiltIn","mode":"All","description":"This policy audits - any network security rule that allows SSH access from Internet","metadata":{"version":"2.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Allow"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"22"},{"value":"[if(and(not(empty(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''))), - contains(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''),''-'')), - and(lessOrEquals(int(first(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),22),greaterOrEquals(int(last(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),22)), ''false'')]","equals":"true"},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","where":{"value":"[if(and(not(empty(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')))), - contains(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')),''-'')), - and(lessOrEquals(int(first(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),22),greaterOrEquals(int(last(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),22)) , ''false'')]","equals":"true"}},"greater":0},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"22"}}]},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Internet"},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"Internet"}}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fab","type":"Microsoft.Authorization/policyDefinitions","name":"2c89a2e5-7285-40fe-afe0-ae8654b92fab"}' - headers: - cache-control: - - no-cache - content-length: - - '3056' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2c89a2e5-7285-40fe-afe0-ae8654b92fb2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Unattached disks should be encrypted","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any unattached disk without encryption enabled.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"Microsoft.Compute/disks/diskState","equals":"Unattached"},{"anyOf":[{"field":"Microsoft.Compute/disks/encryptionSettingsCollection.enabled","exists":"false"},{"field":"Microsoft.Compute/disks/encryptionSettingsCollection.enabled","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2c89a2e5-7285-40fe-afe0-ae8654b92fb2","type":"Microsoft.Authorization/policyDefinitions","name":"2c89a2e5-7285-40fe-afe0-ae8654b92fb2"}' - headers: - cache-control: - - no-cache - content-length: - - '1002' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d21331d-a4c2-4def-a9ad-ee4e1e023beb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"App Service should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any App Service not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/virtualNetworkConnections","existenceCondition":{"field":"Microsoft.Web/sites/virtualnetworkconnections/vnetResourceId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d21331d-a4c2-4def-a9ad-ee4e1e023beb","type":"Microsoft.Authorization/policyDefinitions","name":"2d21331d-a4c2-4def-a9ad-ee4e1e023beb"}' - headers: - cache-control: - - no-cache - content-length: - - '1004' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d60d3b7-aa10-454c-88a8-de39d99d17c6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not store passwords using reversible encryption","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not store passwords using reversible - encryption. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d60d3b7-aa10-454c-88a8-de39d99d17c6","type":"Microsoft.Authorization/policyDefinitions","name":"2d60d3b7-aa10-454c-88a8-de39d99d17c6"}' - headers: - cache-control: - - no-cache - content-length: - - '3222' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d67222d-05fd-4526-a171-2ee132ad9e83'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Linux VMs that allow remote connections from accounts without passwords","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that allow remote connections from accounts - without passwords. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d67222d-05fd-4526-a171-2ee132ad9e83","type":"Microsoft.Authorization/policyDefinitions","name":"2d67222d-05fd-4526-a171-2ee132ad9e83"}' - headers: - cache-control: - - no-cache - content-length: - - '4531' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d6830fb-07eb-48e7-8c4d-2a442b35f0fb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access on Azure IoT Hub - should be disabled","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - IoT Hub can only be accessed from a private endpoint.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/IotHubs"},{"field":"Microsoft.Devices/IotHubs/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d6830fb-07eb-48e7-8c4d-2a442b35f0fb","type":"Microsoft.Authorization/policyDefinitions","name":"2d6830fb-07eb-48e7-8c4d-2a442b35f0fb"}' - headers: - cache-control: - - no-cache - content-length: - - '937' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d7e144b-159c-44fc-95c1-ac3dbf5e6e54'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure IoT Hub should use customer-managed - key to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Encryption - of data at rest in IoT Hub with customer-managed key adds a second layer of - encryption on top of the default service-managed keys, enables customer control - of keys, custom rotation policies, and ability to manage access to data through - key access control. Customer-managed keys must be configured during creation - of IoT Hub. For more information on how to configure customer-managed keys, - see https://aka.ms/iotcmk.","metadata":{"version":"1.0.0-preview","category":"Internet - of Things","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"The desired effect of the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/IotHubs"},{"count":{"field":"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*]","where":{"allOf":[{"field":"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier","exists":"true"},{"field":"Microsoft.Devices/IotHubs/encryption.keyVaultProperties[*].keyIdentifier","notequals":""}]}},"lessOrEquals":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d7e144b-159c-44fc-95c1-ac3dbf5e6e54","type":"Microsoft.Authorization/policyDefinitions","name":"2d7e144b-159c-44fc-95c1-ac3dbf5e6e54"}' - headers: - cache-control: - - no-cache - content-length: - - '1507' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2d9dbfa3-927b-4cf0-9d0f-08747f971650'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed workspace virtual network on - Azure Synapse workspaces should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Enabling - a managed workspace virtual network ensures that your workspace is network - isolated from other workspaces. Data integration and Spark resources deployed - in this virtual network also provides user level isolation for Spark activities.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/managedVirtualNetwork","notEquals":"default"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2d9dbfa3-927b-4cf0-9d0f-08747f971650","type":"Microsoft.Authorization/policyDefinitions","name":"2d9dbfa3-927b-4cf0-9d0f-08747f971650"}' - headers: - cache-control: - - no-cache - content-length: - - '1058' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2f262ace-812a-4fd0-b731-b38ba9e9708d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - System objects''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - System objects'' for case insensitivity for non-Windows subsystems - and permissions of internal system objects. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsSystemobjects","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemobjects","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2f262ace-812a-4fd0-b731-b38ba9e9708d","type":"Microsoft.Authorization/policyDefinitions","name":"2f262ace-812a-4fd0-b731-b38ba9e9708d"}' - headers: - cache-control: - - no-cache - content-length: - - '3843' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2f2ee1de-44aa-4762-b6bd-0893fc3f306d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Network traffic data collection - agent should be installed on Windows virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Security - Center uses the Microsoft Dependency agent to collect network traffic data - from your Azure virtual machines to enable advanced network protection features - such as traffic visualization on the network map, network hardening recommendations - and specific network threats.","metadata":{"version":"1.0.1-preview","category":"Monitoring","preview":"true"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable Dependency Agent for Windows VMs - monitoring"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2f2ee1de-44aa-4762-b6bd-0893fc3f306d","type":"Microsoft.Authorization/policyDefinitions","name":"2f2ee1de-44aa-4762-b6bd-0893fc3f306d"}' - headers: - cache-control: - - no-cache - content-length: - - '4035' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''2fde8a98-6892-426a-83ba-050e640c0ce0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Web Application should - only be accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForWebApplication","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/2fde8a98-6892-426a-83ba-050e640c0ce0","type":"Microsoft.Authorization/policyDefinitions","name":"2fde8a98-6892-426a-83ba-050e640c0ce0"}' - headers: - cache-control: - - no-cache - content-length: - - '1256' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''30040dab-4e75-4456-8273-14b8f75d91d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Network Access''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Network Access''. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/30040dab-4e75-4456-8273-14b8f75d91d9","type":"Microsoft.Authorization/policyDefinitions","name":"30040dab-4e75-4456-8273-14b8f75d91d9"}' - headers: - cache-control: - - no-cache - content-length: - - '3257' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''308fbb08-4ab8-4e67-9b29-592e93fb94fa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for Storage should be - enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for Storage provides detections of unusual and potentially harmful attempts - to access or exploit storage accounts.","metadata":{"version":"1.0.3","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"StorageAccounts","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/308fbb08-4ab8-4e67-9b29-592e93fb94fa","type":"Microsoft.Authorization/policyDefinitions","name":"308fbb08-4ab8-4e67-9b29-592e93fb94fa"}' - headers: - cache-control: - - no-cache - content-length: - - '1025' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''30b3dfa5-a70d-4c8e-bed6-0083858f663d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Cache for Redis to disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your Azure Cache for Redis resource so that it''s - not accessible over the public internet. This helps protect the cache against - data leakage risks.","metadata":{"category":"Cache","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/Redis"},{"field":"Microsoft.Cache/Redis/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/e0f68234-74aa-48ed-b826-c38b57376e17"],"operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2020-06-01'')]","operation":"addOrReplace","field":"Microsoft.Cache/Redis/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/30b3dfa5-a70d-4c8e-bed6-0083858f663d","type":"Microsoft.Authorization/policyDefinitions","name":"30b3dfa5-a70d-4c8e-bed6-0083858f663d"}' - headers: - cache-control: - - no-cache - content-length: - - '1297' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines missing any of - specified members in the Administrators group","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group does not contain one or more members that are listed in the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AdministratorsGroupMembersToInclude","version":"1.*","configurationParameter":{"MembersToInclude":"[LocalGroup]AdministratorsGroup;MembersToInclude"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"MembersToInclude":{"type":"String","metadata":{"displayName":"Members - to include","description":"A semicolon-separated list of members that should - be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToInclude'', - ''='', parameters(''MembersToInclude'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7","type":"Microsoft.Authorization/policyDefinitions","name":"30f71ea1-ac77-4f26-9fc5-2d926bbd4ba7"}' - headers: - cache-control: - - no-cache - content-length: - - '4082' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''315c850a-272d-4502-8935-b79010405970'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that are not joined to the specified domain","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not joined to the specified domain. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"DomainName":{"type":"String","metadata":{"displayName":"[Deprecated]: - Domain Name (FQDN)","description":"The fully qualified domain name (FQDN) - that the Windows VMs should be joined to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDomainMembership","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[DomainMembership]WindowsDomainMembership;DomainName'', - ''='', parameters(''DomainName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDomainMembership"},"DomainName":{"value":"[parameters(''DomainName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"DomainName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[DomainMembership]WindowsDomainMembership;DomainName","value":"[parameters(''DomainName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[DomainMembership]WindowsDomainMembership;DomainName","value":"[parameters(''DomainName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/315c850a-272d-4502-8935-b79010405970","type":"Microsoft.Authorization/policyDefinitions","name":"315c850a-272d-4502-8935-b79010405970"}' - headers: - cache-control: - - no-cache - content-length: - - '6439' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''32133ab0-ee4b-4b44-98d6-042180979d50'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Log Analytics Agent should - be enabled for listed virtual machine images","policyType":"BuiltIn","mode":"Indexed","description":"Reports - virtual machines as non-compliant if the virtual machine image is not in the - list defined and the agent is not installed.","metadata":{"version":"2.0.0-preview","category":"Monitoring","preview":true},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"[Preview]: - Optional: List of virtual machine images that have supported Windows OS to - add to scope","description":"Example value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"[Preview]: - Optional: List of virtual machine images that have supported Linux OS to add - to scope","description":"Example value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"anyOf":[{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32133ab0-ee4b-4b44-98d6-042180979d50","type":"Microsoft.Authorization/policyDefinitions","name":"32133ab0-ee4b-4b44-98d6-042180979d50"}' - headers: - cache-control: - - no-cache - content-length: - - '6349' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''324c7761-08db-4474-9661-d1039abc92ee'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"API apps should use an Azure file share - for its content directory","policyType":"BuiltIn","mode":"Indexed","description":"The - content directory of an API app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"Microsoft.Web/sites/storageAccountRequired","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/324c7761-08db-4474-9661-d1039abc92ee","type":"Microsoft.Authorization/policyDefinitions","name":"324c7761-08db-4474-9661-d1039abc92ee"}' - headers: - cache-control: - - no-cache - content-length: - - '1112' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''32b1e4d4-6cd5-47b4-a935-169da8a5c262'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs on which the specified services are not installed and ''Running''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the specified services are not installed and ''Running''. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ServiceName":{"type":"String","metadata":{"displayName":"[Deprecated]: - Service names (supports wildcards)","description":"A semicolon-separated list - of the names of the services that should be installed and ''Running''. e.g. - ''WinRm;Wi*''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsServiceStatus","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsServiceStatus]WindowsServiceStatus1;ServiceName'', - ''='', parameters(''ServiceName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsServiceStatus"},"ServiceName":{"value":"[parameters(''ServiceName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ServiceName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName","value":"[parameters(''ServiceName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName","value":"[parameters(''ServiceName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32b1e4d4-6cd5-47b4-a935-169da8a5c262","type":"Microsoft.Authorization/policyDefinitions","name":"32b1e4d4-6cd5-47b4-a935-169da8a5c262"}' - headers: - cache-control: - - no-cache - content-length: - - '6538' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''32e6bbec-16b6-44c2-be37-c5b672d103cf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure SQL Database should have the minimal - TLS version of 1.2","policyType":"BuiltIn","mode":"Indexed","description":"Setting - minimal TLS version to 1.2 improves security by ensuring your Azure SQL Database - can only be accessed from clients using TLS 1.2. Using versions of TLS less - than 1.2 is not recommended since they have well documented security vulnerabilities.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"anyOf":[{"field":"Microsoft.Sql/servers/minimalTlsVersion","exists":false},{"field":"Microsoft.Sql/servers/minimalTlsVersion","notEquals":"1.2"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/32e6bbec-16b6-44c2-be37-c5b672d103cf","type":"Microsoft.Authorization/policyDefinitions","name":"32e6bbec-16b6-44c2-be37-c5b672d103cf"}' - headers: - cache-control: - - no-cache - content-length: - - '1094' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''331e8ea8-378a-410f-a2e5-ae22f38bb0da'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy the Linux Guest Configuration - extension to enable Guest Configuration assignments on Linux VMs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Linux Guest Configuration extension to Linux virtual machines - hosted in Azure that are supported by Guest Configuration. The Linux Guest - Configuration extension is a prerequisite for all Linux Guest Configuration - assignments and must deployed to machines before using any Linux Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"1.0.0"},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/331e8ea8-378a-410f-a2e5-ae22f38bb0da","type":"Microsoft.Authorization/policyDefinitions","name":"331e8ea8-378a-410f-a2e5-ae22f38bb0da"}' - headers: - cache-control: - - no-cache - content-length: - - '5454' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3375856c-3824-4e0e-ae6a-79e011dd4c47'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"MySQL server should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MySQL while ensuring the traffic stays within the Azure - boundary. This policy provides a way to audit if the Azure Database for MySQL - has virtual network service endpoint being used.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforMySQL/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3375856c-3824-4e0e-ae6a-79e011dd4c47","type":"Microsoft.Authorization/policyDefinitions","name":"3375856c-3824-4e0e-ae6a-79e011dd4c47"}' - headers: - cache-control: - - no-cache - content-length: - - '1180' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''33936777-f2ac-45aa-82ec-07958ec9ade4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Audit''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Audit'' for forcing audit policy subcategory and shutting down if - unable to log security audits. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsAudit","version":"1.*","configurationParameter":{"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"type":"String","metadata":{"displayName":"Audit: - Shut down system immediately if unable to log security audits","description":"Audits - if the system will shut down when unable to log Security events."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAudit","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit: - Shut down system immediately if unable to log security audits;ExpectedValue'', - ''='', parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/33936777-f2ac-45aa-82ec-07958ec9ade4","type":"Microsoft.Authorization/policyDefinitions","name":"33936777-f2ac-45aa-82ec-07958ec9ade4"}' - headers: - cache-control: - - no-cache - content-length: - - '4529' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''345fa903-145c-4fe1-8bcd-93ec2adccde8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Configure backup on virtual - machines with a given tag to an existing recovery services vault in the same - location","policyType":"BuiltIn","mode":"Indexed","description":"Enforce backup - for all virtual machines by backing them up to an existing central recovery - services vault in the same location and subscription as the virtual machine. - Doing this is useful when there is a central team in your organization managing - backups for all resources in a subscription. You can optionally include virtual - machines containing a specified tag to control the scope of assignment. See - https://aka.ms/AzureVMCentralBackupIncludeTag.","metadata":{"version":"2.0.0-preview","preview":true,"category":"Backup"},"parameters":{"vaultLocation":{"type":"String","metadata":{"displayName":"[Preview]: - Location (Specify the location of the VMs that you want to protect)","description":"Specify - the location of the VMs that you want to protect. VMs should be backed up - to a vault in the same location. For example - CanadaCentral","strongType":"location"}},"inclusionTagName":{"type":"String","metadata":{"displayName":"[Preview]: - Inclusion Tag Name","description":"Name of the tag to use for including VMs - in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy"}},"inclusionTagValue":{"type":"Array","metadata":{"displayName":"[Preview]: - Inclusion Tag Values","description":"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy."}},"backupPolicyId":{"type":"String","metadata":{"displayName":"[Preview]: - Backup Policy (of type Azure VM from a vault in the location chosen above)","description":"Specify - the ID of the Azure Backup policy to configure backup of the virtual machines. - The selected Azure Backup policy should be of type Azure Virtual Machine. - This policy needs to be in a vault that is present in the location chosen - above. For example - /subscriptions//resourceGroups//providers/Microsoft.RecoveryServices/vaults//backupPolicies/","strongType":"Microsoft.RecoveryServices/vaults/backupPolicies"}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"id","notContains":"/resourceGroups/databricks-rg-"},{"field":"location","equals":"[parameters(''vaultLocation'')]"},{"field":"[concat(''tags['', - parameters(''inclusionTagName''), '']'')]","in":"[parameters(''inclusionTagValue'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2019"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"20.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/microsoft.authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b"],"type":"Microsoft.RecoveryServices/backupprotecteditems","deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"apiVersion":"2017-05-10","name":"[concat(''DeployProtection-'',uniqueString(parameters(''protectedItems'')))]","type":"Microsoft.Resources/deployments","resourceGroup":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 4))]","subscriptionId":"[first(skip(split(parameters(''backupPolicyId''), - ''/''), 2))]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"backupPolicyId":{"type":"String"},"fabricName":{"type":"String"},"protectionContainers":{"type":"String"},"protectedItems":{"type":"String"},"sourceResourceId":{"type":"String"}},"resources":[{"type":"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems","name":"[concat(first(skip(split(parameters(''backupPolicyId''), - ''/''), 8)), ''/'', parameters(''fabricName''), ''/'',parameters(''protectionContainers''), - ''/'', parameters(''protectedItems''))]","apiVersion":"2016-06-01","properties":{"protectedItemType":"Microsoft.Compute/virtualMachines","policyId":"[parameters(''backupPolicyId'')]","sourceResourceId":"[parameters(''sourceResourceId'')]"}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"[parameters(''fabricName'')]"},"protectionContainers":{"value":"[parameters(''protectionContainers'')]"},"protectedItems":{"value":"[parameters(''protectedItems'')]"},"sourceResourceId":{"value":"[parameters(''sourceResourceId'')]"}}}}]},"parameters":{"backupPolicyId":{"value":"[parameters(''backupPolicyId'')]"},"fabricName":{"value":"Azure"},"protectionContainers":{"value":"[concat(''iaasvmcontainer;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"protectedItems":{"value":"[concat(''vm;iaasvmcontainerv2;'', - resourceGroup().name, '';'' ,field(''name''))]"},"sourceResourceId":{"value":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/'', resourceGroup().name, - ''/providers/Microsoft.Compute/virtualMachines/'',field(''name''))]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/345fa903-145c-4fe1-8bcd-93ec2adccde8","type":"Microsoft.Authorization/policyDefinitions","name":"345fa903-145c-4fe1-8bcd-93ec2adccde8"}' - headers: - cache-control: - - no-cache - content-length: - - '10102' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3470477a-b35a-49db-aca5-1073d04524fe'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Linux VMs that have accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have accounts without passwords. It also creates a system-assigned managed - identity and deploys the VM extension for Guest Configuration. This policy - should only be used along with its corresponding audit policy in an initiative. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid232"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3470477a-b35a-49db-aca5-1073d04524fe","type":"Microsoft.Authorization/policyDefinitions","name":"3470477a-b35a-49db-aca5-1073d04524fe"}' - headers: - cache-control: - - no-cache - content-length: - - '6969' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3484ce98-c0c5-4c83-994b-c5ac24785218'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Synapse workspaces should allow - outbound data traffic only to approved targets","policyType":"BuiltIn","mode":"Indexed","description":"Increase - security of your Synapse workspace by allowing outbound data traffic only - to approved targets. This helps prevention against data exfiltration by validating - the target before sending data.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.preventDataExfiltration","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3484ce98-c0c5-4c83-994b-c5ac24785218","type":"Microsoft.Authorization/policyDefinitions","name":"3484ce98-c0c5-4c83-994b-c5ac24785218"}' - headers: - cache-control: - - no-cache - content-length: - - '1047' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''34c877ad-507e-4c82-993e-3452a6e0ad3c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should restrict network - access","policyType":"BuiltIn","mode":"Indexed","description":"Network access - to storage accounts should be restricted. Configure network rules so only - applications from allowed networks can access the storage account. To allow - connections from specific internet or on-premises clients, access can be granted - to traffic from specific Azure virtual networks or to public internet IP address - ranges","metadata":{"version":"1.1.1","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34c877ad-507e-4c82-993e-3452a6e0ad3c","type":"Microsoft.Authorization/policyDefinitions","name":"34c877ad-507e-4c82-993e-3452a6e0ad3c"}' - headers: - cache-control: - - no-cache - content-length: - - '1160' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''34f95f76-5386-4de7-b824-0d8478470c9d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Logic Apps should be - enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes; when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Logic Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/34f95f76-5386-4de7-b824-0d8478470c9d","type":"Microsoft.Authorization/policyDefinitions","name":"34f95f76-5386-4de7-b824-0d8478470c9d"}' - headers: - cache-control: - - no-cache - content-length: - - '1931' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''356a906e-05e5-4625-8729-90771e0ee934'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have a maximum password age of 70 days","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have a maximum password age of 70 days. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MaximumPasswordAge"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/356a906e-05e5-4625-8729-90771e0ee934","type":"Microsoft.Authorization/policyDefinitions","name":"356a906e-05e5-4625-8729-90771e0ee934"}' - headers: - cache-control: - - no-cache - content-length: - - '5679' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''35781875-8026-4628-b19b-f6efb4d88a1d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Object Access'' for auditing file, registry, SAM, storage, - filtering, kernel, and other system types. This policy requires that the Guest - Configuration prerequisites have been deployed to the policy assignment scope. - For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesObjectAccess","version":"1.*","configurationParameter":{"AuditDetailedFileShare":"Audit - Detailed File Share;ExpectedValue","AuditFileShare":"Audit File Share;ExpectedValue","AuditFileSystem":"Audit - File System;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditDetailedFileShare":{"type":"String","metadata":{"displayName":"Audit - Detailed File Share","description":"If this policy setting is enabled, access - to all shared files and folders on the system is audited. Auditing for Success - can lead to very high volumes of events."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"]},"AuditFileShare":{"type":"String","metadata":{"displayName":"Audit - File Share","description":"Specifies whether to audit events related to file - shares: creation, deletion, modification, and access attempts. Also, it shows - failed SMB SPN checks. Event volumes can be high on DCs and File Servers."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"AuditFileSystem":{"type":"String","metadata":{"displayName":"Audit - File System","description":"Specifies whether audit events are generated when - users attempt to access file system objects. Audit events are generated only - for objects that have configured system access control lists (SACLs)."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesObjectAccess","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Detailed File Share;ExpectedValue'', ''='', parameters(''AuditDetailedFileShare''), - '','', ''Audit File Share;ExpectedValue'', ''='', parameters(''AuditFileShare''), - '','', ''Audit File System;ExpectedValue'', ''='', parameters(''AuditFileSystem'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/35781875-8026-4628-b19b-f6efb4d88a1d","type":"Microsoft.Authorization/policyDefinitions","name":"35781875-8026-4628-b19b-f6efb4d88a1d"}' - headers: - cache-control: - - no-cache - content-length: - - '5499' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''358c20a6-3f9e-4f0e-97ff-c6ce485e2aac'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"CORS should not allow every resource - to access your API App","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your API app. - Allow only required domains to interact with your API app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/358c20a6-3f9e-4f0e-97ff-c6ce485e2aac","type":"Microsoft.Authorization/policyDefinitions","name":"358c20a6-3f9e-4f0e-97ff-c6ce485e2aac"}' - headers: - cache-control: - - no-cache - content-length: - - '1040' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''35d9882c-993d-44e6-87d2-db66ce21b636'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Windows Firewall Properties''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Windows - Firewall Properties'' for firewall state, connections, rule management, and - notifications. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_WindowsFirewallProperties","version":"1.*","configurationParameter":{"WindowsFirewallDomainUseProfileSettings":"Windows - Firewall: Domain: Firewall state;ExpectedValue","WindowsFirewallDomainBehaviorForOutboundConnections":"Windows - Firewall: Domain: Outbound connections;ExpectedValue","WindowsFirewallDomainApplyLocalConnectionSecurityRules":"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue","WindowsFirewallDomainApplyLocalFirewallRules":"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue","WindowsFirewallDomainDisplayNotifications":"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue","WindowsFirewallPrivateUseProfileSettings":"Windows - Firewall: Private: Firewall state;ExpectedValue","WindowsFirewallPrivateBehaviorForOutboundConnections":"Windows - Firewall: Private: Outbound connections;ExpectedValue","WindowsFirewallPrivateApplyLocalConnectionSecurityRules":"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue","WindowsFirewallPrivateApplyLocalFirewallRules":"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue","WindowsFirewallPrivateDisplayNotifications":"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue","WindowsFirewallPublicUseProfileSettings":"Windows - Firewall: Public: Firewall state;ExpectedValue","WindowsFirewallPublicBehaviorForOutboundConnections":"Windows - Firewall: Public: Outbound connections;ExpectedValue","WindowsFirewallPublicApplyLocalConnectionSecurityRules":"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue","WindowsFirewallPublicApplyLocalFirewallRules":"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue","WindowsFirewallPublicDisplayNotifications":"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue","WindowsFirewallDomainAllowUnicastResponse":"Windows - Firewall: Domain: Allow unicast response;ExpectedValue","WindowsFirewallPrivateAllowUnicastResponse":"Windows - Firewall: Private: Allow unicast response;ExpectedValue","WindowsFirewallPublicAllowUnicastResponse":"Windows - Firewall: Public: Allow unicast response;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"WindowsFirewallDomainUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Domain profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile."}},"WindowsFirewallDomainBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile."}},"WindowsFirewallDomainApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Domain profile."}},"WindowsFirewallDomainDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Domain): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Domain - profile."}},"WindowsFirewallPrivateUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Private - profile to filter network traffic. If you select Off, Windows Firewall with - Advanced Security will not use any of the firewall rules or connection security - rules for this profile."}},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile."}},"WindowsFirewallPrivateApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Private profile."}},"WindowsFirewallPrivateDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Private): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Private - profile."}},"WindowsFirewallPublicUseProfileSettings":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Use profile settings","description":"Specifies whether - Windows Firewall with Advanced Security uses the settings for the Public profile - to filter network traffic. If you select Off, Windows Firewall with Advanced - Security will not use any of the firewall rules or connection security rules - for this profile."}},"WindowsFirewallPublicBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile."}},"WindowsFirewallPublicApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Apply local firewall rules","description":"Specifies whether - local administrators are allowed to create local firewall rules that apply - together with firewall rules configured by Group Policy for the Public profile."}},"WindowsFirewallPublicDisplayNotifications":{"type":"String","metadata":{"displayName":"Windows - Firewall (Public): Display notifications","description":"Specifies whether - Windows Firewall with Advanced Security displays notifications to the user - when a program is blocked from receiving inbound connections, for the Public - profile."}},"WindowsFirewallDomainAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Domain: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Domain profile."}},"WindowsFirewallPrivateAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Private: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Private profile."}},"WindowsFirewallPublicAllowUnicastResponse":{"type":"String","metadata":{"displayName":"Windows - Firewall: Public: Allow unicast response","description":"Specifies whether - Windows Firewall with Advanced Security permits the local computer to receive - unicast responses to its outgoing multicast or broadcast messages; for the - Public profile."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsFirewallProperties","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Windows - Firewall: Domain: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainUseProfileSettings''), - '','', ''Windows Firewall: Domain: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallDomainBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalFirewallRules''), '','', - ''Windows Firewall: Domain: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainDisplayNotifications''), '','', ''Windows - Firewall: Private: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateUseProfileSettings''), - '','', ''Windows Firewall: Private: Outbound connections;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections''), - '','', ''Windows Firewall: Private: Settings: Apply local connection security - rules;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateApplyLocalFirewallRules''), '','', - ''Windows Firewall: Private: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateDisplayNotifications''), '','', - ''Windows Firewall: Public: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPublicUseProfileSettings''), - '','', ''Windows Firewall: Public: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalFirewallRules''), '','', - ''Windows Firewall: Public: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicDisplayNotifications''), '','', ''Windows - Firewall: Domain: Allow unicast response;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainAllowUnicastResponse''), - '','', ''Windows Firewall: Private: Allow unicast response;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateAllowUnicastResponse''), '','', - ''Windows Firewall: Public: Allow unicast response;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicAllowUnicastResponse'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/35d9882c-993d-44e6-87d2-db66ce21b636","type":"Microsoft.Authorization/policyDefinitions","name":"35d9882c-993d-44e6-87d2-db66ce21b636"}' - headers: - cache-control: - - no-cache - content-length: - - '15332' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''35f9c03a-cc27-418e-9c0c-539ff999d010'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Gateway subnets should not be configured - with a network security group","policyType":"BuiltIn","mode":"All","description":"This - policy denies if a gateway subnet is configured with a network security group. - Assigning a network security group to a gateway subnet will cause the gateway - to stop functioning.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},{"field":"name","equals":"GatewaySubnet"},{"field":"Microsoft.Network/virtualNetworks/subnets/networkSecurityGroup.id","exists":"true"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/35f9c03a-cc27-418e-9c0c-539ff999d010","type":"Microsoft.Authorization/policyDefinitions","name":"35f9c03a-cc27-418e-9c0c-539ff999d010"}' - headers: - cache-control: - - no-cache - content-length: - - '863' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''361c2074-3595-4e5d-8cab-4f21dffc835c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Advanced Threat Protection on - Storage Accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Threat Protection on Storage Accounts.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Storage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/advancedThreatProtectionSettings","name":"current","existenceCondition":{"field":"Microsoft.Security/advancedThreatProtectionSettings/isEnabled","equals":"true"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"storageAccountName":{"type":"string"}},"resources":[{"apiVersion":"2019-01-01","type":"Microsoft.Storage/storageAccounts/providers/advancedThreatProtectionSettings","name":"[concat(parameters(''storageAccountName''), - ''/Microsoft.Security/current'')]","properties":{"isEnabled":true}}]},"parameters":{"storageAccountName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/361c2074-3595-4e5d-8cab-4f21dffc835c","type":"Microsoft.Authorization/policyDefinitions","name":"361c2074-3595-4e5d-8cab-4f21dffc835c"}' - headers: - cache-control: - - no-cache - content-length: - - '1626' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3657f5a0-770e-44a3-b44e-9431ba1e9735'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Automation account variables should be - encrypted","policyType":"BuiltIn","mode":"All","description":"It is important - to enable encryption of Automation account variable assets when storing sensitive - data","metadata":{"version":"1.1.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts/variables"},{"field":"Microsoft.Automation/automationAccounts/variables/isEncrypted","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3657f5a0-770e-44a3-b44e-9431ba1e9735","type":"Microsoft.Authorization/policyDefinitions","name":"3657f5a0-770e-44a3-b44e-9431ba1e9735"}' - headers: - cache-control: - - no-cache - content-length: - - '947' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''36d49e87-48c4-4f2e-beed-ba4ed02b71f5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Threat Detection on SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures that Threat Detection is enabled on SQL Servers.","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"}},"variables":{},"resources":[{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":false}}]},"parameters":{"serverName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36d49e87-48c4-4f2e-beed-ba4ed02b71f5","type":"Microsoft.Authorization/policyDefinitions","name":"36d49e87-48c4-4f2e-beed-ba4ed02b71f5"}' - headers: - cache-control: - - no-cache - content-length: - - '1423' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''36e17963-7202-494a-80c3-f508211c826b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Network Security''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Network Security''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network Security: Configure encryption types allowed for Kerberos","description":"Specifies - the encryption types that Kerberos is allowed to use."}},"NetworkSecurityLANManagerAuthenticationLevel":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network security: LAN Manager authentication level","description":"Specify - which challenge-response authentication protocol is used for network logons. - This choice affects the level of authentication protocol used by clients, - the level of session security negotiated, and the level of authentication - accepted by servers."}},"NetworkSecurityLDAPClientSigningRequirements":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network security: LDAP client signing requirements","description":"Specify - the level of data signing that is requested on behalf of clients that issue - LDAP BIND requests."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) clients","description":"Specifies which behaviors are allowed by clients - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services. See https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers - for more information."}},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network security: Minimum session security for NTLM SSP based (including secure - RPC) servers","description":"Specifies which behaviors are allowed by servers - for applications using the NTLM Security Support Provider (SSP). The SSP Interface - (SSPI) is used by applications that need authentication services."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkSecurity","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue'', - ''='', parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos''), - '','', ''Network security: LAN Manager authentication level;ExpectedValue'', - ''='', parameters(''NetworkSecurityLANManagerAuthenticationLevel''), '','', - ''Network security: LDAP client signing requirements;ExpectedValue'', ''='', - parameters(''NetworkSecurityLDAPClientSigningRequirements''), '','', ''Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients''), - '','', ''Network security: Minimum session security for NTLM SSP based (including - secure RPC) servers;ExpectedValue'', ''='', parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsNetworkSecurity"},"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},"NetworkSecurityLANManagerAuthenticationLevel":{"value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},"NetworkSecurityLDAPClientSigningRequirements":{"value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NetworkSecurityConfigureEncryptionTypesAllowedForKerberos":{"type":"string"},"NetworkSecurityLANManagerAuthenticationLevel":{"type":"string"},"NetworkSecurityLDAPClientSigningRequirements":{"type":"string"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients":{"type":"string"},"NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue","value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},{"name":"Network - security: LAN Manager authentication level;ExpectedValue","value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},{"name":"Network - security: LDAP client signing requirements;ExpectedValue","value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - Security: Configure encryption types allowed for Kerberos;ExpectedValue","value":"[parameters(''NetworkSecurityConfigureEncryptionTypesAllowedForKerberos'')]"},{"name":"Network - security: LAN Manager authentication level;ExpectedValue","value":"[parameters(''NetworkSecurityLANManagerAuthenticationLevel'')]"},{"name":"Network - security: LDAP client signing requirements;ExpectedValue","value":"[parameters(''NetworkSecurityLDAPClientSigningRequirements'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - clients;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCClients'')]"},{"name":"Network - security: Minimum session security for NTLM SSP based (including secure RPC) - servers;ExpectedValue","value":"[parameters(''NetworkSecurityMinimumSessionSecurityForNTLMSSPBasedIncludingSecureRPCServers'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36e17963-7202-494a-80c3-f508211c826b","type":"Microsoft.Authorization/policyDefinitions","name":"36e17963-7202-494a-80c3-f508211c826b"}' - headers: - cache-control: - - no-cache - content-length: - - '11911' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''36ea4b4b-0f7f-4a54-89fa-ab18f555a172'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Modify - Configure Azure Event Grid topics - to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for Azure Event Grid resource so that it isn''t accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.","metadata":{"category":"Event - Grid","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/topics"},{"field":"kind","notEquals":"AzureArc"},{"field":"Microsoft.EventGrid/topics/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2020-04-01-preview'')]","operation":"addOrReplace","field":"Microsoft.EventGrid/topics/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36ea4b4b-0f7f-4a54-89fa-ab18f555a172","type":"Microsoft.Authorization/policyDefinitions","name":"36ea4b4b-0f7f-4a54-89fa-ab18f555a172"}' - headers: - cache-control: - - no-cache - content-length: - - '1497' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''36f4658a-848a-467b-881c-e6fa20cf75fc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure Event Grid domains - with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they''ll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"Specifies the subnet to use to configure - private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventGrid/domains"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventGrid/domains/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventGrid/domains/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["domain"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/36f4658a-848a-467b-881c-e6fa20cf75fc","type":"Microsoft.Authorization/policyDefinitions","name":"36f4658a-848a-467b-881c-e6fa20cf75fc"}' - headers: - cache-control: - - no-cache - content-length: - - '3574' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3750712b-43d0-478e-9966-d2c26f6141b9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Interactive Logon''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Interactive Logon''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsInteractiveLogon","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsInteractiveLogon"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3750712b-43d0-478e-9966-d2c26f6141b9","type":"Microsoft.Authorization/policyDefinitions","name":"3750712b-43d0-478e-9966-d2c26f6141b9"}' - headers: - cache-control: - - no-cache - content-length: - - '5781' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''37e0d2fe-28a5-43d6-a273-67d37d1f5606'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should be migrated to - new Azure Resource Manager resources","policyType":"BuiltIn","mode":"All","description":"Use - new Azure Resource Manager for your storage accounts to provide security enhancements - such as: stronger access control (RBAC), better auditing, Azure Resource Manager - based deployment and governance, access to managed identities, access to key - vault for secrets, Azure AD-based authentication and support for tags and - resource groups for easier security management","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","in":["Microsoft.ClassicStorage/storageAccounts","Microsoft.Storage/StorageAccounts"]},{"value":"[field(''type'')]","equals":"Microsoft.ClassicStorage/storageAccounts"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/37e0d2fe-28a5-43d6-a273-67d37d1f5606","type":"Microsoft.Authorization/policyDefinitions","name":"37e0d2fe-28a5-43d6-a273-67d37d1f5606"}' - headers: - cache-control: - - no-cache - content-length: - - '1249' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''383856f8-de7f-44a2-81fc-e5135b5c2aa4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in IoT Hub should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised","metadata":{"version":"3.0.1","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Devices/IotHubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"not":{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"}},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/383856f8-de7f-44a2-81fc-e5135b5c2aa4","type":"Microsoft.Authorization/policyDefinitions","name":"383856f8-de7f-44a2-81fc-e5135b5c2aa4"}' - headers: - cache-control: - - no-cache - content-length: - - '1847' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''385f5831-96d4-41db-9a3c-cd3af78aaae6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy the Windows Guest Configuration - extension to enable Guest Configuration assignments on Windows VMs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Windows Guest Configuration extension to Windows virtual - machines hosted in Azure that are supported by Guest Configuration. The Windows - Guest Configuration extension is a prerequisite for all Windows Guest Configuration - assignments and must deployed to machines before using any Windows Guest Configuration - policy definition. For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"1.0.0"},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/385f5831-96d4-41db-9a3c-cd3af78aaae6","type":"Microsoft.Authorization/policyDefinitions","name":"385f5831-96d4-41db-9a3c-cd3af78aaae6"}' - headers: - cache-control: - - no-cache - content-length: - - '4156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3965c43d-b5f4-482e-b74a-d89ee0e0b3a8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Advanced data security - settings for SQL Managed Instance should contain an email address for security - alerts","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that - an email address is provided for the ''Send alerts to'' field in the advanced - data security settings. This email address receives alert notifications when - anomalous activities are detected on SQL Managed Instance.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"allOf":[{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]","notEquals":""},{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAddresses[*]","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3965c43d-b5f4-482e-b74a-d89ee0e0b3a8","type":"Microsoft.Authorization/policyDefinitions","name":"3965c43d-b5f4-482e-b74a-d89ee0e0b3a8"}' - headers: - cache-control: - - no-cache - content-length: - - '1351' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''399b2637-a50f-4f95-96f8-3a145476eb15'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"FTPS only should be required in your - Function App","policyType":"BuiltIn","mode":"Indexed","description":"Enable - FTPS enforcement for enhanced security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","in":["FtpsOnly","Disabled"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/399b2637-a50f-4f95-96f8-3a145476eb15","type":"Microsoft.Authorization/policyDefinitions","name":"399b2637-a50f-4f95-96f8-3a145476eb15"}' - headers: - cache-control: - - no-cache - content-length: - - '944' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3a003702-13d2-4679-941b-937e58c443f0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Synapse managed private endpoints should - only connect to resources in approved Azure Active Directory tenants","policyType":"BuiltIn","mode":"Indexed","description":"Protect - your Synapse workspace by only allowing connections to resources in approved - Azure Active Directory (Azure AD) tenants. The approved Azure AD tenants can - be defined during policy assignment.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"allowedTenantIds":{"type":"Array","metadata":{"displayName":"List - of Allowed Tenant Ids for private endpoint creation","description":"This parameter - defines the list of Allowed Tenant Ids that are allowed to create managed - private endpoints in the workspaces"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]","where":{"field":"Microsoft.Synapse/workspaces/managedVirtualNetworkSettings.allowedAadTenantIdsForLinking[*]","notIn":"[parameters(''allowedTenantIds'')]"}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3a003702-13d2-4679-941b-937e58c443f0","type":"Microsoft.Authorization/policyDefinitions","name":"3a003702-13d2-4679-941b-937e58c443f0"}' - headers: - cache-control: - - no-cache - content-length: - - '1503' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3a58212a-c829-4f13-9872-6371df2fd0b4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Infrastructure encryption should be enabled - for Azure Database for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Enable - infrastructure encryption for Azure Database for MySQL servers to have higher - level of assurance that the data is secure. When infrastructure encryption - is enabled, the data at rest is encrypted twice using FIPS 140-2 compliant - Microsoft managed keys.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/infrastructureEncryption","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3a58212a-c829-4f13-9872-6371df2fd0b4","type":"Microsoft.Authorization/policyDefinitions","name":"3a58212a-c829-4f13-9872-6371df2fd0b4"}' - headers: - cache-control: - - no-cache - content-length: - - '1074' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3aa2661b-02d7-4ba6-99bc-dc36b10489fd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Administrative Templates - Control Panel''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Administrative - Templates - Control Panel'' for input personalization and prevention of enabling - lock screens. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_AdministrativeTemplatesControlPanel","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesControlPanel","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3aa2661b-02d7-4ba6-99bc-dc36b10489fd","type":"Microsoft.Authorization/policyDefinitions","name":"3aa2661b-02d7-4ba6-99bc-dc36b10489fd"}' - headers: - cache-control: - - no-cache - content-length: - - '3844' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3abeb944-26af-43ee-b83d-32aaf060fb94'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Pod Security Policies should - be defined on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"Define - Pod Security Policies to reduce the attack vector by removing unnecessary - application privileges. It is recommended to configure Pod Security Policies - to only allow pods to access the resources which they have permissions to - access.","metadata":{"version":"1.0.0-deprecated","category":"Security Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/enablePodSecurityPolicy","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3abeb944-26af-43ee-b83d-32aaf060fb94","type":"Microsoft.Authorization/policyDefinitions","name":"3abeb944-26af-43ee-b83d-32aaf060fb94"}' - headers: - cache-control: - - no-cache - content-length: - - '1225' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3b3b0c27-08d2-4b32-879d-19930bee3266'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Synapse workspaces with - private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - Synapse workspaces, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Dev"],"requestMessage":"Auto - approved by policy assignment"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3b3b0c27-08d2-4b32-879d-19930bee3266","type":"Microsoft.Authorization/policyDefinitions","name":"3b3b0c27-08d2-4b32-879d-19930bee3266"}' - headers: - cache-control: - - no-cache - content-length: - - '3576' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3b980d31-7904-4bb7-8575-5665739a8052'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"An activity log alert should exist for - specific Security operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Security operations with no activity log alerts configured.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Security Operation name for which activity log alert - should exist"},"allowedValues":["Microsoft.Security/policies/write","Microsoft.Security/securitySolutions/write","Microsoft.Security/securitySolutions/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Security"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3b980d31-7904-4bb7-8575-5665739a8052","type":"Microsoft.Authorization/policyDefinitions","name":"3b980d31-7904-4bb7-8575-5665739a8052"}' - headers: - cache-control: - - no-cache - content-length: - - '2029' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3be22e3b-d919-47aa-805e-8985dbeb0ad9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Dependency agent to - be enabled on Windows virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Windows virtual machine scale sets if the virtual machine - image is in the list defined and the agent is not installed. If your scale - set upgradePolicy is set to Manual, you need to apply the extension to all - the virtual machines in the set by updating them.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgentWindows","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentWindows","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3be22e3b-d919-47aa-805e-8985dbeb0ad9","type":"Microsoft.Authorization/policyDefinitions","name":"3be22e3b-d919-47aa-805e-8985dbeb0ad9"}' - headers: - cache-control: - - no-cache - content-length: - - '5726' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3c14b034-bcb6-4905-94e7-5b8e98a47b65'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"PostgreSQL server should use a virtual - network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for PostgreSQL while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for PostgreSQL has virtual network service endpoint being used.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c14b034-bcb6-4905-94e7-5b8e98a47b65","type":"Microsoft.Authorization/policyDefinitions","name":"3c14b034-bcb6-4905-94e7-5b8e98a47b65"}' - headers: - cache-control: - - no-cache - content-length: - - '1210' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3c1b3629-c8f8-4bf6-862c-037cb9094038'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:40:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Log Analytics agent - to be enabled on Windows virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Windows virtual machine scale sets if the virtual - machine image is in the list defined and the agent is not installed. If your - scale set upgradePolicy is set to Manual, you need to apply the extension - to all the virtual machine in the set by updating them.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Log Analytics workspace is used to receive - performance data. If this workspace is outside of the scope of the assignment - you must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MicrosoftMonitoringAgent","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent","vmExtensionTypeHandlerVersion":"1.0"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c1b3629-c8f8-4bf6-862c-037cb9094038","type":"Microsoft.Authorization/policyDefinitions","name":"3c1b3629-c8f8-4bf6-862c-037cb9094038"}' - headers: - cache-control: - - no-cache - content-length: - - '6536' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:40:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities in security configuration - on your virtual machine scale sets should be remediated","policyType":"BuiltIn","mode":"Indexed","description":"Audit - the OS vulnerabilities on your virtual machine scale sets to protect them - from attacks.","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"8941d121-f740-35f6-952c-6561d2b38d36","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4","type":"Microsoft.Authorization/policyDefinitions","name":"3c735d8a-a4ba-4a3a-b7cf-db7754cf57f4"}' - headers: - cache-control: - - no-cache - content-length: - - '1062' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3cf2ab00-13f1-4d0c-8971-2ac904541a7e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add system-assigned managed identity - to enable Guest Configuration assignments on virtual machines with no identities","policyType":"BuiltIn","mode":"Indexed","description":"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration but do not have any managed - identities. A system-assigned managed identity is a prerequisite for all Guest - Configuration assignments and must be added to machines before using any Guest - Configuration policy definitions. For more information on Guest Configuration, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"1.0.0"},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"value":"[requestContext().apiVersion]","greaterOrEquals":"2018-10-01"},{"anyOf":[{"field":"identity.type","exists":"false"},{"field":"identity.type","equals":"None"}]}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"identity.type","value":"SystemAssigned"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3cf2ab00-13f1-4d0c-8971-2ac904541a7e","type":"Microsoft.Authorization/policyDefinitions","name":"3cf2ab00-13f1-4d0c-8971-2ac904541a7e"}' - headers: - cache-control: - - no-cache - content-length: - - '6469' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3d2a3320-2a72-4c67-ac5f-caa40fbee2b2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that have extra - accounts in the Administrators group","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains members that are not listed in the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AdministratorsGroupMembers","version":"1.*","configurationParameter":{"Members":"[LocalGroup]AdministratorsGroup;Members"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"Members":{"type":"String","metadata":{"displayName":"Members","description":"A - semicolon-separated list of all the expected members of the Administrators - local group. Ex: Administrator; myUser1; myUser2"},"allowedValues":[]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;Members'', - ''='', parameters(''Members'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d2a3320-2a72-4c67-ac5f-caa40fbee2b2","type":"Microsoft.Authorization/policyDefinitions","name":"3d2a3320-2a72-4c67-ac5f-caa40fbee2b2"}' - headers: - cache-control: - - no-cache - content-length: - - '3996' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3d5da587-71bd-41f5-ac95-dd3330c2d58d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Search - Services to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Search Services to stream to a regional Event - Hub when any Search Services which is missing this diagnostic settings is - created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Search - Services in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Search/searchServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d5da587-71bd-41f5-ac95-dd3330c2d58d","type":"Microsoft.Authorization/policyDefinitions","name":"3d5da587-71bd-41f5-ac95-dd3330c2d58d"}' - headers: - cache-control: - - no-cache - content-length: - - '4028' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3d7b154e-2700-4c8c-9e46-cb65ac1578c2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Devices''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Devices''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsDevices","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d7b154e-2700-4c8c-9e46-cb65ac1578c2","type":"Microsoft.Authorization/policyDefinitions","name":"3d7b154e-2700-4c8c-9e46-cb65ac1578c2"}' - headers: - cache-control: - - no-cache - content-length: - - '3237' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3d8640fc-63f6-4734-8dcb-cfd3d8c78f38'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy default Log Analytics - Agent for Ubuntu VMs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics Agent on Ubuntu VMs, and connects to the - selected Log Analytics workspace","metadata":{"version":"1.0.0-deprecated","category":"Compute","deprecated":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Deprecated]: - Log Analytics workspace","description":"Select Log Analytics workspace from - dropdown list. If this workspace is outside of the scope of the assignment - you must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS","16.04-LTS","16.04.0-LTS","14.04.2-LTS","12.04.5-LTS"]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"resources":[{"name":"[concat(parameters(''vmName''),''/omsPolicy'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","apiVersion":"2017-12-01","properties":{"publisher":"Microsoft.EnterpriseCloud.Monitoring","type":"OmsAgentForLinux","typeHandlerVersion":"1.4","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - monitoring for Linux VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d8640fc-63f6-4734-8dcb-cfd3d8c78f38","type":"Microsoft.Authorization/policyDefinitions","name":"3d8640fc-63f6-4734-8dcb-cfd3d8c78f38"}' - headers: - cache-control: - - no-cache - content-length: - - '2816' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3d9f5e4c-9947-4579-9539-2a7695fbc187'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"App Configuration should disable public - network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that the resource isn''t - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},{"field":"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3d9f5e4c-9947-4579-9539-2a7695fbc187","type":"Microsoft.Authorization/policyDefinitions","name":"3d9f5e4c-9947-4579-9539-2a7695fbc187"}' - headers: - cache-control: - - no-cache - content-length: - - '1091' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3e4e2bd5-15a2-4628-b3e1-58977e9793f3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not have - the specified Windows PowerShell modules installed","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a module isn''t - available in a location specified by the environment variable PSModulePath.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsPowerShellModules","version":"1.*","configurationParameter":{"Modules":"[PowerShellModules]PowerShellModules1;Modules"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"Modules":{"type":"String","metadata":{"displayName":"PowerShell - Modules","description":"A semicolon-separated list of the names of the PowerShell - modules that should be installed. You may also specify a specific version - of a module that should be installed by including a comma after the module - name, followed by the desired version. Example: PSDscResources; SqlServerDsc, - 12.0.0.0; ComputerManagementDsc, 6.1.0.0"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellModules","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellModules]PowerShellModules1;Modules'', - ''='', parameters(''Modules'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3","type":"Microsoft.Authorization/policyDefinitions","name":"3e4e2bd5-15a2-4628-b3e1-58977e9793f3"}' - headers: - cache-control: - - no-cache - content-length: - - '4389' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3e596b57-105f-48a6-be97-03e9243bad6e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor solution ''Security and - Audit'' must be deployed","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that Security and Audit is deployed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.OperationsManagement/solutions","existenceCondition":{"allOf":[{"field":"Microsoft.OperationsManagement/solutions/provisioningState","equals":"Succeeded"},{"field":"name","like":"Security(*)"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3e596b57-105f-48a6-be97-03e9243bad6e","type":"Microsoft.Authorization/policyDefinitions","name":"3e596b57-105f-48a6-be97-03e9243bad6e"}' - headers: - cache-control: - - no-cache - content-length: - - '989' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3fe37002-5d00-4b37-a301-da09e3a0ca66'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit API Applications - that are not using latest supported PHP Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported PHP version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPHP","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3fe37002-5d00-4b37-a301-da09e3a0ca66","type":"Microsoft.Authorization/policyDefinitions","name":"3fe37002-5d00-4b37-a301-da09e3a0ca66"}' - headers: - cache-control: - - no-cache - content-length: - - '1192' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Network Access''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Network Access'' for including access for anonymous users, local - accounts, and remote access to the registry. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsNetworkAccess","version":"1.*","configurationParameter":{"NetworkAccessRemotelyAccessibleRegistryPaths":"Network - access: Remotely accessible registry paths;ExpectedValue","NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue","NetworkAccessSharesThatCanBeAccessedAnonymously":"Network - access: Shares that can be accessed anonymously;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"NetworkAccessRemotelyAccessibleRegistryPaths":{"type":"String","metadata":{"displayName":"Network - access: Remotely accessible registry paths","description":"Specifies which - registry paths will be accessible over the network, regardless of the users - or groups listed in the access control list (ACL) of the `winreg` registry - key."}},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"type":"String","metadata":{"displayName":"Network - access: Remotely accessible registry paths and sub-paths","description":"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key."}},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"type":"String","metadata":{"displayName":"Network - access: Shares that can be accessed anonymously","description":"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkAccess","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - access: Remotely accessible registry paths;ExpectedValue'', ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPaths''), - '','', ''Network access: Remotely accessible registry paths and sub-paths;ExpectedValue'', - ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths''), - '','', ''Network access: Shares that can be accessed anonymously;ExpectedValue'', - ''='', parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd","type":"Microsoft.Authorization/policyDefinitions","name":"3ff60f98-7fa4-410a-9f7f-0b00f5afdbdd"}' - headers: - cache-control: - - no-cache - content-length: - - '5918' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''404c3081-a854-4457-ae30-26a93ef643f9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Secure transfer to storage accounts should - be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit requirement - of Secure transfer in your storage account. Secure transfer is an option that - forces your storage account to accept requests only from secure connections - (HTTPS). Use of HTTPS ensures authentication between the server and the service - and protects data in transit from network layer attacks such as man-in-the-middle, - eavesdropping, and session-hijacking","metadata":{"version":"2.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"anyOf":[{"allOf":[{"value":"[requestContext().apiVersion]","less":"2019-04-01"},{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","exists":"false"}]},{"field":"Microsoft.Storage/storageAccounts/supportsHttpsTrafficOnly","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/404c3081-a854-4457-ae30-26a93ef643f9","type":"Microsoft.Authorization/policyDefinitions","name":"404c3081-a854-4457-ae30-26a93ef643f9"}' - headers: - cache-control: - - no-cache - content-length: - - '1375' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''40917425-69db-4018-8dae-2a0556cef899'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Administrative Templates - System''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - System''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AlwaysUseClassicLogon":{"type":"String","metadata":{"displayName":"[Deprecated]: - Always use classic logon","description":"Specifies whether to force the user - to log on to the computer using the classic logon screen. This setting only - works when the computer is not on a domain."}},"BootStartDriverInitializationPolicy":{"type":"String","metadata":{"displayName":"[Deprecated]: - Boot-Start Driver Initialization Policy","description":"Specifies which boot-start - drivers are initialized based on a classification determined by an Early Launch - Antimalware boot-start driver."}},"EnableWindowsNTPClient":{"type":"String","metadata":{"displayName":"[Deprecated]: - Enable Windows NTP Client","description":"Specifies whether the Windows NTP - Client is enabled. Enabling the Windows NTP Client allows your computer to - synchronize its computer clock with other NTP servers."}},"TurnOnConveniencePINSignin":{"type":"String","metadata":{"displayName":"[Deprecated]: - Turn on convenience PIN sign-in","description":"Specifies whether a domain - user can sign in using a convenience PIN."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Always - use classic logon;ExpectedValue'', ''='', parameters(''AlwaysUseClassicLogon''), - '','', ''Boot-Start Driver Initialization Policy;ExpectedValue'', ''='', parameters(''BootStartDriverInitializationPolicy''), - '','', ''Enable Windows NTP Client;ExpectedValue'', ''='', parameters(''EnableWindowsNTPClient''), - '','', ''Turn on convenience PIN sign-in;ExpectedValue'', ''='', parameters(''TurnOnConveniencePINSignin'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesSystem"},"AlwaysUseClassicLogon":{"value":"[parameters(''AlwaysUseClassicLogon'')]"},"BootStartDriverInitializationPolicy":{"value":"[parameters(''BootStartDriverInitializationPolicy'')]"},"EnableWindowsNTPClient":{"value":"[parameters(''EnableWindowsNTPClient'')]"},"TurnOnConveniencePINSignin":{"value":"[parameters(''TurnOnConveniencePINSignin'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AlwaysUseClassicLogon":{"type":"string"},"BootStartDriverInitializationPolicy":{"type":"string"},"EnableWindowsNTPClient":{"type":"string"},"TurnOnConveniencePINSignin":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Always - use classic logon;ExpectedValue","value":"[parameters(''AlwaysUseClassicLogon'')]"},{"name":"Boot-Start - Driver Initialization Policy;ExpectedValue","value":"[parameters(''BootStartDriverInitializationPolicy'')]"},{"name":"Enable - Windows NTP Client;ExpectedValue","value":"[parameters(''EnableWindowsNTPClient'')]"},{"name":"Turn - on convenience PIN sign-in;ExpectedValue","value":"[parameters(''TurnOnConveniencePINSignin'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Always - use classic logon;ExpectedValue","value":"[parameters(''AlwaysUseClassicLogon'')]"},{"name":"Boot-Start - Driver Initialization Policy;ExpectedValue","value":"[parameters(''BootStartDriverInitializationPolicy'')]"},{"name":"Enable - Windows NTP Client;ExpectedValue","value":"[parameters(''EnableWindowsNTPClient'')]"},{"name":"Turn - on convenience PIN sign-in;ExpectedValue","value":"[parameters(''TurnOnConveniencePINSignin'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40917425-69db-4018-8dae-2a0556cef899","type":"Microsoft.Authorization/policyDefinitions","name":"40917425-69db-4018-8dae-2a0556cef899"}' - headers: - cache-control: - - no-cache - content-length: - - '8836' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''40cec1dd-a100-4920-b15b-3024fe8901ab'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Machine Learning workspaces should - use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Machine Learning workspaces, - data leakage risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.1.0","category":"Machine - Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"count":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40cec1dd-a100-4920-b15b-3024fe8901ab","type":"Microsoft.Authorization/policyDefinitions","name":"40cec1dd-a100-4920-b15b-3024fe8901ab"}' - headers: - cache-control: - - no-cache - content-length: - - '1461' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''40df99da-1232-49b1-a39a-6da8d878f469'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Inherit a tag from the subscription if - missing","policyType":"BuiltIn","mode":"Indexed","description":"Adds the specified - tag with its value from the containing subscription when any resource missing - this tag is created or updated. Existing resources can be remediated by triggering - a remediation task. If the tag exists with a different value it will not be - changed.","metadata":{"category":"Tags","version":"1.0.0"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[subscription().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[subscription().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/40df99da-1232-49b1-a39a-6da8d878f469","type":"Microsoft.Authorization/policyDefinitions","name":"40df99da-1232-49b1-a39a-6da8d878f469"}' - headers: - cache-control: - - no-cache - content-length: - - '1255' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''41388f1c-2db0-4c25-95b2-35d7f5ccbfa9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor should collect activity - logs from all regions","policyType":"BuiltIn","mode":"All","description":"This - policy audits the Azure Monitor log profile which does not export activities - from all Azure supported regions including global.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiacentral2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiaeast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"australiasoutheast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"brazilsouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"canadacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"canadaeast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"centralindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"centralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastasia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"eastus2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"francecentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"francesouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"japaneast"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"japanwest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"koreacentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"koreasouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"northcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"northeurope"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southafricanorth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southafricawest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"southeastasia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uaecentral"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uaenorth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"uksouth"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"ukwest"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westcentralus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westeurope"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westindia"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westus"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"westus2"}},{"not":{"field":"Microsoft.Insights/logProfiles/locations[*]","notEquals":"global"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/41388f1c-2db0-4c25-95b2-35d7f5ccbfa9","type":"Microsoft.Authorization/policyDefinitions","name":"41388f1c-2db0-4c25-95b2-35d7f5ccbfa9"}' - headers: - cache-control: - - no-cache - content-length: - - '4068' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''41425d9f-d1a5-499a-9932-f8ed8453932c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Temp disks and cache for agent node pools - in Azure Kubernetes Service clusters should be encrypted at host","policyType":"BuiltIn","mode":"Indexed","description":"To - enhance data security, the data stored on the virtual machine (VM) host of - your Azure Kubernetes Service nodes VMs should be encrypted at rest. This - is a common requirement in many regulatory and industry compliance standards.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"''Audit'' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. ''Deny'' blocks the non-compliant resource creation or update. - ''Disabled'' turns off the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"count":{"field":"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*]","where":{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost","exists":"False"},{"field":"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost","equals":""},{"field":"Microsoft.ContainerService/managedClusters/agentPoolProfiles[*].enableEncryptionAtHost","equals":"false"}]}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/41425d9f-d1a5-499a-9932-f8ed8453932c","type":"Microsoft.Authorization/policyDefinitions","name":"41425d9f-d1a5-499a-9932-f8ed8453932c"}' - headers: - cache-control: - - no-cache - content-length: - - '1610' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4221adbc-5c0f-474f-88b7-037a99e6114c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is pending - reboot for any of the following reasons: component based servicing, Windows - Update, pending file rename, pending computer rename, configuration manager - pending reboot. Each detection has a unique registry path.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsPendingReboot","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPendingReboot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4221adbc-5c0f-474f-88b7-037a99e6114c","type":"Microsoft.Authorization/policyDefinitions","name":"4221adbc-5c0f-474f-88b7-037a99e6114c"}' - headers: - cache-control: - - no-cache - content-length: - - '3588' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''425bea59-a659-4cbb-8d31-34499bd030b8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web Application Firewall (WAF) should - use the specified mode for Azure Front Door Service","policyType":"BuiltIn","mode":"Indexed","description":"Mandates - the use of ''Detection'' or ''Prevention'' mode to be active on all Web Application - Firewall policies for Azure Front Door Service.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"modeRequirement":{"type":"String","metadata":{"displayName":"Mode - Requirement","description":"Mode required for all WAF policies"},"allowedValues":["Prevention","Detection"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoorwebapplicationfirewallpolicies"},{"field":"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/425bea59-a659-4cbb-8d31-34499bd030b8","type":"Microsoft.Authorization/policyDefinitions","name":"425bea59-a659-4cbb-8d31-34499bd030b8"}' - headers: - cache-control: - - no-cache - content-length: - - '1218' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''428256e6-1fac-4f48-a757-df34c2b3336d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Batch accounts should - be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes; when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/428256e6-1fac-4f48-a757-df34c2b3336d","type":"Microsoft.Authorization/policyDefinitions","name":"428256e6-1fac-4f48-a757-df34c2b3336d"}' - headers: - cache-control: - - no-cache - content-length: - - '1934' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''42a07bbf-ffcf-459a-b4b1-30ecd118a505'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Detailed Tracking''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Detailed Tracking''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditProcessTermination":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Process Termination","description":"Specifies whether audit events are - generated when a process has exited. Recommended for monitoring termination - of critical processes."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Process Termination;ExpectedValue'', ''='', parameters(''AuditProcessTermination'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesDetailedTracking"},"AuditProcessTermination":{"value":"[parameters(''AuditProcessTermination'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditProcessTermination":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Process Termination;ExpectedValue","value":"[parameters(''AuditProcessTermination'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Process Termination;ExpectedValue","value":"[parameters(''AuditProcessTermination'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/42a07bbf-ffcf-459a-b4b1-30ecd118a505","type":"Microsoft.Authorization/policyDefinitions","name":"42a07bbf-ffcf-459a-b4b1-30ecd118a505"}' - headers: - cache-control: - - no-cache - content-length: - - '6750' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''437a1f8f-8552-47a8-8b12-a2fee3269dd5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - System settings''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - System settings''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"type":"String","metadata":{"displayName":"[Deprecated]: - System settings: Use Certificate Rules on Windows Executables for Software - Restriction Policies","description":"Specifies whether digital certificates - are processed when software restriction policies are enabled and a user or - process attempts to run software with an .exe file name extension. It enables - or disables certificate rules (a type of software restriction policies rule). - For certificate rules to take effect in software restriction policies, you - must enable this policy setting."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemsettings","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue'', ''='', parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsSystemsettings"},"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue","value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"System - settings: Use Certificate Rules on Windows Executables for Software Restriction - Policies;ExpectedValue","value":"[parameters(''SystemSettingsUseCertificateRulesOnWindowsExecutablesForSoftwareRestrictionPolicies'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/437a1f8f-8552-47a8-8b12-a2fee3269dd5","type":"Microsoft.Authorization/policyDefinitions","name":"437a1f8f-8552-47a8-8b12-a2fee3269dd5"}' - headers: - cache-control: - - no-cache - content-length: - - '7594' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''43bb60fe-1d7e-4b82-9e93-496bfc99e7d5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Account Logon''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Account Logon'' for auditing credential validation and other - account logon events. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesAccountLogon","version":"1.*","configurationParameter":{"AuditCredentialValidation":"Audit - Credential Validation;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditCredentialValidation":{"type":"String","metadata":{"displayName":"Audit - Credential Validation","description":"Specifies whether audit events are generated - when credentials are submitted for a user account logon request. This setting - is especially useful for monitoring unsuccessful attempts, to find brute-force - attacks, account enumeration, and potential account compromise events on domain - controllers."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountLogon","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Credential Validation;ExpectedValue'', ''='', parameters(''AuditCredentialValidation'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/43bb60fe-1d7e-4b82-9e93-496bfc99e7d5","type":"Microsoft.Authorization/policyDefinitions","name":"43bb60fe-1d7e-4b82-9e93-496bfc99e7d5"}' - headers: - cache-control: - - no-cache - content-length: - - '4634' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''44452482-524f-4bf4-b852-0bff7cc4a3ed'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Monitor permissive network - access in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Network - Security Groups with too permissive rules will be monitored by Azure Security - Center as recommendations","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"permissiveNetworkAccess","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/44452482-524f-4bf4-b852-0bff7cc4a3ed","type":"Microsoft.Authorization/policyDefinitions","name":"44452482-524f-4bf4-b852-0bff7cc4a3ed"}' - headers: - cache-control: - - no-cache - content-length: - - '1127' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''464a1620-21b5-448d-8ce6-d4ac6d1bc49a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure SignalR Service should use a Private - Link enabled SKU","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination which protect your resources - against public data leakage risks. The policy limits you to Private Link enabled - SKUs for Azure SignalR Service. Learn more about private link at: https://aka.ms/asrs/privatelink.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.SignalRService/SignalR"},{"field":"Microsoft.SignalRService/SignalR/sku.tier","equals":"Free"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464a1620-21b5-448d-8ce6-d4ac6d1bc49a","type":"Microsoft.Authorization/policyDefinitions","name":"464a1620-21b5-448d-8ce6-d4ac6d1bc49a"}' - headers: - cache-control: - - no-cache - content-length: - - '1125' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Require SQL Server version - 12.0","policyType":"BuiltIn","mode":"Indexed","description":"This policy ensures - all SQL servers use version 12.0. This policy is deprecated because it is - no longer possible to create an Azure SQL server with any version other than - 12.0.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"not":{"field":"Microsoft.Sql/servers/version","equals":"12.0"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf","type":"Microsoft.Authorization/policyDefinitions","name":"464dbb85-3d5f-4a1d-bb09-95a9b5dd19cf"}' - headers: - cache-control: - - no-cache - content-length: - - '771' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''46544d7b-1f0d-46f5-81da-5c1351de1b06'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46544d7b-1f0d-46f5-81da-5c1351de1b06","type":"Microsoft.Authorization/policyDefinitions","name":"46544d7b-1f0d-46f5-81da-5c1351de1b06"}' - headers: - cache-control: - - no-cache - content-length: - - '1201' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''465f0161-0087-490a-9ad9-ad6217f4f43a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require automatic OS image patching on - Virtual Machine Scale Sets","policyType":"BuiltIn","mode":"All","description":"This - policy enforces enabling automatic OS image patching on Virtual Machine Scale - Sets to always keep Virtual Machines secure by safely applying latest security - patches every month.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgradePolicy.enableAutomaticOSUpgrade","notEquals":"True"},{"field":"Microsoft.Compute/VirtualMachineScaleSets/upgradePolicy.automaticOSUpgrade","notEquals":"True"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/465f0161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"465f0161-0087-490a-9ad9-ad6217f4f43a"}' - headers: - cache-control: - - no-cache - content-length: - - '965' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''46aa9b05-0e60-4eae-a88b-1e9d374fa515'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should use - customer owned storage","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer owned storage to control the data stored at rest in Cognitive Services. - To learn more about customer owned storage, visit https://aka.ms/cogsvc-cmk.","metadata":{"version":"2.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"count":{"field":"Microsoft.CognitiveServices/accounts/userOwnedStorage[*]"},"less":1},{"count":{"field":"Microsoft.CognitiveServices/accounts/capabilities[*]","where":{"field":"Microsoft.CognitiveServices/accounts/capabilities[*].name","equals":"CustomerManagedStorage"}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/46aa9b05-0e60-4eae-a88b-1e9d374fa515","type":"Microsoft.Authorization/policyDefinitions","name":"46aa9b05-0e60-4eae-a88b-1e9d374fa515"}' - headers: - cache-control: - - no-cache - content-length: - - '1212' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''47031206-ce96-41f8-861b-6a915f3de284'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: IoT Hub device provisioning - service data should be encrypted using customer-managed keys (CMK)","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your IoT Hub device - provisioning service. The data is automatically encrypted at rest with service-managed - keys, but customer-managed keys (CMK) are commonly required to meet regulatory - compliance standards. CMKs enable the data to be encrypted with an Azure Key - Vault key created and owned by you. Learn more about CMK encryption at https://aka.ms/dps/CMK.","metadata":{"version":"1.0.0-preview","category":"Internet - of Things","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/provisioningServices"},{"count":{"field":"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*]","where":{"allOf":[{"field":"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier","exists":"true"},{"field":"Microsoft.Devices/provisioningServices/encryption.keyVaultProperties[*].keyIdentifier","notequals":""}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47031206-ce96-41f8-861b-6a915f3de284","type":"Microsoft.Authorization/policyDefinitions","name":"47031206-ce96-41f8-861b-6a915f3de284"}' - headers: - cache-control: - - no-cache - content-length: - - '1581' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''470baccb-7e51-4549-8b1a-3e5be069f663'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cache for Redis should disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that the Azure Cache for - Redis isn''t exposed on the public internet. You can limit exposure of your - Azure Cache for Redis by creating private endpoints instead. Learn more at: - https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/Redis"},{"field":"Microsoft.Cache/Redis/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/470baccb-7e51-4549-8b1a-3e5be069f663","type":"Microsoft.Authorization/policyDefinitions","name":"470baccb-7e51-4549-8b1a-3e5be069f663"}' - headers: - cache-control: - - no-cache - content-length: - - '1090' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4733ea7b-a883-42fe-8cac-97454c2a9e4a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should have infrastructure - encryption","policyType":"BuiltIn","mode":"Indexed","description":"Enable - infrastructure encryption for higher level of assurance that the data is secure. - When infrastructure encryption is enabled, data in a storage account is encrypted - twice.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the audit policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/encryption.requireInfrastructureEncryption","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4733ea7b-a883-42fe-8cac-97454c2a9e4a","type":"Microsoft.Authorization/policyDefinitions","name":"4733ea7b-a883-42fe-8cac-97454c2a9e4a"}' - headers: - cache-control: - - no-cache - content-length: - - '1001' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4750c32b-89c0-46af-bfcb-2e4541a818d5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB key based metadata write - access should be disabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to ensure all Azure Cosmos DB accounts disable key based - metadata write access.","metadata":{"version":"1.0.0","category":"Cosmos DB"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess","notEquals":true}]},"then":{"effect":"append","details":[{"field":"Microsoft.DocumentDB/databaseAccounts/disableKeyBasedMetadataWriteAccess","value":true}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4750c32b-89c0-46af-bfcb-2e4541a818d5","type":"Microsoft.Authorization/policyDefinitions","name":"4750c32b-89c0-46af-bfcb-2e4541a818d5"}' - headers: - cache-control: - - no-cache - content-length: - - '860' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''475aae12-b88a-4572-8b36-9b712b2b3a17'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Auto provisioning of the Log Analytics - agent should be enabled on your subscription","policyType":"BuiltIn","mode":"All","description":"To - monitor for security vulnerabilities and threats, Azure Security Center collects - data from your Azure virtual machines. Data is collected by the Log Analytics - agent, formerly known as the Microsoft Monitoring Agent (MMA), which reads - various security-related configurations and event logs from the machine and - copies the data to your Log Analytics workspace for analysis. We recommend - enabling auto provisioning to automatically deploy the agent to all supported - Azure VMs and any new ones that are created.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/475aae12-b88a-4572-8b36-9b712b2b3a17","type":"Microsoft.Authorization/policyDefinitions","name":"475aae12-b88a-4572-8b36-9b712b2b3a17"}' - headers: - cache-control: - - no-cache - content-length: - - '1416' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''47a6b606-51aa-4496-8bb7-64b11cf66adc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Adaptive application controls for defining - safe applications should be enabled on your machines","policyType":"BuiltIn","mode":"All","description":"Enable - application controls to define the list of known-safe applications running - on your machines, and alert you when other applications run. This helps harden - your machines against malware. To simplify the process of configuring and - maintaining your rules, Security Center uses machine learning to analyze the - applications running on each machine and suggest the list of known-safe applications.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"35f45c95-27cf-4e52-891f-8390d1de5828","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47a6b606-51aa-4496-8bb7-64b11cf66adc","type":"Microsoft.Authorization/policyDefinitions","name":"47a6b606-51aa-4496-8bb7-64b11cf66adc"}' - headers: - cache-control: - - no-cache - content-length: - - '1393' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''47ba1dd7-28d9-4b07-a8d5-9813bed64e0c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Cognitive Services accounts - to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your Cognitive Services resource so that it''s not - accessible over the public internet. This can reduce data leakage risks. Learn - more at: https://go.microsoft.com/fwlink/?linkid=2129800.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Disabled","Modify"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2017-04-18'')]","operation":"addOrReplace","field":"Microsoft.CognitiveServices/accounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/47ba1dd7-28d9-4b07-a8d5-9813bed64e0c","type":"Microsoft.Authorization/policyDefinitions","name":"47ba1dd7-28d9-4b07-a8d5-9813bed64e0c"}' - headers: - cache-control: - - no-cache - content-length: - - '1401' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''480d0f91-30af-4a76-9afb-f5710ac52b09'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoints for Guest Configuration - assignments should be enabled","policyType":"BuiltIn","mode":"All","description":"Private - endpoint connections enforce secure communication by enabling private connectivity - to Guest Configuration for virtual machines. Virtual machines will be non-compliant - unless they have the tag, ''EnablePrivateNetworkGC''. This tag enforces secure - communication through private connectivity to Guest Configuration for Virtual - Machines. Private connectivity limits access to traffic coming only from known - networks and prevents access from all other IP addresses, including within - Azure.","metadata":{"version":"1.0.0","category":"Guest Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.GuestConfiguration/guestConfigurationAssignments"},{"field":"id","contains":"Microsoft.Compute/virtualMachines"},{"not":{"anyof":[{"field":"[concat(''tags['', - ''EnablePrivateNeworkGC'', '']'')]","equals":"TRUE"},{"field":"[concat(''tags['', - ''EnablePrivateNetworkGC'', '']'')]","equals":"TRUE"}]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/480d0f91-30af-4a76-9afb-f5710ac52b09","type":"Microsoft.Authorization/policyDefinitions","name":"480d0f91-30af-4a76-9afb-f5710ac52b09"}' - headers: - cache-control: - - no-cache - content-length: - - '1486' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''48893b84-a2c8-4d9a-badf-835d5d1b7d53'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit IP restrictions configuration - for an API App","policyType":"BuiltIn","mode":"All","description":"IP Restrictions - allow you to define a list of IP addresses that are allowed to access your - app. Use of IP Restrictions protects an API app from common attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48893b84-a2c8-4d9a-badf-835d5d1b7d53","type":"Microsoft.Authorization/policyDefinitions","name":"48893b84-a2c8-4d9a-badf-835d5d1b7d53"}' - headers: - cache-control: - - no-cache - content-length: - - '1203' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''48af4db5-9b8b-401c-8e74-076be876a430'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Geo-redundant backup should be enabled - for Azure Database for PostgreSQL","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Database for PostgreSQL allows you to choose the redundancy option for your - database server. It can be set to a geo-redundant backup storage in which - the data is not only stored within the region in which your server is hosted, - but is also replicated to a paired region to provide recovery option in case - of a region failure. Configuring geo-redundant storage for backup is only - allowed during server create.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/48af4db5-9b8b-401c-8e74-076be876a430","type":"Microsoft.Authorization/policyDefinitions","name":"48af4db5-9b8b-401c-8e74-076be876a430"}' - headers: - cache-control: - - no-cache - content-length: - - '1234' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''492a29ed-d143-4f03-b6a4-705ce081b463'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - User Account Control''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - User Account Control'' for mode for admins, behavior of elevation - prompt, and virtualizing file and registry write failures. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsUserAccountControl","version":"1.*","configurationParameter":{"UACAdminApprovalModeForTheBuiltinAdministratorAccount":"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue","UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue","UACDetectApplicationInstallationsAndPromptForElevation":"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue","UACRunAllAdministratorsInAdminApprovalMode":"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"type":"String","metadata":{"displayName":"UAC: - Admin Approval Mode for the Built-in Administrator account","description":"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account."}},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"UAC: - Behavior of the elevation prompt for administrators in Admin Approval Mode","description":"Specifies - the behavior of the elevation prompt for administrators."}},"UACDetectApplicationInstallationsAndPromptForElevation":{"type":"String","metadata":{"displayName":"UAC: - Detect application installations and prompt for elevation","description":"Specifies - the behavior of application installation detection for the computer."}},"UACRunAllAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"UAC: - Run all administrators in Admin Approval Mode","description":"Specifies the - behavior of all User Account Control (UAC) policy settings for the computer."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsUserAccountControl","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue'', - ''='', parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount''), - '','', ''User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue'', ''='', parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode''), - '','', ''User Account Control: Detect application installations and prompt - for elevation;ExpectedValue'', ''='', parameters(''UACDetectApplicationInstallationsAndPromptForElevation''), - '','', ''User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue'', - ''='', parameters(''UACRunAllAdministratorsInAdminApprovalMode'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/492a29ed-d143-4f03-b6a4-705ce081b463","type":"Microsoft.Authorization/policyDefinitions","name":"492a29ed-d143-4f03-b6a4-705ce081b463"}' - headers: - cache-control: - - no-cache - content-length: - - '6413' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''496223c3-ad65-4ecd-878a-bae78737e9ed'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Java version'' is the latest, - if used as a part of the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/496223c3-ad65-4ecd-878a-bae78737e9ed","type":"Microsoft.Authorization/policyDefinitions","name":"496223c3-ad65-4ecd-878a-bae78737e9ed"}' - headers: - cache-control: - - no-cache - content-length: - - '1574' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''496ca26b-f669-4322-a1ad-06b7b5e41882'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private endpoints for Data - factories","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Data Factory, you can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data - Factory"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet ID","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"groupId":{"type":"String","metadata":{"description":"The - group Id that can be specified for Private Endpoints.","displayName":"Allowed - group Id"},"allowedValues":["dataFactory","portal"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/673868aa-7521-48a0-acc6-0f60742d39f5"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"groupId":{"value":"[parameters(''groupId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"groupId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"},"groupId":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupId":["[parameters(''groupId'')]"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"},"groupId":{"value":"[parameters(''groupId'')]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/496ca26b-f669-4322-a1ad-06b7b5e41882","type":"Microsoft.Authorization/policyDefinitions","name":"496ca26b-f669-4322-a1ad-06b7b5e41882"}' - headers: - cache-control: - - no-cache - content-length: - - '3859' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''497dff13-db2a-4c0f-8603-28fa3b331ab6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add system-assigned managed identity - to enable Guest Configuration assignments on VMs with a user-assigned identity","policyType":"BuiltIn","mode":"Indexed","description":"This - policy adds a system-assigned managed identity to virtual machines hosted - in Azure that are supported by Guest Configuration and have at least one user-assigned - identity but do not have a system-assigned managed identity. A system-assigned - managed identity is a prerequisite for all Guest Configuration assignments - and must be added to machines before using any Guest Configuration policy - definitions. For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"1.0.0"},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"value":"[requestContext().apiVersion]","greaterOrEquals":"2018-10-01"},{"field":"identity.type","contains":"UserAssigned"},{"field":"identity.type","notContains":"SystemAssigned"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"identity.type","value":"[concat(field(''identity.type''), - '',SystemAssigned'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/497dff13-db2a-4c0f-8603-28fa3b331ab6","type":"Microsoft.Authorization/policyDefinitions","name":"497dff13-db2a-4c0f-8603-28fa3b331ab6"}' - headers: - cache-control: - - no-cache - content-length: - - '6573' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''498b810c-59cd-4222-9338-352ba146ccf3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Audit''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Audit''. It also creates a system-assigned managed identity and deploys the - VM extension for Guest Configuration. This policy should only be used along - with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit: Shut down system immediately if unable to log security audits","description":"Audits - if the system will shut down when unable to log Security events."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAudit","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit: - Shut down system immediately if unable to log security audits;ExpectedValue'', - ''='', parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsAudit"},"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue","value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit: - Shut down system immediately if unable to log security audits;ExpectedValue","value":"[parameters(''AuditShutDownSystemImmediatelyIfUnableToLogSecurityAudits'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/498b810c-59cd-4222-9338-352ba146ccf3","type":"Microsoft.Authorization/policyDefinitions","name":"498b810c-59cd-4222-9338-352ba146ccf3"}' - headers: - cache-control: - - no-cache - content-length: - - '6960' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''49c88fc8-6fd1-46fd-a676-f12d1d3a4c71'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Append a tag and its value to resource - groups","policyType":"BuiltIn","mode":"All","description":"Appends the specified - tag and value when any resource group which is missing this tag is created - or updated. Does not modify the tags of resource groups created before this - policy was applied until those resource groups are changed. New ''modify'' - effect policies are available that support remediation of tags on existing - resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/49c88fc8-6fd1-46fd-a676-f12d1d3a4c71","type":"Microsoft.Authorization/policyDefinitions","name":"49c88fc8-6fd1-46fd-a676-f12d1d3a4c71"}' - headers: - cache-control: - - no-cache - content-length: - - '1311' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4b90e17e-8448-49db-875e-bd83fb6f804f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Event Grid topics should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to your Event Grid topic instead of - the entire service, you''ll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.2","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/topics"},{"field":"kind","notEquals":"AzureArc"},{"count":{"field":"Microsoft.EventGrid/topics/privateEndpointConnections[*]","where":{"field":"Microsoft.EventGrid/topics/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4b90e17e-8448-49db-875e-bd83fb6f804f","type":"Microsoft.Authorization/policyDefinitions","name":"4b90e17e-8448-49db-875e-bd83fb6f804f"}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4ceb8dc2-559c-478b-a15b-733fbf1e3738'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not have - a maximum password age of 70 days","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have a maximum password age of 70 days","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"MaximumPasswordAge","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MaximumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738","type":"Microsoft.Authorization/policyDefinitions","name":"4ceb8dc2-559c-478b-a15b-733fbf1e3738"}' - headers: - cache-control: - - no-cache - content-length: - - '3632' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4d0bc837-6eff-477e-9ecd-33bf8d4212a5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Function apps should use an Azure file - share for its content directory","policyType":"BuiltIn","mode":"Indexed","description":"The - content directory of a function app should be located on an Azure file share. - The storage account information for the file share must be provided before - any publishing activity. To learn more about using Azure Files for hosting - app service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"Microsoft.Web/sites/storageAccountRequired","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d0bc837-6eff-477e-9ecd-33bf8d4212a5","type":"Microsoft.Authorization/policyDefinitions","name":"4d0bc837-6eff-477e-9ecd-33bf8d4212a5"}' - headers: - cache-control: - - no-cache - content-length: - - '1129' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4d1c04de-2172-403f-901b-90608c35c721'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Linux VMs that do not have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"[Deprecated]: - Application names","description":"A semicolon-separated list of the names - of the applications that should be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', concat(''packages: ['', replace(parameters(''ApplicationName''), '';'', - '',''), '']'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d1c04de-2172-403f-901b-90608c35c721","type":"Microsoft.Authorization/policyDefinitions","name":"4d1c04de-2172-403f-901b-90608c35c721"}' - headers: - cache-control: - - no-cache - content-length: - - '8029' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"FTPS should be required in your Web App","policyType":"BuiltIn","mode":"Indexed","description":"Enable - FTPS enforcement for enhanced security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","in":["FtpsOnly","Disabled"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b","type":"Microsoft.Authorization/policyDefinitions","name":"4d24b6d4-5e53-4a4f-a7f4-618fa573ee4b"}' - headers: - cache-control: - - no-cache - content-length: - - '926' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4da21710-ce6f-4e06-8cdb-5cc4c93ffbee'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Dependency agent for Linux virtual - machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy Dependency - agent for Linux virtual machines if the VM Image (OS) is in the list defined - and the agent is not installed.","metadata":{"version":"1.3.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgentLinux","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.6"},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4da21710-ce6f-4e06-8cdb-5cc4c93ffbee","type":"Microsoft.Authorization/policyDefinitions","name":"4da21710-ce6f-4e06-8cdb-5cc4c93ffbee"}' - headers: - cache-control: - - no-cache - content-length: - - '4090' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4da35fc9-c9e7-4960-aec9-797fe7d9051d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for servers should be - enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for servers provides real-time threat protection for server workloads and - generates hardening recommendations as well as alerts about suspicious activities.","metadata":{"version":"1.0.3","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"VirtualMachines","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4da35fc9-c9e7-4960-aec9-797fe7d9051d","type":"Microsoft.Authorization/policyDefinitions","name":"4da35fc9-c9e7-4960-aec9-797fe7d9051d"}' - headers: - cache-control: - - no-cache - content-length: - - '1067' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4daddf25-4823-43d4-88eb-2419eb6dcc08'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Data Lake - Analytics to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Event - Hub when any Data Lake Analytics which is missing this diagnostic settings - is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Data - Lake Analytics in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4daddf25-4823-43d4-88eb-2419eb6dcc08","type":"Microsoft.Authorization/policyDefinitions","name":"4daddf25-4823-43d4-88eb-2419eb6dcc08"}' - headers: - cache-control: - - no-cache - content-length: - - '4110' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4ec38ebc-381f-45ee-81a4-acbc4be878f8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure private DNS zones - for private endpoints that connect to Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - Batch accounts without a need for public IP addresses at the source or destination. - For more information on private endpoints and DNS zones in Batch, see https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"batchAccount"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"batchAccount-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ec38ebc-381f-45ee-81a4-acbc4be878f8","type":"Microsoft.Authorization/policyDefinitions","name":"4ec38ebc-381f-45ee-81a4-acbc4be878f8"}' - headers: - cache-control: - - no-cache - content-length: - - '2647' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4ec52d6d-beb7-40c4-9a9e-fe753254690e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure data factories should be encrypted - with a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your Azure Data - Factory. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/adf-cmk.","metadata":{"version":"1.0.1","category":"Data - Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"field":"Microsoft.DataFactory/factories/encryption.vaultBaseUrl","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4ec52d6d-beb7-40c4-9a9e-fe753254690e","type":"Microsoft.Authorization/policyDefinitions","name":"4ec52d6d-beb7-40c4-9a9e-fe753254690e"}' - headers: - cache-control: - - no-cache - content-length: - - '1297' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4f11b553-d42e-4e3a-89be-32ca364cad4c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"A maximum of 3 owners should be designated - for your subscription","policyType":"BuiltIn","mode":"All","description":"It - is recommended to designate up to 3 subscription owners in order to reduce - the potential for breach by a compromised owner.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"6f90a6d6-d4d6-0794-0ec1-98fa77878c2e","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f11b553-d42e-4e3a-89be-32ca364cad4c","type":"Microsoft.Authorization/policyDefinitions","name":"4f11b553-d42e-4e3a-89be-32ca364cad4c"}' - headers: - cache-control: - - no-cache - content-length: - - '1050' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Subscriptions should have a contact email - address for security issues","policyType":"BuiltIn","mode":"All","description":"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, set a security contact - to receive email notifications from Security Center.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/email","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7","type":"Microsoft.Authorization/policyDefinitions","name":"4f4f78b8-e367-4b10-a341-d9a4ad5cf1c7"}' - headers: - cache-control: - - no-cache - content-length: - - '1080' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4f9dc7db-30c1-420c-b61a-e1d640128d26'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add a tag to resources","policyType":"BuiltIn","mode":"Indexed","description":"Adds - the specified tag and value when any resource missing this tag is created - or updated. Existing resources can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed. Does - not modify tags on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4f9dc7db-30c1-420c-b61a-e1d640128d26","type":"Microsoft.Authorization/policyDefinitions","name":"4f9dc7db-30c1-420c-b61a-e1d640128d26"}' - headers: - cache-control: - - no-cache - content-length: - - '1253' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''4fa4b6c0-31ca-4c0d-b10d-24b96f62a751'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Storage account public access - should be disallowed","policyType":"BuiltIn","mode":"Indexed","description":"Anonymous - public read access to containers and blobs in Azure Storage is a convenient - way to share data but might present security risks. To prevent data breaches - caused by undesired anonymous access, Microsoft recommends preventing public - access to a storage account unless your scenario requires it.","metadata":{"version":"2.0.1-preview","category":"Storage","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"The effect determines what happens when the policy - rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"id","notContains":"/resourceGroups/databricks-rg-"},{"not":{"field":"Microsoft.Storage/storageAccounts/allowBlobPublicAccess","equals":"false"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/4fa4b6c0-31ca-4c0d-b10d-24b96f62a751","type":"Microsoft.Authorization/policyDefinitions","name":"4fa4b6c0-31ca-4c0d-b10d-24b96f62a751"}' - headers: - cache-control: - - no-cache - content-length: - - '1240' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''501541f7-f7e7-4cd6-868c-4190fdad3ac9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"A vulnerability assessment solution should - be enabled on your virtual machines","policyType":"BuiltIn","mode":"All","description":"Audits - virtual machines to detect whether they are running a supported vulnerability - assessment solution. A core component of every cyber risk and security program - is the identification and analysis of vulnerabilities. Azure Security Center''s - standard pricing tier includes vulnerability scanning for your virtual machines - at no extra cost. Additionally, Security Center can automatically deploy this - tool for you.","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"ffff0522-1e88-47fc-8382-2a80ba848f5d","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/501541f7-f7e7-4cd6-868c-4190fdad3ac9","type":"Microsoft.Authorization/policyDefinitions","name":"501541f7-f7e7-4cd6-868c-4190fdad3ac9"}' - headers: - cache-control: - - no-cache - content-length: - - '1393' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''509122b9-ddd9-47ba-a5f1-d0dac20be63c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Workflow Automation for Azure - Security Center regulatory compliance","policyType":"BuiltIn","mode":"All","description":"Enable - automation of Azure Security Center regulatory compliance. This policy deploys - a workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.","metadata":{"version":"3.0.0","category":"Security Center","preview - ":true},"parameters":{"automationName":{"type":"String","metadata":{"displayName":"Automation - name","description":"This is the automation name."}},"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the workflow automation - is created. If you enter a name for a resource group that doesn''t exist, - it''ll be created in the subscription."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - workflow automation are created.","strongType":"location"}},"regulatoryComplianceStandards":{"type":"Array","metadata":{"displayName":"Compliance - standards names","description":"For all compliance standards, leave it empty. - For specific compliance standards, enter a list of standards names separated - by semicolons ('';''). Compliance standards names are available through the - regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"regulatoryComplianceControlStates":{"type":"Array","metadata":{"displayName":"Compliance - control states","description":"Determines compliance control states."},"allowedValues":["Failed","Passed","Skipped","Unsupported"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic - App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic - app trigger","description":"The trigger connector of the logic app that is - triggered. Possible values: ''Manual (Incoming HTTP request)'', ''When an - Azure Security Center regulatory compliance assessment is created or triggered''."},"allowedValues":["Manual - (Incoming HTTP request)","When an Azure Security Center regulatory compliance - assessment is created or triggered"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"[parameters(''automationName'')]","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets","exists":false},{"value":"[length(parameters(''regulatoryComplianceStandards''))]","equals":0},{"value":"[length(parameters(''regulatoryComplianceControlStates''))]","equals":4}]},{"allOf":[{"value":"[length(parameters(''regulatoryComplianceStandards''))]","equals":0},{"value":"[length(parameters(''regulatoryComplianceControlStates''))]","less":4},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","in":"[parameters(''regulatoryComplianceControlStates'')]"},{"count":{"value":"[parameters(''regulatoryComplianceControlStates'')]","name":"regulatoryComplianceControlState","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"properties.state"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[current(''regulatoryComplianceControlState'')]"}]}},"equals":1}},"equals":"[length(parameters(''regulatoryComplianceControlStates''))]"}]},{"allOf":[{"value":"[length(parameters(''regulatoryComplianceStandards''))]","notEquals":0},{"value":"[length(parameters(''regulatoryComplianceControlStates''))]","equals":4},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","in":"[parameters(''regulatoryComplianceStandards'')]"},{"count":{"value":"[parameters(''regulatoryComplianceStandards'')]","name":"regulatoryComplianceStandard","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"id"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[current(''regulatoryComplianceStandard'')]"}]}},"equals":1}},"equals":"[length(parameters(''regulatoryComplianceStandards''))]"}]},{"allOf":[{"value":"[length(parameters(''regulatoryComplianceStandards''))]","notEquals":0},{"value":"[length(parameters(''regulatoryComplianceControlStates''))]","notEquals":4},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","in":"[union(parameters(''regulatoryComplianceStandards''),parameters(''regulatoryComplianceControlStates''))]"},{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]"},"equals":"[mul(2,mul(length(parameters(''regulatoryComplianceStandards'')),length(parameters(''regulatoryComplianceControlStates''))))]"}]}]}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"automationName":{"type":"string"},"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"regulatoryComplianceStandards":{"type":"array"},"regulatoryComplianceControlStates":{"type":"array"},"logicAppResourceId":{"type":"string"},"logicAppTrigger":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","regulatoryComplianceStandardsLength":"[length(parameters(''regulatoryComplianceStandards''))]","regulatoryComplianceControlStatesLength":"[length(parameters(''regulatoryComplianceControlStates''))]","regulatoryComplianceStandardsLengthIfEmpty":"[if(equals(variables(''regulatoryComplianceStandardsLength''), - 0), 1, variables(''regulatoryComplianceStandardsLength''))]","regulatoryComplianceControlStatesLengthIfEmpty":"[if(equals(variables(''regulatoryComplianceControlStatesLength''), - 0), 1, variables(''regulatoryComplianceControlStatesLength''))]","stateMap":{"Failed":"failed","Passed":"passed","Skipped":"skipped","Unsupported":"unsupported"},"triggerMap":{"Manual - (Incoming HTTP request)":"manual","When an Azure Security Center regulatory - compliance assessment is created or triggered":"When_a_Security_Center_Regulatory_Compliance_Assessment_is_created_or_triggered"},"doesAllStatesSelected":"[if(equals(length(parameters(''regulatoryComplianceControlStates'')),length(variables(''stateMap''))),bool(''true''),bool(''false''))]","doesAllStandardsSelected":"[if(equals(variables(''regulatoryComplianceStandardsLength''),0),bool(''true''),bool(''false''))]","allRegulatoryComplianceRuleSets":[],"customStandardsOrCustomStateRuleSets":{"copy":[{"name":"customStandardsOrCustomStateRuleSetsArr","count":"[if(not(variables(''doesAllStandardsSelected'')),variables(''regulatoryComplianceStandardsLength''),if(not(variables(''doesAllStatesSelected'')),variables(''regulatoryComplianceControlStatesLength''),1))]","input":{"rules":[{"propertyJPath":"[if(not(variables(''doesAllStandardsSelected'')),''id'',if(not(variables(''doesAllStatesSelected'')),''properties.state'',json(''null'')))]","propertyType":"string","expectedValue":"[if(not(variables(''doesAllStandardsSelected'')),parameters(''regulatoryComplianceStandards'')[copyIndex(''customStandardsOrCustomStateRuleSetsArr'')],if(not(variables(''doesAllStatesSelected'')),parameters(''regulatoryComplianceControlStates'')[copyIndex(''customStandardsOrCustomStateRuleSetsArr'')],json(''null'')))]","operator":"[if(not(variables(''doesAllStandardsSelected'')),''Contains'',if(not(variables(''doesAllStatesSelected'')),''Equals'',json(''null'')))]"}]}}]},"customStandardsAndCustomStateRuleSets":{"copy":[{"name":"customStandardsAndCustomStateRuleSetsArr","count":"[if(and(not(variables(''doesAllStandardsSelected'')),not(variables(''doesAllStatesSelected''))),mul(variables(''regulatoryComplianceStandardsLength''),variables(''regulatoryComplianceControlStatesLength'')),1)]","input":{"rules":[{"propertyJPath":"id","propertyType":"string","expectedValue":"[if(not(variables(''doesAllStandardsSelected'')),parameters(''regulatoryComplianceStandards'')[mod(div(copyIndex(''customStandardsAndCustomStateRuleSetsArr''), - variables(''regulatoryComplianceControlStatesLength'')), variables(''regulatoryComplianceStandardsLength''))],json(''null''))]","operator":"Contains"},{"propertyJPath":"properties.state","propertyType":"string","expectedValue":"[if(not(variables(''doesAllStatesSelected'')),parameters(''regulatoryComplianceControlStates'')[mod(copyIndex(''customStandardsAndCustomStateRuleSetsArr''), - variables(''regulatoryComplianceControlStatesLength''))],json(''null''))]","operator":"Equals"}]}}]},"sourceRuleSets":"[if(and(variables(''doesAllStandardsSelected''),variables(''doesAllStatesSelected'')),variables(''allRegulatoryComplianceRuleSets''),if(and(not(variables(''doesAllStandardsSelected'')),not(variables(''doesAllStatesSelected''))),variables(''customStandardsAndCustomStateRuleSets'').customStandardsAndCustomStateRuleSetsArr,variables(''customStandardsOrCustomStateRuleSets'').customStandardsOrCustomStateRuleSetsArr))]"},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"[parameters(''automationName'')]","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Workflow - Automation for Azure Security Center recommendations via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":[{"eventSource":"RegulatoryComplianceAssessment","ruleSets":"[variables(''sourceRuleSets'')]"}],"actions":[{"actionType":"LogicApp","logicAppResourceId":"[parameters(''logicAppResourceId'')]","uri":"[listCallbackUrl(concat(parameters(''logicAppResourceId''), - ''/triggers/'', variables(''triggerMap'')[parameters(''logicAppTrigger'')]),''2016-06-01'').value]"}]}}]}}}]},"parameters":{"automationName":{"value":"[parameters(''automationName'')]"},"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"regulatoryComplianceStandards":{"value":"[parameters(''regulatoryComplianceStandards'')]"},"regulatoryComplianceControlStates":{"value":"[parameters(''regulatoryComplianceControlStates'')]"},"logicAppResourceId":{"value":"[parameters(''logicAppResourceId'')]"},"logicAppTrigger":{"value":"[parameters(''logicAppTrigger'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/509122b9-ddd9-47ba-a5f1-d0dac20be63c","type":"Microsoft.Authorization/policyDefinitions","name":"509122b9-ddd9-47ba-a5f1-d0dac20be63c"}' - headers: - cache-control: - - no-cache - content-length: - - '12202' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''50b83b09-03da-41c1-b656-c293c914862b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"A custom IPsec/IKE policy must be applied - to all Azure virtual network gateway connections","policyType":"BuiltIn","mode":"All","description":"This - policy ensures that all Azure virtual network gateway connections use a custom - Internet Protocol Security(Ipsec)/Internet Key Exchange(IKE) policy. Supported - algorithms and key strengths - https://aka.ms/AA62kb0","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]},"IPsecEncryption":{"type":"Array","metadata":{"displayName":"IPsec - Encryption","description":"IPsec Encryption"}},"IPsecIntegrity":{"type":"Array","metadata":{"displayName":"IPsec - Integrity","description":"IPsec Integrity"}},"IKEEncryption":{"type":"Array","metadata":{"displayName":"IKE - Encryption","description":"IKE Encryption"}},"IKEIntegrity":{"type":"Array","metadata":{"displayName":"IKE - Integrity","description":"IKE Integrity"}},"DHGroup":{"type":"Array","metadata":{"displayName":"DH - Group","description":"DH Group"}},"PFSGroup":{"type":"Array","metadata":{"displayName":"PFS - Group","description":"PFS Group"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/connections"},{"anyOf":[{"field":"Microsoft.Network/connections/ipsecPolicies[*].ipsecEncryption","notIn":"[parameters(''IPsecEncryption'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ipsecIntegrity","notIn":"[parameters(''IPsecIntegrity'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ikeEncryption","notIn":"[parameters(''IKEEncryption'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].ikeIntegrity","notIn":"[parameters(''IKEIntegrity'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].dhGroup","notIn":"[parameters(''DHGroup'')]"},{"field":"Microsoft.Network/connections/ipsecPolicies[*].pfsGroup","notIn":"[parameters(''PFSGroup'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/50b83b09-03da-41c1-b656-c293c914862b","type":"Microsoft.Authorization/policyDefinitions","name":"50b83b09-03da-41c1-b656-c293c914862b"}' - headers: - cache-control: - - no-cache - content-length: - - '2241' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''51522a96-0869-4791-82f3-981000c2c67f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Bot Service should be encrypted with - a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Bot Service automatically encrypts your resource to protect your data and - meet organizational security and compliance commitments. By default, Microsoft-managed - encryption keys are used. For greater flexibility in managing keys or controlling - access to your subscription, select customer-managed keys, also known as bring - your own key (BYOK). Learn more about Azure Bot Service encryption: https://docs.microsoft.com/azure/bot-service/bot-service-encryption.","metadata":{"version":"1.0.0","category":"Bot - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/isCmekEnabled","notEquals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/51522a96-0869-4791-82f3-981000c2c67f","type":"Microsoft.Authorization/policyDefinitions","name":"51522a96-0869-4791-82f3-981000c2c67f"}' - headers: - cache-control: - - no-cache - content-length: - - '1249' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''523b5cd1-3e23-492f-a539-13118b6d1e3a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for Kubernetes should - be enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for Kubernetes provides real-time threat protection for containerized environments - and generates alerts for suspicious activities.","metadata":{"version":"1.0.3","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"KubernetesService","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/523b5cd1-3e23-492f-a539-13118b6d1e3a","type":"Microsoft.Authorization/policyDefinitions","name":"523b5cd1-3e23-492f-a539-13118b6d1e3a"}' - headers: - cache-control: - - no-cache - content-length: - - '1046' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''529ea018-6afc-4ed4-95bd-7c9ee47b00bc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Synapse workspaces with SQL auditing - to storage account destination should be configured with 90 days retention - or higher","policyType":"BuiltIn","mode":"Indexed","description":"For incident - investigation purposes, we recommend setting the data retention for your Synapse - workspace'' SQL auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.","metadata":{"version":"2.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/auditingSettings","name":"default","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Synapse/workspaces/auditingSettings/isAzureMonitorTargetEnabled","equals":true},{"field":"Microsoft.Synapse/workspaces/auditingSettings/storageEndpoint","equals":""}]},{"field":"Microsoft.Synapse/workspaces/auditingSettings/retentionDays","equals":0},{"field":"Microsoft.Synapse/workspaces/auditingSettings/retentionDays","greaterOrEquals":90}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/529ea018-6afc-4ed4-95bd-7c9ee47b00bc","type":"Microsoft.Authorization/policyDefinitions","name":"529ea018-6afc-4ed4-95bd-7c9ee47b00bc"}' - headers: - cache-control: - - no-cache - content-length: - - '1597' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5345bb39-67dc-4960-a1bf-427e16b9a0bd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Connection throttling should be enabled - for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without Connection - throttling enabled. This setting enables temporary connection throttling per - IP for too many invalid password login failures.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"connection_throttling","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5345bb39-67dc-4960-a1bf-427e16b9a0bd","type":"Microsoft.Authorization/policyDefinitions","name":"5345bb39-67dc-4960-a1bf-427e16b9a0bd"}' - headers: - cache-control: - - no-cache - content-length: - - '1132' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''53503636-bcc9-4748-9663-5348217f160f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure SignalR Service should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The private link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to your Azure SignalR Service resource - instead of the entire service, you''ll reduce your data leakage risks. Learn - more about private links at: https://aka.ms/asrs/privatelink.","metadata":{"version":"1.0.1","category":"SignalR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.SignalRService/SignalR"},{"count":{"field":"Microsoft.SignalRService/SignalR/privateEndpointConnections[*]","where":{"field":"Microsoft.SignalRService/SignalR/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/53503636-bcc9-4748-9663-5348217f160f","type":"Microsoft.Authorization/policyDefinitions","name":"53503636-bcc9-4748-9663-5348217f160f"}' - headers: - cache-control: - - no-cache - content-length: - - '1395' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''55615ac9-af46-4a59-874e-391cc3dfb490'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:41:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Firewall should be enabled - on Key Vault","policyType":"BuiltIn","mode":"Indexed","description":"Key vault''s - firewall prevents unauthorized traffic from reaching your key vault and provides - an additional layer of protection for your secrets. Enable the firewall to - make sure that only traffic from allowed networks can access your key vault.","metadata":{"version":"1.0.2-preview","category":"Key - Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","notEquals":"Deny"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/55615ac9-af46-4a59-874e-391cc3dfb490","type":"Microsoft.Authorization/policyDefinitions","name":"55615ac9-af46-4a59-874e-391cc3dfb490"}' - headers: - cache-control: - - no-cache - content-length: - - '1055' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:41:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''564feb30-bf6a-4854-b4bb-0d2d2d1e6c66'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web Application Firewall (WAF) should - be enabled for Application Gateway","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Azure Web Application Firewall (WAF) in front of public facing web applications - for additional inspection of incoming traffic. Web Application Firewall (WAF) - provides centralized protection of your web applications from common exploits - and vulnerabilities such as SQL injections, Cross-Site Scripting, local and - remote file executions. You can also restrict access to your web applications - by countries, IP address ranges, and other http(s) parameters via custom rules.","metadata":{"version":"1.0.1","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGateways"},{"field":"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/564feb30-bf6a-4854-b4bb-0d2d2d1e6c66","type":"Microsoft.Authorization/policyDefinitions","name":"564feb30-bf6a-4854-b4bb-0d2d2d1e6c66"}' - headers: - cache-control: - - no-cache - content-length: - - '1312' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''56a5ee18-2ae6-4810-86f7-18e39ce5629b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Automation accounts should use - customer-managed keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your Azure Automation - Accounts. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/automation-cmk.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"''Audit'' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. ''Deny'' blocks the non-compliant resource creation or update. - ''Disabled'' turns off the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/encryption.keySource","notEquals":"Microsoft.Keyvault"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/56a5ee18-2ae6-4810-86f7-18e39ce5629b","type":"Microsoft.Authorization/policyDefinitions","name":"56a5ee18-2ae6-4810-86f7-18e39ce5629b"}' - headers: - cache-control: - - no-cache - content-length: - - '1499' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''56fd377d-098c-4f02-8406-81eb055902b8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"IP firewall rules on Azure Synapse workspaces - should be removed","policyType":"BuiltIn","mode":"All","description":"Removing - all IP firewall rules improves security by ensuring your Azure Synapse workspace - can only be accessed from a private endpoint. This configuration audits creation - of firewall rules that allow public network access on the workspace.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces/firewallrules"},{"field":"name","exists":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/56fd377d-098c-4f02-8406-81eb055902b8","type":"Microsoft.Authorization/policyDefinitions","name":"56fd377d-098c-4f02-8406-81eb055902b8"}' - headers: - cache-control: - - no-cache - content-length: - - '990' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5744710e-cc2f-4ee8-8809-3b11e89f4bc9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"CORS should not allow every resource - to access your Web Applications","policyType":"BuiltIn","mode":"Indexed","description":"Cross-Origin - Resource Sharing (CORS) should not allow all domains to access your web application. - Allow only required domains to interact with your web app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.cors.allowedOrigins[*]","notEquals":"*"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5744710e-cc2f-4ee8-8809-3b11e89f4bc9","type":"Microsoft.Authorization/policyDefinitions","name":"5744710e-cc2f-4ee8-8809-3b11e89f4bc9"}' - headers: - cache-control: - - no-cache - content-length: - - '1057' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5752e6d6-1206-46d8-8ab1-ecc2f71a8112'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows web servers should be configured - to use secure communication protocols","policyType":"BuiltIn","mode":"Indexed","description":"To - protect the privacy of information communicated over the Internet, your web - servers should use the latest version of the industry-standard cryptographic - protocol, Transport Layer Security (TLS). TLS secures communications over - a network by using security certificates to encrypt a connection between machines. - TLS 1.3 is faster and more secure than the earlier versions: TLS 1.0-1.2 and - SSL 2-3, which are all considered legacy protocols.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AuditSecureProtocol","version":"1.*","configurationParameter":{"MinimumTLSVersion":"[SecureWebServer]s1;MinimumTLSVersion"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"MinimumTLSVersion":{"type":"String","metadata":{"displayName":"Minimum - TLS version","description":"The minimum TLS protocol version that should be - enabled. Windows web servers with lower TLS versions will be marked as non-compliant."},"allowedValues":["1.1","1.2"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[SecureWebServer]s1;MinimumTLSVersion'', - ''='', parameters(''MinimumTLSVersion'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5752e6d6-1206-46d8-8ab1-ecc2f71a8112","type":"Microsoft.Authorization/policyDefinitions","name":"5752e6d6-1206-46d8-8ab1-ecc2f71a8112"}' - headers: - cache-control: - - no-cache - content-length: - - '4427' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure disk access resources with - private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual networks to Azure services without a public - IP address at the source or destination. By mapping private endpoints to disk - access resources, you can reduce data leakage risks. Learn more about private - links at: https://aka.ms/disksprivatelinksdoc.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"location":{"type":"String","metadata":{"displayName":"Location","strongType":"location","description":"All - disk access resources in this region are validated and private endpoints are - created in this region."}},"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet ID","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/diskAccesses"},{"field":"location","equals":"[parameters(''location'')]"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/diskAccesses/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[concat(''pe'',''-'',field(''name''))]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[parameters(''name'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2019-11-01","location":"[parameters(''location'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[parameters(''name'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["disks"]}}],"manualPrivateLinkServiceConnections":[]}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5","type":"Microsoft.Authorization/policyDefinitions","name":"582bd7a6-a5f6-4dc6-b9dc-9cb81fe0d4c5"}' - headers: - cache-control: - - no-cache - content-length: - - '2824' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''58383b73-94a9-4414-b382-4146eb02611b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Detailed Tracking''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Detailed Tracking'' for auditing DPAPI, process creation/termination, - RPC events, and PNP activity. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","version":"1.*","configurationParameter":{"AuditProcessTermination":"Audit - Process Termination;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditProcessTermination":{"type":"String","metadata":{"displayName":"Audit - Process Termination","description":"Specifies whether audit events are generated - when a process has exited. Recommended for monitoring termination of critical - processes."},"allowedValues":["No Auditing","Success","Failure","Success and - Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Process Termination;ExpectedValue'', ''='', parameters(''AuditProcessTermination'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58383b73-94a9-4414-b382-4146eb02611b","type":"Microsoft.Authorization/policyDefinitions","name":"58383b73-94a9-4414-b382-4146eb02611b"}' - headers: - cache-control: - - no-cache - content-length: - - '4489' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''58440f8a-10c5-4151-bdce-dfbaad4a20b7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"CosmosDB accounts should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to your CosmosDB account, data leakage - risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*]","where":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58440f8a-10c5-4151-bdce-dfbaad4a20b7","type":"Microsoft.Authorization/policyDefinitions","name":"58440f8a-10c5-4151-bdce-dfbaad4a20b7"}' - headers: - cache-control: - - no-cache - content-length: - - '1396' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''58c460e9-7573-4bb2-9676-339c2f2486bb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines on which Windows - Serial Console is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine does - not have the Serial Console software installed or if the EMS port number or - baud rate are not configured with the same values as the policy parameters.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsSerialConsole","version":"1.*","configurationParameter":{"EMSPortNumber":"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber","EMSBaudRate":"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"EMSPortNumber":{"type":"String","metadata":{"displayName":"EMS - Port Number","description":"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["1","2","3","4"]},"EMSBaudRate":{"type":"String","metadata":{"displayName":"EMS - Baud Rate","description":"An integer indicating the baud rate to be used for - the Emergency Management Services (EMS) console redirection. For more information - on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["9600","19200","38400","57600","115200"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsSerialConsole","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber'', - ''='', parameters(''EMSPortNumber''), '','', ''[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate'', - ''='', parameters(''EMSBaudRate'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb","type":"Microsoft.Authorization/policyDefinitions","name":"58c460e9-7573-4bb2-9676-339c2f2486bb"}' - headers: - cache-control: - - no-cache - content-length: - - '4691' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''58d94fc1-a072-47c2-bd37-9cdb38e77453'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure Function app is - using the latest version of TLS encryption","policyType":"BuiltIn","mode":"Indexed","description":"Please - use /providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193 - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/58d94fc1-a072-47c2-bd37-9cdb38e77453","type":"Microsoft.Authorization/policyDefinitions","name":"58d94fc1-a072-47c2-bd37-9cdb38e77453"}' - headers: - cache-control: - - no-cache - content-length: - - '1373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5a913c68-0590-402c-a531-e57e19379da3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Operating system version should be the - most current version for your cloud service roles","policyType":"BuiltIn","mode":"All","description":"Keeping - the operating system (OS) on the most recent supported version for your cloud - service roles enhances the systems security posture.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.ClassicCompute/domainNames/slots/roles"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"8bc390da-9eb6-938d-25ed-44a35d9bcc9d","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5a913c68-0590-402c-a531-e57e19379da3","type":"Microsoft.Authorization/policyDefinitions","name":"5a913c68-0590-402c-a531-e57e19379da3"}' - headers: - cache-control: - - no-cache - content-length: - - '1099' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5aa11bbc-5c76-4302-80e5-aba46a4282e7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have a minimum password age of 1 day","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have a minimum password age - of 1 day. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordAge","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aa11bbc-5c76-4302-80e5-aba46a4282e7","type":"Microsoft.Authorization/policyDefinitions","name":"5aa11bbc-5c76-4302-80e5-aba46a4282e7"}' - headers: - cache-control: - - no-cache - content-length: - - '3187' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5aebc8d1-020d-4037-89a0-02043a7524ec'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not restrict the minimum password length to 14 characters","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not restrict the minimum password - length to 14 characters. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5aebc8d1-020d-4037-89a0-02043a7524ec","type":"Microsoft.Authorization/policyDefinitions","name":"5aebc8d1-020d-4037-89a0-02043a7524ec"}' - headers: - cache-control: - - no-cache - content-length: - - '3224' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5b054a0d-39e2-4d53-bea3-9734cad2c69b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that allow re-use - of the previous 24 passwords","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that allow re-use of the previous 24 passwords","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"EnforcePasswordHistory","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b","type":"Microsoft.Authorization/policyDefinitions","name":"5b054a0d-39e2-4d53-bea3-9734cad2c69b"}' - headers: - cache-control: - - no-cache - content-length: - - '3632' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5b842acb-0fe7-41b0-9f40-880ec4ad84d8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Linux VMs that have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b842acb-0fe7-41b0-9f40-880ec4ad84d8","type":"Microsoft.Authorization/policyDefinitions","name":"5b842acb-0fe7-41b0-9f40-880ec4ad84d8"}' - headers: - cache-control: - - no-cache - content-length: - - '4510' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Container registries should be encrypted - with a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of the contents of - your registries. By default, the data is encrypted at rest with service-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/acr/CMK.","metadata":{"version":"1.1.2","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"field":"Microsoft.ContainerRegistry/registries/encryption.status","notEquals":"enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580","type":"Microsoft.Authorization/policyDefinitions","name":"5b9159ae-1701-4a6f-9a7a-aa9c8ddd0580"}' - headers: - cache-control: - - no-cache - content-length: - - '1329' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5bb220d9-2698-4ee4-8404-b9c30c9df609'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure WEB app has ''Client Certificates - (Incoming client certificates)'' set to ''On''","policyType":"BuiltIn","mode":"Indexed","description":"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients that have a valid certificate will be able to reach the app.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5bb220d9-2698-4ee4-8404-b9c30c9df609","type":"Microsoft.Authorization/policyDefinitions","name":"5bb220d9-2698-4ee4-8404-b9c30c9df609"}' - headers: - cache-control: - - no-cache - content-length: - - '980' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5bb36dda-8a78-4df9-affd-4f05a8612a8a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs on which the remote connection status does not match the - specified one","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the remote host connection status does not match the specified one. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"host":{"type":"String","metadata":{"displayName":"[Deprecated]: - Remote Host Name","description":"Specifies the Domain Name System (DNS) name - or IP address of the remote host machine."}},"port":{"type":"String","metadata":{"displayName":"[Deprecated]: - Port","description":"The TCP port number on the remote host name."}},"shouldConnect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Should connect to remote host","description":"Must be ''True'' or ''False''. - ''True'' indicates that the virtual machine should be able to establish a - connection with the remote host specified, so the machine will be non-compliant - if it cannot establish a connection. ''False'' indicates that the virtual - machine should not be able to establish a connection with the remote host - specified, so the machine will be non-compliant if it can establish a connection."},"allowedValues":["True","False"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsRemoteConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsRemoteConnection]WindowsRemoteConnection1;host'', - ''='', parameters(''host''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;port'', - ''='', parameters(''port''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect'', - ''='', parameters(''shouldConnect'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsRemoteConnection"},"host":{"value":"[parameters(''host'')]"},"port":{"value":"[parameters(''port'')]"},"shouldConnect":{"value":"[parameters(''shouldConnect'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"host":{"type":"string"},"port":{"type":"string"},"shouldConnect":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;host","value":"[parameters(''host'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;port","value":"[parameters(''port'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect","value":"[parameters(''shouldConnect'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;host","value":"[parameters(''host'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;port","value":"[parameters(''port'')]"},{"name":"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect","value":"[parameters(''shouldConnect'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5bb36dda-8a78-4df9-affd-4f05a8612a8a","type":"Microsoft.Authorization/policyDefinitions","name":"5bb36dda-8a78-4df9-affd-4f05a8612a8a"}' - headers: - cache-control: - - no-cache - content-length: - - '7938' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5c028d2a-1889-45f6-b821-31f42711ced8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Network Security''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Network Security''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkSecurity","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c028d2a-1889-45f6-b821-31f42711ced8","type":"Microsoft.Authorization/policyDefinitions","name":"5c028d2a-1889-45f6-b821-31f42711ced8"}' - headers: - cache-control: - - no-cache - content-length: - - '3263' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log Analytics agent should be enabled - in virtual machine scale sets for listed virtual machine images","policyType":"BuiltIn","mode":"Indexed","description":"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138","type":"Microsoft.Authorization/policyDefinitions","name":"5c3bc7b8-a64c-4e08-a9cd-7ff0f31e1138"}' - headers: - cache-control: - - no-cache - content-length: - - '6346' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5c607a2e-c700-4744-8254-d77e7c9eb5e4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"External accounts with write permissions - should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with write privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"04e7147b-0deb-9796-2e5c-0336343ceb3d","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5c607a2e-c700-4744-8254-d77e7c9eb5e4","type":"Microsoft.Authorization/policyDefinitions","name":"5c607a2e-c700-4744-8254-d77e7c9eb5e4"}' - headers: - cache-control: - - no-cache - content-length: - - '1061' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5df82f4f-773a-4a2d-97a2-422a806f1a55'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Function App should only - be accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForFunctionApp","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5df82f4f-773a-4a2d-97a2-422a806f1a55","type":"Microsoft.Authorization/policyDefinitions","name":"5df82f4f-773a-4a2d-97a2-422a806f1a55"}' - headers: - cache-control: - - no-cache - content-length: - - '1239' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5e1de0e3-42cb-4ebc-a86d-61d0c619ca48'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for PostgreSQL flexible servers","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - Database for PostgreSQL flexible servers can only be accessed from a private - endpoint. This configuration strictly disables access from any public address - space outside of Azure IP range and denies all logins that match IP or virtual - network-based firewall rules.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/flexibleServers"},{"field":"Microsoft.DBforPostgreSQL/flexibleServers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e1de0e3-42cb-4ebc-a86d-61d0c619ca48","type":"Microsoft.Authorization/policyDefinitions","name":"5e1de0e3-42cb-4ebc-a86d-61d0c619ca48"}' - headers: - cache-control: - - no-cache - content-length: - - '1179' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5e3315e0-a414-4efb-a4d2-c7bd2b0443d2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using latest supported .NET Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported .NET Framework version for the latest security classes. - Using older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestDotNet","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e3315e0-a414-4efb-a4d2-c7bd2b0443d2","type":"Microsoft.Authorization/policyDefinitions","name":"5e3315e0-a414-4efb-a4d2-c7bd2b0443d2"}' - headers: - cache-control: - - no-cache - content-length: - - '1293' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5e393799-e3ca-4e43-a9a5-0ec4648a57d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5e393799-e3ca-4e43-a9a5-0ec4648a57d9","type":"Microsoft.Authorization/policyDefinitions","name":"5e393799-e3ca-4e43-a9a5-0ec4648a57d9"}' - headers: - cache-control: - - no-cache - content-length: - - '3201' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - only in India data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: West India, South India, - Central India","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["westindia","southindia","centralindia"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54","type":"Microsoft.Authorization/policyDefinitions","name":"5ee85ce5-e7eb-44d6-b4a2-32a24be1ca54"}' - headers: - cache-control: - - no-cache - content-length: - - '662' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Log Analytics agent for Linux - virtual machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Log Analytics agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all VMs in the set by calling upgrade on them. In CLI this would be az vmss - update-instances.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"},{"field":"Microsoft.Compute/imageSKU","like":"8*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"},{"field":"Microsoft.Compute/imageSKU","like":"15*"}]}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"sles-12-sp*"},{"field":"Microsoft.Compute/imageOffer","like":"sles-15-sp*"}]},{"field":"Microsoft.Compute/imageSKU","in":["gen1","gen2"]}]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","in":["UbuntuServer","0001-com-ubuntu-server-focal"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16_04*lts-gen2"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18_04*lts-gen2"},{"field":"Microsoft.Compute/imageSKU","like":"20_04*lts"},{"field":"Microsoft.Compute/imageSKU","like":"20_04*lts-gen2"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"8*"},{"field":"Microsoft.Compute/imageSKU","like":"9*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"},{"field":"Microsoft.Compute/imageSKU","like":"8*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293","/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"OMSAgentForLinux","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux","vmExtensionTypeHandlerVersion":"1.13"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.Compute/virtualMachineScaleSets/extensions","location":"[parameters(''location'')]","apiVersion":"2018-06-01","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true,"settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069","type":"Microsoft.Authorization/policyDefinitions","name":"5ee9e9ed-0b42-41b7-8c9c-3cfb2fbe2069"}' - headers: - cache-control: - - no-cache - content-length: - - '6123' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5f0bc445-3935-4915-9981-011aa2b46147'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Private endpoint should be - configured for Key Vault","policyType":"BuiltIn","mode":"Indexed","description":"Private - link provides a way to connect Key Vault to your Azure resources without sending - traffic over the public internet. Private link provides defense in depth protection - against data exfiltration.","metadata":{"version":"1.1.0-preview","category":"Key - Vault","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/privateEndpointConnections","exists":"false"},{"count":{"field":"Microsoft.KeyVault/vaults/privateEndpointConnections[*]"},"equals":0}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0bc445-3935-4915-9981-011aa2b46147","type":"Microsoft.Authorization/policyDefinitions","name":"5f0bc445-3935-4915-9981-011aa2b46147"}' - headers: - cache-control: - - no-cache - content-length: - - '1129' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5f0c7d88-c7de-45b8-ac49-db49e72eaa78'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Machine Learning workspaces should - use user-assigned managed identity","policyType":"BuiltIn","mode":"Indexed","description":"Manange - access to Azure ML workspace and associated resources, Azure Container Registry, - KeyVault, Storage, and App Insights using user-assigned managed identity. - By default, system-assigned managed identity is used by Azure ML workspace - to access the associated resources. User-assigned managed identity allows - you to create the identity as an Azure resource and maintain the life cycle - of that identity. Learn more at https://docs.microsoft.com/azure/machine-learning/how-to-use-managed-identities?tabs=python.","metadata":{"version":"1.0.0","category":"Machine - Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"anyOf":[{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","exists":false},{"field":"Microsoft.MachineLearningServices/workspaces/primaryUserAssignedIdentity","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0c7d88-c7de-45b8-ac49-db49e72eaa78","type":"Microsoft.Authorization/policyDefinitions","name":"5f0c7d88-c7de-45b8-ac49-db49e72eaa78"}' - headers: - cache-control: - - no-cache - content-length: - - '1473' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5f0f936f-2f01-4bf5-b6be-d423792fa562'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities in Azure Container Registry - images should be remediated","policyType":"BuiltIn","mode":"All","description":"Container - image vulnerability assessment scans your registry for security vulnerabilities - on each pushed container image and exposes detailed findings for each image - (powered by Qualys). Resolving the vulnerabilities can greatly improve your - containers'' security posture and protect them from attacks.","metadata":{"version":"2.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"dbd0cb49-b563-45e7-9724-889e799fa648","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f0f936f-2f01-4bf5-b6be-d423792fa562","type":"Microsoft.Authorization/policyDefinitions","name":"5f0f936f-2f01-4bf5-b6be-d423792fa562"}' - headers: - cache-control: - - no-cache - content-length: - - '1237' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5f76cf89-fbf2-47fd-a3f4-b891fa780b60'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"External accounts with read permissions - should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with read privileges should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"a8c6a4ad-d51e-88fe-2979-d3ee3c864f8b","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f76cf89-fbf2-47fd-a3f4-b891fa780b60","type":"Microsoft.Authorization/policyDefinitions","name":"5f76cf89-fbf2-47fd-a3f4-b891fa780b60"}' - headers: - cache-control: - - no-cache - content-length: - - '1059' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5f8eb305-9c9f-4abe-9bb0-df220d9faba2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy - Configure Linux machines - to automatically install the Azure Security agent","policyType":"BuiltIn","mode":"Indexed","description":"Configure - Linux machines to automatically install the Azure Security agent. Security - Center collects events from the agent and uses them to provide security alerts - and tailored hardening tasks (recommendations). Create a resource group and - Log Analytics workspace in the same region as the machine to store audit records. - Target virtual machines must be in a supported location.","metadata":{"category":"Security - Center","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":["australiacentral","australiaeast","australiasoutheast","centralindia","centralus","eastasia","eastus2euap","eastus","eastus2","germanywestcentral","japaneast","northcentralus","northeurope","southcentralus","southeastasia","uksouth","westcentralus","westeurope","westus","westus2"]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["debian"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"8"},{"field":"Microsoft.Compute/imageSKU","like":"9"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Debian"},{"field":"Microsoft.Compute/imageOffer","in":["debian-10"]},{"field":"Microsoft.Compute/imageSKU","like":"10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachines/extensions","deploymentScope":"subscription","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"AzureSecurityLinuxAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/Publisher","equals":"Microsoft.Azure.Security.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","in":["Succeeded","Provisioning - succeeded"]}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"location":"eastus","properties":{"mode":"incremental","parameters":{"resourceGroup":{"value":"[resourceGroup().name]"},"location":{"value":"[field(''location'')]"},"vmName":{"value":"[field(''name'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroup":{"type":"string"},"location":{"type":"string"},"vmName":{"type":"string"}},"variables":{"pairedLocations":{"australiacentral":"australiacentral","australiaeast":"australiaeast","australiasoutheast":"australiasoutheast","centralindia":"centralindia","centralus":"centralus","eastasia":"eastasia","eastus2euap":"eastus2euap","eastus":"eastus","eastus2":"eastus2","germanywestcentral":"germanywestcentral","japaneast":"japaneast","northcentralus":"northcentralus","northeurope":"northeurope","southcentralus":"southcentralus","southeastasia":"southeastasia","uksouth":"uksouth","westcentralus":"westcentralus","westeurope":"westeurope","westus":"westus","westus2":"westus2"},"locationLongNameToShortMap":{"australiacentral":"CAU","australiaeast":"EAU","australiasoutheast":"SEAU","centralindia":"CIN","centralus":"CUS","eastasia":"EA","eastus2euap":"eus2p","eastus":"EUS","eastus2":"EUS2","germanywestcentral":"DEWC","japaneast":"EJP","northcentralus":"NCUS","northeurope":"NEU","southcentralus":"SCUS","southeastasia":"SEA","uksouth":"SUK","westcentralus":"WCUS","westeurope":"WEU","westus":"WUS","westus2":"WUS2"},"locationCode":"[variables(''locationLongNameToShortMap'')[variables(''pairedLocations'')[parameters(''location'')]]]","subscriptionId":"[subscription().subscriptionId]","defaultRGName":"[concat(''DefaultResourceGroup-'', - variables(''locationCode''))]","defaultRGLocation":"[variables(''pairedLocations'')[parameters(''location'')]]","workspaceName":"[concat(''defaultWorkspace-'', - variables(''subscriptionId''),''-'', variables(''locationCode''))]","dcrName":"[concat(''Microsoft-Security-'', - variables(''locationCode''), ''-dcr'')]","dcrId":"[concat(''/subscriptions/'', - variables(''subscriptionId''), ''/resourceGroups/'', variables(''defaultRGName''), - ''/providers/Microsoft.Insights/dataCollectionRules/'', variables(''dcrName''))]","dcraName":"[concat(parameters(''vmName''),''/Microsoft.Insights/Security-RulesAssociation'')]","deployAzureSecurityLinuxAgent":"[concat(''deployAzureSecurityLinuxAgent-'', - uniqueString(deployment().name))]","deployDefaultAscResourceGroup":"[concat(''deployDefaultAscResourceGroup-'', - uniqueString(deployment().name))]","deployDataCollectionRulesAssociation":"[concat(''deployDataCollectionRulesAssociation-'', - uniqueString(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''deployAzureSecurityLinuxAgent'')]","apiVersion":"2020-06-01","resourceGroup":"[parameters(''resourceGroup'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"vmName":{"value":"[parameters(''vmName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"vmName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/'', ''AzureSecurityLinuxAgent'')]","apiVersion":"2019-03-01","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Security.Monitoring","type":"AzureSecurityLinuxAgent","typeHandlerVersion":"2.0","autoUpgradeMinorVersion":"true","settings":{},"protectedsettings":{}}}]}}},{"type":"Microsoft.Resources/resourceGroups","name":"[variables(''defaultRGName'')]","apiVersion":"2019-05-01","location":"[variables(''defaultRGLocation'')]"},{"type":"Microsoft.Resources/deployments","name":"[variables(''deployDefaultAscResourceGroup'')]","apiVersion":"2020-06-01","resourceGroup":"[variables(''defaultRGName'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"defaultRGLocation":{"value":"[variables(''defaultRGLocation'')]"},"workspaceName":{"value":"[variables(''workspaceName'')]"},"dcrName":{"value":"[variables(''dcrName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"defaultRGLocation":{"type":"string"},"workspaceName":{"type":"string"},"dcrName":{"type":"string"}},"variables":{"securitySolution":{"Name":"[Concat(''Security'', - ''('', parameters(''workspaceName''), '')'')]","GalleryName":"Security"},"securityCenterFreeSolution":{"Name":"[Concat(''SecurityCenterFree'', - ''('', parameters(''workspaceName''), '')'')]","GalleryName":"SecurityCenterFree"}},"resources":[{"type":"Microsoft.OperationalInsights/workspaces","name":"[parameters(''workspaceName'')]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","properties":{"sku":{"name":"pernode"},"retentionInDays":30,"features":{"searchVersion":1}}},{"type":"Microsoft.OperationsManagement/solutions","name":"[variables(''securitySolution'').Name]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]"},"plan":{"name":"[variables(''securitySolution'').Name]","publisher":"Microsoft","product":"[Concat(''OMSGallery/'', - variables(''securitySolution'').GalleryName)]","promotionCode":""}},{"type":"Microsoft.OperationsManagement/solutions","name":"[variables(''securityCenterFreeSolution'').Name]","apiVersion":"2015-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]"},"plan":{"name":"[variables(''securityCenterFreeSolution'').Name]","publisher":"Microsoft","product":"[Concat(''OMSGallery/'', - variables(''securityCenterFreeSolution'').GalleryName)]","promotionCode":""}},{"type":"Microsoft.Insights/dataCollectionRules","name":"[parameters(''dcrName'')]","apiVersion":"2019-11-01-preview","location":"[parameters(''defaultRGLocation'')]","dependsOn":["[parameters(''workspaceName'')]"],"properties":{"description":"Data - collection rule for Azure Security Center. Deleting this rule will break the - detection of security vulnerabilities.","dataSources":{"windowsEventLogs":[{"name":"RomeDetectionEventDataSource","streams":["Microsoft-RomeDetectionEvent"],"scheduledTransferPeriod":"PT5M","xPathQueries":["Security!*","Microsoft-Windows-AppLocker/EXE - and DLL!*"]}],"syslog":[{"name":"SyslogDataSource","streams":["Microsoft-Syslog"],"facilityNames":["kern","auth","authpriv","cron","user","daemon","syslog","local0"],"logLevels":["Debug","Critical","Emergency"]}],"extensions":[{"extensionName":"AzureSecurityLinuxAgent","name":"AscLinuxDataSource","streams":["Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-SecurityBaselineSummary","Microsoft-ProcessInvestigator","Microsoft-Auditd","Microsoft-ProtectionStatus","Microsoft-Heartbeat"],"extensionSettings":{"scanners":[{"name":"heartbeat","frequency":"PT1H"},{"name":"time","frequency":"PT8H"},{"name":"antimalware","frequency":"PT8H"},{"name":"codeintegrity","frequency":"P1D"},{"name":"processinvestigator","frequency":"PT1H"},{"name":"baseline","frequency":"P1D","options":[{"name":"Baseline","value":"Azure.Ubuntu"},{"name":"AscBaseline","value":"OMS.Linux"}]},{"name":"docker","frequency":"P1D","options":[{"name":"Baseline","value":"Azure.Docker.Linux"},{"name":"AscBaseline","value":"OMS.Docker.Linux"}]}]}},{"extensionName":"AzureSecurityWindowsAgent","name":"AsaWindowsDataSource","streams":["Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-ProcessInvestigator","Microsoft-ProtectionStatus","Microsoft-SecurityBaselineSummary"],"extensionSettings":{"scanners":[{"name":"heartbeat","frequency":"PT1H"},{"name":"baseline","frequency":"P1D"},{"name":"antimalware","frequency":"P1D"},{"name":"processinvestigator","frequency":"PT1H"}]}}]},"destinations":{"logAnalytics":[{"workspaceResourceId":"[resourceId(''Microsoft.OperationalInsights/workspaces/'', - parameters(''workspaceName''))]","name":"LogAnalyticsDest"}]},"dataFlows":[{"streams":["Microsoft-Syslog","Microsoft-OperationLog","Microsoft-SecurityBaseline","Microsoft-SecurityBaselineSummary","Microsoft-RomeDetectionEvent","Microsoft-ProcessInvestigator","Microsoft-Auditd","Microsoft-ProtectionStatus","Microsoft-Heartbeat"],"destinations":["LogAnalyticsDest"]}]}}]}},"dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups'', - variables(''defaultRGName''))]"]},{"type":"Microsoft.Resources/deployments","name":"[variables(''deployDataCollectionRulesAssociation'')]","apiVersion":"2020-06-01","resourceGroup":"[parameters(''resourceGroup'')]","dependsOn":["[variables(''deployDefaultAscResourceGroup'')]"],"properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"vmName":{"value":"[parameters(''vmName'')]"},"dcrId":{"value":"[variables(''dcrId'')]"},"dcraName":{"value":"[variables(''dcraName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"vmName":{"type":"string"},"dcrId":{"type":"string"},"dcraName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Compute/virtualMachines/providers/dataCollectionRuleAssociations","name":"[parameters(''dcraName'')]","apiVersion":"2019-11-01-preview","properties":{"description":"Association - of data collection rule for Azure Security Center. Deleting this association - will break the detection of security vulnerabilities for this virtual machine.","dataCollectionRuleId":"[parameters(''dcrId'')]"}}]}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5f8eb305-9c9f-4abe-9bb0-df220d9faba2","type":"Microsoft.Authorization/policyDefinitions","name":"5f8eb305-9c9f-4abe-9bb0-df220d9faba2"}' - headers: - cache-control: - - no-cache - content-length: - - '13999' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5fc23db3-dd4d-4c56-bcc7-43626243e601'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Windows virtual machines - on which the Windows Guest Configuration extension is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Windows virtual machines hosted in Azure that are supported - by Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"version":"2.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforWindows","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforWindows"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5fc23db3-dd4d-4c56-bcc7-43626243e601","type":"Microsoft.Authorization/policyDefinitions","name":"5fc23db3-dd4d-4c56-bcc7-43626243e601"}' - headers: - cache-control: - - no-cache - content-length: - - '3360' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''5ffd78d9-436d-4b41-a421-5baa819e3008'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add or replace a tag on resources","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value when any resource is created or updated. - Existing resources can be remediated by triggering a remediation task. Does - not modify tags on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/5ffd78d9-436d-4b41-a421-5baa819e3008","type":"Microsoft.Authorization/policyDefinitions","name":"5ffd78d9-436d-4b41-a421-5baa819e3008"}' - headers: - cache-control: - - no-cache - content-length: - - '1225' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''60aeaf73-a074-417a-905f-7ce9df0ff77b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Object Access''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Object Access''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesObjectAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60aeaf73-a074-417a-905f-7ce9df0ff77b","type":"Microsoft.Authorization/policyDefinitions","name":"60aeaf73-a074-417a-905f-7ce9df0ff77b"}' - headers: - cache-control: - - no-cache - content-length: - - '3268' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''60d21c4f-21a3-4d94-85f4-b924e6aeeda4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage Accounts should use a virtual - network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Storage Account not configured to use a virtual network - service endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"anyOf":[{"field":"Microsoft.Storage/storageAccounts/networkAcls.defaultAction","notEquals":"Deny"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.virtualNetworkRules[*].id","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60d21c4f-21a3-4d94-85f4-b924e6aeeda4","type":"Microsoft.Authorization/policyDefinitions","name":"60d21c4f-21a3-4d94-85f4-b924e6aeeda4"}' - headers: - cache-control: - - no-cache - content-length: - - '1012' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''60ffe3e2-4604-4460-8f22-0f1da058266c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows web servers that are not using secure communication protocols","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows web servers that are not using secure communication protocols - (TLS 1.1 or TLS 1.2). For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/60ffe3e2-4604-4460-8f22-0f1da058266c","type":"Microsoft.Authorization/policyDefinitions","name":"60ffe3e2-4604-4460-8f22-0f1da058266c"}' - headers: - cache-control: - - no-cache - content-length: - - '3214' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6134c3db-786f-471e-87bc-8f479dc890f6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Advanced Data Security on SQL - servers","policyType":"BuiltIn","mode":"Indexed","description":"This policy - enables Advanced Data Security on SQL Servers. This includes turning on Threat - Detection and Vulnerability Assessment. It will automatically create a storage - account in the same region and resource group as the SQL server to store scan - results, with a ''sqlva'' prefix.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/securityAlertPolicies.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"location":{"type":"string"}},"variables":{"serverResourceGroupName":"[resourceGroup().name]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - variables(''serverResourceGroupName''), parameters(''location''))]","storageName":"[tolower(concat(''sqlva'', - variables(''uniqueStorage'')))]"},"resources":[{"type":"Microsoft.Storage/storageAccounts","name":"[variables(''storageName'')]","apiVersion":"2019-04-01","location":"[parameters(''location'')]","sku":{"name":"Standard_LRS"},"kind":"StorageV2","properties":{}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/securityAlertPolicies","apiVersion":"2017-03-01-preview","properties":{"state":"Enabled","emailAccountAdmins":true}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/vulnerabilityAssessments","apiVersion":"2018-06-01-preview","properties":{"storageContainerPath":"[concat(reference(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName''))).primaryEndpoints.blob, ''vulnerability-assessment'')]","storageAccountAccessKey":"[listKeys(resourceId(''Microsoft.Storage/storageAccounts'', - variables(''storageName'')), ''2018-02-01'').keys[0].value]","recurringScans":{"isEnabled":true,"emailSubscriptionAdmins":true,"emails":[]}},"dependsOn":["[concat(''Microsoft.Storage/storageAccounts/'', - variables(''storageName''))]","[concat(''Microsoft.Sql/servers/'', parameters(''serverName''), - ''/securityAlertPolicies/Default'')]"]}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6134c3db-786f-471e-87bc-8f479dc890f6","type":"Microsoft.Authorization/policyDefinitions","name":"6134c3db-786f-471e-87bc-8f479dc890f6"}' - headers: - cache-control: - - no-cache - content-length: - - '2992' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6141c932-9384-44c6-a395-59e4c057d7c9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure time zone on Windows machines.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to set specified time zone - on Windows virtual machines.","metadata":{"version":"1.1.0","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"]},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"TimeZone":{"type":"String","metadata":{"displayName":"Time - zone","description":"The expected time zone"},"allowedValues":["(UTC-12:00) - International Date Line West","(UTC-11:00) Coordinated Universal Time-11","(UTC-10:00) - Aleutian Islands","(UTC-10:00) Hawaii","(UTC-09:30) Marquesas Islands","(UTC-09:00) - Alaska","(UTC-09:00) Coordinated Universal Time-09","(UTC-08:00) Baja California","(UTC-08:00) - Coordinated Universal Time-08","(UTC-08:00) Pacific Time (US & Canada)","(UTC-07:00) - Arizona","(UTC-07:00) Chihuahua, La Paz, Mazatlan","(UTC-07:00) Mountain Time - (US & Canada)","(UTC-06:00) Central America","(UTC-06:00) Central Time (US - & Canada)","(UTC-06:00) Easter Island","(UTC-06:00) Guadalajara, Mexico City, - Monterrey","(UTC-06:00) Saskatchewan","(UTC-05:00) Bogota, Lima, Quito, Rio - Branco","(UTC-05:00) Chetumal","(UTC-05:00) Eastern Time (US & Canada)","(UTC-05:00) - Haiti","(UTC-05:00) Havana","(UTC-05:00) Indiana (East)","(UTC-05:00) Turks - and Caicos","(UTC-04:00) Asuncion","(UTC-04:00) Atlantic Time (Canada)","(UTC-04:00) - Caracas","(UTC-04:00) Cuiaba","(UTC-04:00) Georgetown, La Paz, Manaus, San - Juan","(UTC-04:00) Santiago","(UTC-03:30) Newfoundland","(UTC-03:00) Araguaina","(UTC-03:00) - Brasilia","(UTC-03:00) Cayenne, Fortaleza","(UTC-03:00) City of Buenos Aires","(UTC-03:00) - Greenland","(UTC-03:00) Montevideo","(UTC-03:00) Punta Arenas","(UTC-03:00) - Saint Pierre and Miquelon","(UTC-03:00) Salvador","(UTC-02:00) Coordinated - Universal Time-02","(UTC-02:00) Mid-Atlantic - Old","(UTC-01:00) Azores","(UTC-01:00) - Cabo Verde Is.","(UTC) Coordinated Universal Time","(UTC+00:00) Dublin, Edinburgh, - Lisbon, London","(UTC+00:00) Monrovia, Reykjavik","(UTC+00:00) Sao Tome","(UTC+01:00) - Casablanca","(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna","(UTC+01:00) - Belgrade, Bratislava, Budapest, Ljubljana, Prague","(UTC+01:00) Brussels, - Copenhagen, Madrid, Paris","(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb","(UTC+01:00) - West Central Africa","(UTC+02:00) Amman","(UTC+02:00) Athens, Bucharest","(UTC+02:00) - Beirut","(UTC+02:00) Cairo","(UTC+02:00) Chisinau","(UTC+02:00) Damascus","(UTC+02:00) - Gaza, Hebron","(UTC+02:00) Harare, Pretoria","(UTC+02:00) Helsinki, Kyiv, - Riga, Sofia, Tallinn, Vilnius","(UTC+02:00) Jerusalem","(UTC+02:00) Kaliningrad","(UTC+02:00) - Khartoum","(UTC+02:00) Tripoli","(UTC+02:00) Windhoek","(UTC+03:00) Baghdad","(UTC+03:00) - Istanbul","(UTC+03:00) Kuwait, Riyadh","(UTC+03:00) Minsk","(UTC+03:00) Moscow, - St. Petersburg","(UTC+03:00) Nairobi","(UTC+03:30) Tehran","(UTC+04:00) Abu - Dhabi, Muscat","(UTC+04:00) Astrakhan, Ulyanovsk","(UTC+04:00) Baku","(UTC+04:00) - Izhevsk, Samara","(UTC+04:00) Port Louis","(UTC+04:00) Saratov","(UTC+04:00) - Tbilisi","(UTC+04:00) Volgograd","(UTC+04:00) Yerevan","(UTC+04:30) Kabul","(UTC+05:00) - Ashgabat, Tashkent","(UTC+05:00) Ekaterinburg","(UTC+05:00) Islamabad, Karachi","(UTC+05:00) - Qyzylorda","(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi","(UTC+05:30) - Sri Jayawardenepura","(UTC+05:45) Kathmandu","(UTC+06:00) Astana","(UTC+06:00) - Dhaka","(UTC+06:00) Omsk","(UTC+06:30) Yangon (Rangoon)","(UTC+07:00) Bangkok, - Hanoi, Jakarta","(UTC+07:00) Barnaul, Gorno-Altaysk","(UTC+07:00) Hovd","(UTC+07:00) - Krasnoyarsk","(UTC+07:00) Novosibirsk","(UTC+07:00) Tomsk","(UTC+08:00) Beijing, - Chongqing, Hong Kong, Urumqi","(UTC+08:00) Irkutsk","(UTC+08:00) Kuala Lumpur, - Singapore","(UTC+08:00) Perth","(UTC+08:00) Taipei","(UTC+08:00) Ulaanbaatar","(UTC+08:45) - Eucla","(UTC+09:00) Chita","(UTC+09:00) Osaka, Sapporo, Tokyo","(UTC+09:00) - Pyongyang","(UTC+09:00) Seoul","(UTC+09:00) Yakutsk","(UTC+09:30) Adelaide","(UTC+09:30) - Darwin","(UTC+10:00) Brisbane","(UTC+10:00) Canberra, Melbourne, Sydney","(UTC+10:00) - Guam, Port Moresby","(UTC+10:00) Hobart","(UTC+10:00) Vladivostok","(UTC+10:30) - Lord Howe Island","(UTC+11:00) Bougainville Island","(UTC+11:00) Chokurdakh","(UTC+11:00) - Magadan","(UTC+11:00) Norfolk Island","(UTC+11:00) Sakhalin","(UTC+11:00) - Solomon Is., New Caledonia","(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky","(UTC+12:00) - Auckland, Wellington","(UTC+12:00) Coordinated Universal Time+12","(UTC+12:00) - Fiji","(UTC+12:00) Petropavlovsk-Kamchatsky - Old","(UTC+12:45) Chatham Islands","(UTC+13:00) - Coordinated Universal Time+13","(UTC+13:00) Nuku''alofa","(UTC+13:00) Samoa","(UTC+14:00) - Kiritimati Island"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"SetWindowsTimeZone","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsTimeZone]WindowsTimeZone1;TimeZone'', - ''='', parameters(''TimeZone'')))]"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"SetWindowsTimeZone"},"TimeZone":{"value":"[parameters(''TimeZone'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"TimeZone":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","assignmentType":"DeployAndAutoCorrect","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","assignmentType":"DeployAndAutoCorrect","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6141c932-9384-44c6-a395-59e4c057d7c9","type":"Microsoft.Authorization/policyDefinitions","name":"6141c932-9384-44c6-a395-59e4c057d7c9"}' - headers: - cache-control: - - no-cache - content-length: - - '9678' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''614ffa75-862c-456e-ad8b-eaa1b0844b07'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private endpoints for App Configuration","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints let you connect your virtual network to Azure services without a - public IP address at the source or destination. By mapping private endpoints - to your app configuration instances, data leakage risks are reduced. Learn - more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections","existenceCondition":{"field":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["configurationStores"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/614ffa75-862c-456e-ad8b-eaa1b0844b07","type":"Microsoft.Authorization/policyDefinitions","name":"614ffa75-862c-456e-ad8b-eaa1b0844b07"}' - headers: - cache-control: - - no-cache - content-length: - - '3554' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6164527b-e1ee-4882-8673-572f425f5e0a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Bot Service endpoint should be a valid - HTTPS URI","policyType":"BuiltIn","mode":"Indexed","description":"Data can - be tampered with during transmission. Protocols exist that provide encryption - to address problems of misuse and tampering. To ensure your bots are communicating - only over encrypted channels, set the endpoint to a valid HTTPS URI. This - ensures the HTTPS protocol is used to encrypt your data in transit and is - also often a requirement for compliance with regulatory or industry standards. - Please visit: https://docs.microsoft.com/azure/bot-service/bot-builder-security-guidelines.","metadata":{"version":"1.0.1","category":"Bot - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.BotService/botServices"},{"field":"Microsoft.BotService/botServices/endpoint","notLike":"https://*"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6164527b-e1ee-4882-8673-572f425f5e0a","type":"Microsoft.Authorization/policyDefinitions","name":"6164527b-e1ee-4882-8673-572f425f5e0a"}' - headers: - cache-control: - - no-cache - content-length: - - '1260' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''617c02be-7f02-4efd-8836-3180d47b6c68'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Service Fabric clusters should have the - ClusterProtectionLevel property set to EncryptAndSign","policyType":"BuiltIn","mode":"Indexed","description":"Service - Fabric provides three levels of protection (None, Sign and EncryptAndSign) - for node-to-node communication using a primary cluster certificate. Set the - protection level to ensure that all node-to-node messages are encrypted and - digitally signed","metadata":{"version":"1.1.0","category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].name","notEquals":"Security"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].name","notEquals":"ClusterProtectionLevel"},{"field":"Microsoft.ServiceFabric/clusters/fabricSettings[*].parameters[*].value","notEquals":"EncryptAndSign"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/617c02be-7f02-4efd-8836-3180d47b6c68","type":"Microsoft.Authorization/policyDefinitions","name":"617c02be-7f02-4efd-8836-3180d47b6c68"}' - headers: - cache-control: - - no-cache - content-length: - - '1373' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''61a4d60b-7326-440e-8051-9f94394d4dd1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add or replace a tag on subscriptions","policyType":"BuiltIn","mode":"All","description":"Adds - or replaces the specified tag and value on subscriptions via a remediation - task. Existing resource groups can be remediated by triggering a remediation - task. See https://aka.ms/azurepolicyremediation for more information on policy - remediation.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/61a4d60b-7326-440e-8051-9f94394d4dd1","type":"Microsoft.Authorization/policyDefinitions","name":"61a4d60b-7326-440e-8051-9f94394d4dd1"}' - headers: - cache-control: - - no-cache - content-length: - - '1350' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''620e58b5-ac75-49b4-993f-a9d4f0459636'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - System objects''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - System objects''. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemobjects","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/620e58b5-ac75-49b4-993f-a9d4f0459636","type":"Microsoft.Authorization/policyDefinitions","name":"620e58b5-ac75-49b4-993f-a9d4f0459636"}' - headers: - cache-control: - - no-cache - content-length: - - '3257' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6265018c-d7e2-432f-a75d-094d5f6f4465'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines on which the Log - Analytics agent is not connected as expected","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the agent is not - installed, or if it is installed but the COM object AgentConfigManager.MgmtSvcCfg - returns that it is registered to a workspace other than the ID specified in - the policy parameter.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsLogAnalyticsAgentConnection","version":"1.*","configurationParameter":{"WorkspaceId":"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"WorkspaceId":{"type":"String","metadata":{"displayName":"Connected - workspace IDs","description":"A semicolon-separated list of the workspace - IDs that the Log Analytics agent should be connected to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsLogAnalyticsAgentConnection","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId'', - ''='', parameters(''WorkspaceId'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6265018c-d7e2-432f-a75d-094d5f6f4465","type":"Microsoft.Authorization/policyDefinitions","name":"6265018c-d7e2-432f-a75d-094d5f6f4465"}' - headers: - cache-control: - - no-cache - content-length: - - '4128' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''62a3ae95-8169-403e-a2d2-b82141448092'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Modify Azure SignalR Service resources - to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"To - improve the security of Azure SignalR Service resource, ensure that it isn''t - exposed to the public internet and can only be accessed from a private endpoint. - Disable the public network access property as described in https://aka.ms/asrs/networkacls. - This option disables access from any public address space outside the Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules. This reduces data leakage risks.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.SignalRService/SignalR"},{"anyOf":[{"field":"Microsoft.SignalRService/SignalR/networkACLs.defaultAction","equals":"Allow"},{"field":"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow","exists":false},{"count":{"field":"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow[*]"},"greater":0}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"Audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761"],"operations":[{"operation":"addOrReplace","field":"Microsoft.SignalRService/SignalR/networkACLs.defaultAction","value":"Deny"},{"operation":"addOrReplace","field":"Microsoft.SignalRService/SignalR/networkACLs.publicNetwork.allow","value":[]}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/62a3ae95-8169-403e-a2d2-b82141448092","type":"Microsoft.Authorization/policyDefinitions","name":"62a3ae95-8169-403e-a2d2-b82141448092"}' - headers: - cache-control: - - no-cache - content-length: - - '1855' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''630ac30f-a234-4533-ac2d-e0df77acda51'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines network connectivity","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if a network connection - status to an IP and TCP port does not match the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsRemoteConnection","version":"1.*","configurationParameter":{"host":"[WindowsRemoteConnection]WindowsRemoteConnection1;host","port":"[WindowsRemoteConnection]WindowsRemoteConnection1;port","shouldConnect":"[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"host":{"type":"String","metadata":{"displayName":"Remote - Host Name","description":"Specifies the Domain Name System (DNS) name or IP - address of the remote host machine."}},"port":{"type":"String","metadata":{"displayName":"Port","description":"The - TCP port number on the remote host name."}},"shouldConnect":{"type":"String","metadata":{"displayName":"Should - connect to remote host","description":"The machine will be non-compliant if - it can''t establish a connection."},"allowedValues":["True","False"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsRemoteConnection","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsRemoteConnection]WindowsRemoteConnection1;host'', - ''='', parameters(''host''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;port'', - ''='', parameters(''port''), '','', ''[WindowsRemoteConnection]WindowsRemoteConnection1;shouldConnect'', - ''='', parameters(''shouldConnect'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/630ac30f-a234-4533-ac2d-e0df77acda51","type":"Microsoft.Authorization/policyDefinitions","name":"630ac30f-a234-4533-ac2d-e0df77acda51"}' - headers: - cache-control: - - no-cache - content-length: - - '4595' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''630c64f9-8b6b-4c64-b511-6544ceff6fd6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authentication to Linux machines should - require SSH keys","policyType":"BuiltIn","mode":"Indexed","description":"Although - SSH itself provides an encrypted connection, using passwords with SSH still - leaves the VM vulnerable to brute-force attacks. The most secure option for - authenticating to an Azure Linux virtual machine over SSH is with a public-private - key pair, also known as SSH keys. Learn more: https://docs.microsoft.com/azure/virtual-machines/linux/create-ssh-keys-detailed.","metadata":{"category":"Guest - Configuration","version":"2.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"LinuxNoPasswordForSSH","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"LinuxNoPasswordForSSH","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/630c64f9-8b6b-4c64-b511-6544ceff6fd6","type":"Microsoft.Authorization/policyDefinitions","name":"630c64f9-8b6b-4c64-b511-6544ceff6fd6"}' - headers: - cache-control: - - no-cache - content-length: - - '5099' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6481cc21-ed6e-4480-99dd-ea7c5222e897'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Devices''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Devices''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"DevicesAllowedToFormatAndEjectRemovableMedia":{"type":"String","metadata":{"displayName":"[Deprecated]: - Devices: Allowed to format and eject removable media","description":"Specifies - who is allowed to format and eject removable NTFS media. You can use this - policy setting to prevent unauthorized users from removing data on one computer - to access it on another computer on which they have local administrator privileges."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsDevices","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Devices: - Allowed to format and eject removable media;ExpectedValue'', ''='', parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsDevices"},"DevicesAllowedToFormatAndEjectRemovableMedia":{"value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"DevicesAllowedToFormatAndEjectRemovableMedia":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Devices: - Allowed to format and eject removable media;ExpectedValue","value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Devices: - Allowed to format and eject removable media;ExpectedValue","value":"[parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6481cc21-ed6e-4480-99dd-ea7c5222e897","type":"Microsoft.Authorization/policyDefinitions","name":"6481cc21-ed6e-4480-99dd-ea7c5222e897"}' - headers: - cache-control: - - no-cache - content-length: - - '6989' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''64d314f6-6062-4780-a861-c23e8951bee5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure HDInsight clusters should use customer-managed - keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your Azure HDInsight - clusters. By default, customer data is encrypted with service-managed keys, - but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/hdi.cmk.","metadata":{"version":"1.0.1","category":"HDInsight"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"field":"Microsoft.HDInsight/clusters/diskEncryptionProperties.keyName","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/64d314f6-6062-4780-a861-c23e8951bee5","type":"Microsoft.Authorization/policyDefinitions","name":"64d314f6-6062-4780-a861-c23e8951bee5"}' - headers: - cache-control: - - no-cache - content-length: - - '1316' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''655cb504-bcee-4362-bd4c-402e6aa38759'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit missing blob encryption - for storage accounts","policyType":"BuiltIn","mode":"All","description":"This - policy is no longer necessary because storage blob encryption is enabled by - default and cannot be turned off.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"True"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/655cb504-bcee-4362-bd4c-402e6aa38759","type":"Microsoft.Authorization/policyDefinitions","name":"655cb504-bcee-4362-bd4c-402e6aa38759"}' - headers: - cache-control: - - no-cache - content-length: - - '966' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6581d072-105e-4418-827f-bd446d56421b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for SQL servers on machines - should be enabled","policyType":"BuiltIn","mode":"All","description":"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.","metadata":{"version":"1.0.2","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"SqlServerVirtualMachines","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6581d072-105e-4418-827f-bd446d56421b","type":"Microsoft.Authorization/policyDefinitions","name":"6581d072-105e-4418-827f-bd446d56421b"}' - headers: - cache-control: - - no-cache - content-length: - - '1156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''664346d9-be92-43fb-a219-d595eeb76a90'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit IP restrictions configuration - for a Function App","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a Function app from common - attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/664346d9-be92-43fb-a219-d595eeb76a90","type":"Microsoft.Authorization/policyDefinitions","name":"664346d9-be92-43fb-a219-d595eeb76a90"}' - headers: - cache-control: - - no-cache - content-length: - - '1286' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6646a0bd-e110-40ca-bb97-84fcee63c414'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Service principals should be used to - protect your subscriptions instead of management certificates","policyType":"BuiltIn","mode":"All","description":"Management - certificates allow anyone who authenticates with them to manage the subscription(s) - they are associated with. To manage subscriptions more securely, use of service - principals with Resource Manager is recommended to limit the impact of a certificate - compromise.","metadata":{"version":"1.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Resources/subscriptions"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"2acd365d-e8b5-4094-bce4-244b7c51d67c","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6646a0bd-e110-40ca-bb97-84fcee63c414","type":"Microsoft.Authorization/policyDefinitions","name":"6646a0bd-e110-40ca-bb97-84fcee63c414"}' - headers: - cache-control: - - no-cache - content-length: - - '1227' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''67121cc7-ff39-4ab8-b7e3-95b84dab487d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should enable - data encryption with a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data stored in Cognitive Services to be encrypted with an - Azure Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more about - customer-managed keys at https://go.microsoft.com/fwlink/?linkid=2121321.","metadata":{"version":"2.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"field":"Microsoft.CognitiveServices/accounts/encryption.keySource","notEquals":"Microsoft.KeyVault"},{"count":{"field":"Microsoft.CognitiveServices/accounts/capabilities[*]","where":{"field":"Microsoft.CognitiveServices/accounts/capabilities[*].name","equals":"CustomerManagedKey"}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/67121cc7-ff39-4ab8-b7e3-95b84dab487d","type":"Microsoft.Authorization/policyDefinitions","name":"67121cc7-ff39-4ab8-b7e3-95b84dab487d"}' - headers: - cache-control: - - no-cache - content-length: - - '1497' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''67e010c1-640d-438e-a3a5-feaccb533a98'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Administrative Templates - Network''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Administrative - Templates - Network'' for guest logons, simultaneous connections, network - bridge, ICS, and multicast name resolution. This policy requires that the - Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_AdministrativeTemplatesNetwork","version":"1.*","configurationParameter":{"EnableInsecureGuestLogons":"Enable - insecure guest logons;ExpectedValue","AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue","TurnOffMulticastNameResolution":"Turn - off multicast name resolution;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"EnableInsecureGuestLogons":{"type":"String","metadata":{"displayName":"Enable - insecure guest logons","description":"Specifies whether the SMB client will - allow insecure guest logons to an SMB server."}},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"type":"String","metadata":{"displayName":"Allow - simultaneous connections to the Internet or a Windows Domain","description":"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them."}},"TurnOffMulticastNameResolution":{"type":"String","metadata":{"displayName":"Turn - off multicast name resolution","description":"Specifies whether LLMNR, a secondary - name resolution protocol that transmits using multicast over a local subnet - link on a single subnet, is enabled."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesNetwork","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enable - insecure guest logons;ExpectedValue'', ''='', parameters(''EnableInsecureGuestLogons''), - '','', ''Minimize the number of simultaneous connections to the Internet or - a Windows Domain;ExpectedValue'', ''='', parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain''), - '','', ''Turn off multicast name resolution;ExpectedValue'', ''='', parameters(''TurnOffMulticastNameResolution'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/67e010c1-640d-438e-a3a5-feaccb533a98","type":"Microsoft.Authorization/policyDefinitions","name":"67e010c1-640d-438e-a3a5-feaccb533a98"}' - headers: - cache-control: - - no-cache - content-length: - - '5588' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6809a3d0-d354-42fb-b955-783d207c62a8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Data Factory linked - service resource type should be in allow list","policyType":"BuiltIn","mode":"All","description":"Define - the allow list of Azure Data Factory linked service types. Restricting allowed - resource types enables control over the boundary of data movement. For example, - restrict a scope to only allow blob storage with Data Lake Storage Gen1 and - Gen2 for analytics or a scope to only allow SQL and Kusto access for real-time - queries.","metadata":{"version":"1.0.0-preview","category":"Data Factory","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"allowedLinkedServiceResourceTypes":{"type":"Array","metadata":{"displayName":"[Preview]: - Allowed linked service resource types","description":"The list of allowed - linked service resource types."},"allowedValues":["AdlsGen2CosmosStructuredStream","AdobeExperiencePlatform","AdobeIntegration","AmazonRedshift","AmazonS3","AzureBlobFS","AzureBlobStorage","AzureDataExplorer","AzureDataLakeStore","AzureDataLakeStoreCosmosStructuredStream","AzureDataShare","AzureFileStorage","AzureKeyVault","AzureMariaDB","AzureMySql","AzurePostgreSql","AzureSearch","AzureSqlDatabase","AzureSqlDW","AzureSqlMI","AzureTableStorage","Cassandra","CommonDataServiceForApps","CosmosDb","CosmosDbMongoDbApi","Db2","DynamicsCrm","FileServer","FtpServer","GitHub","GoogleCloudStorage","Hdfs","Hive","HttpServer","Informix","Kusto","MicrosoftAccess","MySql","Netezza","Odata","Odbc","Office365","Oracle","PostgreSql","Salesforce","SalesforceServiceCloud","SapBw","SapHana","SapOpenHub","SapTable","Sftp","SharePointOnlineList","Snowflake","SqlServer","Sybase","Teradata","HDInsightOnDemand","HDInsight","AzureDataLakeAnalytics","AzureBatch","AzureFunction","AzureML","AzureMLService","MongoDb","GoogleBigQuery","Impala","ServiceNow","Dynamics","AzureDatabricks","AmazonMWS","SapCloudForCustomer","SapEcc","Web","MongoDbAtlas","HBase","Spark","Phoenix","PayPal","Marketo","Responsys","SalesforceMarketingCloud","Presto","Square","Xero","Jira","Magento","Shopify","Concur","Hubspot","Zoho","Eloqua","QuickBooks","Couchbase","Drill","Greenplum","MariaDB","Vertica","MongoDbV2","OracleServiceCloud","GoogleAdWords","RestService","DynamicsAX","AzureDataCatalog","AzureDatabricksDeltaLake"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories/linkedservices"},{"field":"Microsoft.DataFactory/factories/linkedservices/type","notIn":"[parameters(''allowedLinkedServiceResourceTypes'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6809a3d0-d354-42fb-b955-783d207c62a8","type":"Microsoft.Authorization/policyDefinitions","name":"6809a3d0-d354-42fb-b955-783d207c62a8"}' - headers: - cache-control: - - no-cache - content-length: - - '2900' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''68511db2-bd02-41c4-ae6b-1900a012968a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs on which the Log Analytics agent is not connected as expected","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which the Log Analytics agent is not connected to the specified workspaces. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"WorkspaceId":{"type":"String","metadata":{"displayName":"[Deprecated]: - Connected workspace IDs","description":"A semicolon-separated list of the - workspace IDs that the Log Analytics agent should be connected to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsLogAnalyticsAgentConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId'', - ''='', parameters(''WorkspaceId'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsLogAnalyticsAgentConnection"},"WorkspaceId":{"value":"[parameters(''WorkspaceId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"WorkspaceId":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId","value":"[parameters(''WorkspaceId'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LogAnalyticsAgent]LogAnalyticsAgent1;WorkspaceId","value":"[parameters(''WorkspaceId'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/68511db2-bd02-41c4-ae6b-1900a012968a","type":"Microsoft.Authorization/policyDefinitions","name":"68511db2-bd02-41c4-ae6b-1900a012968a"}' - headers: - cache-control: - - no-cache - content-length: - - '6536' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''69af7d4a-7b18-4044-93a9-2651498ef203'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy Log Analytics agent - to Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics agent to Windows Azure Arc machines if the - agent isn''t installed.","metadata":{"version":"1.1.0-preview","category":"Monitoring","preview":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Preview]: - Log Analytics workspace","description":"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant ''Log Analytics Contributor'' permissions - (or similar) to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"MicrosoftMonitoringAgent","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"MicrosoftMonitoringAgent"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/69af7d4a-7b18-4044-93a9-2651498ef203","type":"Microsoft.Authorization/policyDefinitions","name":"69af7d4a-7b18-4044-93a9-2651498ef203"}' - headers: - cache-control: - - no-cache - content-length: - - '2941' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:42:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that have the - specified members in the Administrators group","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the local Administrators - group contains one or more of the members listed in the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AdministratorsGroupMembersToExclude","version":"1.*","configurationParameter":{"MembersToExclude":"[LocalGroup]AdministratorsGroup;MembersToExclude"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"MembersToExclude":{"type":"String","metadata":{"displayName":"Members - to exclude","description":"A semicolon-separated list of members that should - be excluded in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToExclude'', - ''='', parameters(''MembersToExclude'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f","type":"Microsoft.Authorization/policyDefinitions","name":"69bf4abd-ca1e-4cf6-8b5a-762d42e61d4f"}' - headers: - cache-control: - - no-cache - content-length: - - '4071' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:42:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6a7a2bcf-f9be-4e35-9734-4f9657a70f1d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs on which Windows Defender Exploit Guard is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - on which Windows Defender Exploit Guard is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.1.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"NotAvailableMachineState":{"type":"String","metadata":{"displayName":"[Deprecated]: - State in which to show VMs on which Windows Defender Exploit Guard is not - available","description":"Windows Defender Exploit Guard is only available - starting with Windows 10/Windows Server with update 1709. Setting this value - to ''Non-Compliant'' will make machines with older versions on which Windows - Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. - Setting this value to ''Compliant'' will make these machines compliant."},"allowedValues":["Compliant","Non-Compliant"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState'', - ''='', parameters(''NotAvailableMachineState'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDefenderExploitGuard"},"NotAvailableMachineState":{"value":"[parameters(''NotAvailableMachineState'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NotAvailableMachineState":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState","value":"[parameters(''NotAvailableMachineState'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState","value":"[parameters(''NotAvailableMachineState'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2015-05-01-preview","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d","type":"Microsoft.Authorization/policyDefinitions","name":"6a7a2bcf-f9be-4e35-9734-4f9657a70f1d"}' - headers: - cache-control: - - no-cache - content-length: - - '7055' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6a8450e2-6c61-43b4-be65-62e3a197bffe'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit IP restrictions configuration - for a Web Application","policyType":"BuiltIn","mode":"All","description":"IP - Restrictions allow you to define a list of IP addresses that are allowed to - access your app. Use of IP Restrictions protects a web application from common - attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"ConfigureIPRestrictions","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6a8450e2-6c61-43b4-be65-62e3a197bffe","type":"Microsoft.Authorization/policyDefinitions","name":"6a8450e2-6c61-43b4-be65-62e3a197bffe"}' - headers: - cache-control: - - no-cache - content-length: - - '1303' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6ad61431-88ce-4357-a0e1-6da43f292bd7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure WEB app is using - the latest version of TLS encryption ","policyType":"BuiltIn","mode":"Indexed","description":"Please - use /providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b - instead. The TLS(Transport Layer Security) protocol secures transmission of - data over the internet using standard encryption technology. Encryption should - be set with the latest version of TLS. App service allows TLS 1.2 by default, - which is the recommended TLS level by industry standards, such as PCI DSS.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ad61431-88ce-4357-a0e1-6da43f292bd7","type":"Microsoft.Authorization/policyDefinitions","name":"6ad61431-88ce-4357-a0e1-6da43f292bd7"}' - headers: - cache-control: - - no-cache - content-length: - - '1362' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6b1cbf55-e8b6-442f-ba4c-7246b6381474'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deprecated accounts should be removed - from your subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts should be removed from your subscriptions. Deprecated accounts are - accounts that have been blocked from signing in.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"00c6d40b-e990-6acf-d4f3-471e747a27c4","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b1cbf55-e8b6-442f-ba4c-7246b6381474","type":"Microsoft.Authorization/policyDefinitions","name":"6b1cbf55-e8b6-442f-ba4c-7246b6381474"}' - headers: - cache-control: - - no-cache - content-length: - - '1056' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6b51af03-9277-49a9-a3f8-1c69c9ff7403'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Service - Bus to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Service Bus to stream to a regional Event Hub - when any Service Bus which is missing this diagnostic settings is created - or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Service - Bus in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.ServiceBus/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6b51af03-9277-49a9-a3f8-1c69c9ff7403","type":"Microsoft.Authorization/policyDefinitions","name":"6b51af03-9277-49a9-a3f8-1c69c9ff7403"}' - headers: - cache-control: - - no-cache - content-length: - - '4014' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6ba6d016-e7c3-4842-b8f2-4992ebc0d72d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities on your SQL servers on - machine should be remediated","policyType":"BuiltIn","mode":"Indexed","description":"SQL - Vulnerability Assessment scans your database for security vulnerabilities, - and exposes any deviations from best practices such as misconfigurations, - excessive permissions, and unprotected sensitive data. Resolving the vulnerabilities - found can greatly improve your database security posture.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.HybridCompute/machines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"f97aa83c-9b63-4f9a-99f6-b22c4398f936","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6ba6d016-e7c3-4842-b8f2-4992ebc0d72d","type":"Microsoft.Authorization/policyDefinitions","name":"6ba6d016-e7c3-4842-b8f2-4992ebc0d72d"}' - headers: - cache-control: - - no-cache - content-length: - - '1259' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6c112d4e-5bc7-47ae-a041-ea2d9dccd749'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Not allowed resource types","policyType":"BuiltIn","mode":"All","description":"Restrict - which resource types can be deployed in your environment. Limiting resource - types can reduce the complexity and attack surface of your environment while - also helping to manage costs. Compliance results are only shown for non-compliant - resources.","metadata":{"version":"2.0.0","category":"General"},"parameters":{"listOfResourceTypesNotAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that cannot be deployed.","displayName":"Not allowed - resource types","strongType":"resourceTypes"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","in":"[parameters(''listOfResourceTypesNotAllowed'')]"},{"value":"[field(''type'')]","exists":true}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c112d4e-5bc7-47ae-a041-ea2d9dccd749","type":"Microsoft.Authorization/policyDefinitions","name":"6c112d4e-5bc7-47ae-a041-ea2d9dccd749"}' - headers: - cache-control: - - no-cache - content-length: - - '1185' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6c66c325-74c8-42fd-a286-a74b0e2939d8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - for Azure Kubernetes Service to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure Kubernetes Service to stream resource logs - to a Log Analytics workspace.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"diagnosticsSettingNameToUse":{"type":"String","metadata":{"displayName":"Setting - name","description":"Name of the diagnostic settings."}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Specify the Log Analytics workspace the - Azure Kubernetes Service should be connected to","strongType":"omsWorkspace","assignPermissions":true}},"AllMetrics":{"type":"String","metadata":{"displayName":"AllMetrics - - Enabled","description":"Whether to stream AllMetrics logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"kube-apiserver":{"type":"String","metadata":{"displayName":"kube-apiserver - - Enabled","description":"Whether to stream kube-apiserver logs to the Log - Analytics workspace - True or False"},"allowedValues":["True","False"]},"kube-audit":{"type":"String","metadata":{"displayName":"kube-audit - - Enabled","description":"Whether to stream kube-audit logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"kube-controller-manager":{"type":"String","metadata":{"displayName":"kube-controller-manager - - Enabled","description":"Whether to stream kube-controller-manager logs to - the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"kube-scheduler":{"type":"String","metadata":{"displayName":"kube-scheduler - - Enabled","description":"Whether to stream kube-scheduler logs to the Log - Analytics workspace - True or False"},"allowedValues":["True","False"]},"cluster-autoscaler":{"type":"String","metadata":{"displayName":"cluster-autoscaler - - Enabled","description":"Whether to stream cluster-autoscaler logs to the - Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"kube-audit-admin":{"type":"String","metadata":{"displayName":"kube-audit-admin - - Enabled","description":"Whether to stream kube-audit-admin logs to the Log - Analytics workspace - True or False"},"allowedValues":["True","False"]},"guard":{"type":"String","metadata":{"displayName":"guard - - Enabled","description":"Whether to stream guard logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","equals":"[parameters(''logAnalytics'')]"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"diagnosticsSettingNameToUse":{"type":"string"},"resourceName":{"type":"string"},"logAnalytics":{"type":"string"},"location":{"type":"string"},"AllMetrics":{"type":"string"},"kube-apiserver":{"type":"string"},"kube-audit":{"type":"string"},"kube-controller-manager":{"type":"string"},"kube-scheduler":{"type":"string"},"cluster-autoscaler":{"type":"string"},"kube-audit-admin":{"type":"string"},"guard":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.ContainerService/managedClusters/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''AllMetrics'')]"}],"logs":[{"category":"kube-apiserver","enabled":"[parameters(''kube-apiserver'')]"},{"category":"kube-audit","enabled":"[parameters(''kube-audit'')]"},{"category":"kube-controller-manager","enabled":"[parameters(''kube-controller-manager'')]"},{"category":"kube-scheduler","enabled":"[parameters(''kube-scheduler'')]"},{"category":"cluster-autoscaler","enabled":"[parameters(''cluster-autoscaler'')]"},{"category":"kube-audit-admin","enabled":"[parameters(''kube-audit-admin'')]"},{"category":"guard","enabled":"[parameters(''guard'')]"}]}}],"outputs":{}},"parameters":{"diagnosticsSettingNameToUse":{"value":"[parameters(''diagnosticsSettingNameToUse'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"guard":{"value":"[parameters(''guard'')]"},"AllMetrics":{"value":"[parameters(''AllMetrics'')]"},"kube-apiserver":{"value":"[parameters(''kube-apiserver'')]"},"kube-audit":{"value":"[parameters(''kube-audit'')]"},"kube-scheduler":{"value":"[parameters(''kube-scheduler'')]"},"kube-controller-manager":{"value":"[parameters(''kube-controller-manager'')]"},"cluster-autoscaler":{"value":"[parameters(''cluster-autoscaler'')]"},"kube-audit-admin":{"value":"[parameters(''kube-audit-admin'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6c66c325-74c8-42fd-a286-a74b0e2939d8","type":"Microsoft.Authorization/policyDefinitions","name":"6c66c325-74c8-42fd-a286-a74b0e2939d8"}' - headers: - cache-control: - - no-cache - content-length: - - '5914' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Function App should only be accessible - over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use of - HTTPS ensures server/service authentication and protects data in transit from - network layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab","type":"Microsoft.Authorization/policyDefinitions","name":"6d555dd1-86f2-4f1c-8ed7-5abae7c6cbab"}' - headers: - cache-control: - - no-cache - content-length: - - '908' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6dd01e4f-1be1-4e80-9d0b-d109e04cb064'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Automation accounts with - private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. You - need private DNS zone properly configured to connect to Azure Automation account - via Azure Private Link. Learn more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"Private - endpoint group id","description":"A group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"[parameters(''privateEndpointGroupId'')]"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"privateEndpointGroupId":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"automationAccounts-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"privateEndpointGroupId":{"value":"[parameters(''privateEndpointGroupId'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6dd01e4f-1be1-4e80-9d0b-d109e04cb064","type":"Microsoft.Authorization/policyDefinitions","name":"6dd01e4f-1be1-4e80-9d0b-d109e04cb064"}' - headers: - cache-control: - - no-cache - content-length: - - '2754' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6df2fee6-a9ed-4fef-bced-e13be1b25f1c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Enable Security Center''s auto provisioning - of the Log Analytics agent on your subscriptions with default workspace.","policyType":"BuiltIn","mode":"All","description":"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using ASC default workspace.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","deploymentScope":"Subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"},"deployment":{"location":"westus","properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.Security/autoProvisioningSettings","name":"default","apiVersion":"2017-08-01-preview","properties":{"autoProvision":"On"}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6df2fee6-a9ed-4fef-bced-e13be1b25f1c","type":"Microsoft.Authorization/policyDefinitions","name":"6df2fee6-a9ed-4fef-bced-e13be1b25f1c"}' - headers: - cache-control: - - no-cache - content-length: - - '1624' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6e2593d9-add6-4083-9c9b-4b7d2188c899'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Email notification for high severity - alerts should be enabled","policyType":"BuiltIn","mode":"All","description":"To - ensure the relevant people in your organization are notified when there is - a potential security breach in one of your subscriptions, enable email notifications - for high severity alerts in Security Center.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/alertNotifications","notEquals":"Off"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6e2593d9-add6-4083-9c9b-4b7d2188c899","type":"Microsoft.Authorization/policyDefinitions","name":"6e2593d9-add6-4083-9c9b-4b7d2188c899"}' - headers: - cache-control: - - no-cache - content-length: - - '1084' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6edd7eda-6dd8-40f7-810d-67160c639cd9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your storage account, data - leakage risks are reduced. Learn more about private links at - https://aka.ms/azureprivatelinkoverview","metadata":{"version":"2.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Storage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Storage/storageAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6edd7eda-6dd8-40f7-810d-67160c639cd9","type":"Microsoft.Authorization/policyDefinitions","name":"6edd7eda-6dd8-40f7-810d-67160c639cd9"}' - headers: - cache-control: - - no-cache - content-length: - - '1338' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6f8f98a4-f108-47cb-8e98-91a0d85cd474'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure diagnostic settings for storage - accounts to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for storage accounts to stream resource logs to a - Log Analytics workspace when any storage account which is missing this diagnostic - settings is created or updated.","metadata":{"category":"Storage","version":"1.3.0"},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Specify the Log Analytics workspace the - storage account should be connected to.","strongType":"omsWorkspace","assignPermissions":true}},"servicesToDeploy":{"type":"Array","metadata":{"displayName":"Storage - services to deploy","description":"List of Storage services to deploy"},"allowedValues":["storageAccounts","blobServices","fileServices","tableServices","queueServices"]},"diagnosticsSettingNameToUse":{"type":"String","metadata":{"displayName":"Setting - name","description":"Name of the diagnostic settings."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"StorageDelete":{"type":"String","metadata":{"displayName":"StorageDelete - - Enabled","description":"Whether to stream StorageDelete logs to the Log - Analytics workspace - True or False"},"allowedValues":["True","False"]},"StorageWrite":{"type":"String","metadata":{"displayName":"StorageWrite - - Enabled","description":"Whether to stream StorageWrite logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"StorageRead":{"type":"String","metadata":{"displayName":"StorageRead - - Enabled","description":"Whether to stream StorageRead logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"Transaction":{"type":"String","metadata":{"displayName":"Transaction - - Enabled","description":"Whether to stream Transaction logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Storage/storageAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"anyof":[{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"True"}]},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","equals":"[parameters(''logAnalytics'')]"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"servicesToDeploy":{"type":"array"},"diagnosticsSettingNameToUse":{"type":"string"},"resourceName":{"type":"string"},"logAnalytics":{"type":"string"},"location":{"type":"string"},"Transaction":{"type":"string"},"StorageRead":{"type":"string"},"StorageWrite":{"type":"string"},"StorageDelete":{"type":"string"}},"variables":{},"resources":[{"condition":"[contains(parameters(''servicesToDeploy''), - ''blobServices'')]","type":"Microsoft.Storage/storageAccounts/blobServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/default/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Transaction","enabled":"[parameters(''Transaction'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}],"logs":[{"category":"StorageRead","enabled":"[parameters(''StorageRead'')]"},{"category":"StorageWrite","enabled":"[parameters(''StorageWrite'')]"},{"category":"StorageDelete","enabled":"[parameters(''StorageDelete'')]"}]}},{"condition":"[contains(parameters(''servicesToDeploy''), - ''fileServices'')]","type":"Microsoft.Storage/storageAccounts/fileServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/default/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Transaction","enabled":"[parameters(''Transaction'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}],"logs":[{"category":"StorageRead","enabled":"[parameters(''StorageRead'')]"},{"category":"StorageWrite","enabled":"[parameters(''StorageWrite'')]"},{"category":"StorageDelete","enabled":"[parameters(''StorageDelete'')]"}]}},{"condition":"[contains(parameters(''servicesToDeploy''), - ''tableServices'')]","type":"Microsoft.Storage/storageAccounts/tableServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/default/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Transaction","enabled":"[parameters(''Transaction'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}],"logs":[{"category":"StorageRead","enabled":"[parameters(''StorageRead'')]"},{"category":"StorageWrite","enabled":"[parameters(''StorageWrite'')]"},{"category":"StorageDelete","enabled":"[parameters(''StorageDelete'')]"}]}},{"condition":"[contains(parameters(''servicesToDeploy''), - ''queueServices'')]","type":"Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/default/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Transaction","enabled":"[parameters(''Transaction'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}],"logs":[{"category":"StorageRead","enabled":"[parameters(''StorageRead'')]"},{"category":"StorageWrite","enabled":"[parameters(''StorageWrite'')]"},{"category":"StorageDelete","enabled":"[parameters(''StorageDelete'')]"}]}},{"condition":"[contains(parameters(''servicesToDeploy''), - ''storageAccounts'')]","type":"Microsoft.Storage/storageAccounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Transaction","enabled":"[parameters(''Transaction'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}]}}],"outputs":{}},"parameters":{"diagnosticsSettingNameToUse":{"value":"[parameters(''diagnosticsSettingNameToUse'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"Transaction":{"value":"[parameters(''Transaction'')]"},"StorageDelete":{"value":"[parameters(''StorageDelete'')]"},"StorageWrite":{"value":"[parameters(''StorageWrite'')]"},"StorageRead":{"value":"[parameters(''StorageRead'')]"},"servicesToDeploy":{"value":"[parameters(''servicesToDeploy'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6f8f98a4-f108-47cb-8e98-91a0d85cd474","type":"Microsoft.Authorization/policyDefinitions","name":"6f8f98a4-f108-47cb-8e98-91a0d85cd474"}' - headers: - cache-control: - - no-cache - content-length: - - '7764' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6fac406b-40ca-413b-bf8e-0bf964659c25'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should use customer-managed - key for encryption","policyType":"BuiltIn","mode":"Indexed","description":"Secure - your storage account with greater flexibility using customer-managed keys. - When you specify a customer-managed key, that key is used to protect and control - access to the key that encrypts your data. Using customer-managed keys provides - additional capabilities to control rotation of the key encryption key or cryptographically - erase data.","metadata":{"version":"1.0.2","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/encryption.keySource","equals":"Microsoft.Keyvault"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fac406b-40ca-413b-bf8e-0bf964659c25","type":"Microsoft.Authorization/policyDefinitions","name":"6fac406b-40ca-413b-bf8e-0bf964659c25"}' - headers: - cache-control: - - no-cache - content-length: - - '1163' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6fc8115b-2008-441f-8c61-9b722c1e537f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Workbooks should be saved to storage - accounts that you control","policyType":"BuiltIn","mode":"Indexed","description":"With - bring your own storage (BYOS), your workbooks are uploaded into a storage - account that you control. That means you control the encryption-at-rest policy, - the lifetime management policy, and network access. You will, however, be - responsible for the costs associated with that storage account. For more information, - visit https://aka.ms/workbooksByos","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Audit, - Deny, or Disable the execution of this policy"},"allowedValues":["deny","audit","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"microsoft.insights/workbooks"},{"field":"microsoft.insights/workbooks/storageUri","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fc8115b-2008-441f-8c61-9b722c1e537f","type":"Microsoft.Authorization/policyDefinitions","name":"6fc8115b-2008-441f-8c61-9b722c1e537f"}' - headers: - cache-control: - - no-cache - content-length: - - '1146' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6fcec95c-fbdf-45e8-91e1-e3175d9c9eca'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure Event Grid topics - with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints lets you connect your virtual network to Azure services without - a public IP address at the source or destination. By mapping private endpoints - to your resources, they''ll be protected against data leakage risks. Learn - more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"Specifies the subnet to use to configure - private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/topics"},{"field":"kind","notEquals":"AzureArc"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventGrid/topics/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventGrid/topics/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["topic"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fcec95c-fbdf-45e8-91e1-e3175d9c9eca","type":"Microsoft.Authorization/policyDefinitions","name":"6fcec95c-fbdf-45e8-91e1-e3175d9c9eca"}' - headers: - cache-control: - - no-cache - content-length: - - '3621' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''6fe4ef56-7576-4dc4-8e9c-26bad4b087ce'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Microsoft Network Server''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Microsoft Network Server''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/6fe4ef56-7576-4dc4-8e9c-26bad4b087ce","type":"Microsoft.Authorization/policyDefinitions","name":"6fe4ef56-7576-4dc4-8e9c-26bad4b087ce"}' - headers: - cache-control: - - no-cache - content-length: - - '3286' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7008174a-fd10-4ef0-817e-fc820a951d73'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Python version'' is the - latest, if used as a part of the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - web apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.","metadata":{"version":"3.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Windows Python version","description":"Latest supported Python version for - App Services","deprecated":true}},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7008174a-fd10-4ef0-817e-fc820a951d73","type":"Microsoft.Authorization/policyDefinitions","name":"7008174a-fd10-4ef0-817e-fc820a951d73"}' - headers: - cache-control: - - no-cache - content-length: - - '1803' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''702dd420-7fcc-42c5-afe8-4026edd20fe0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"OS and data disks should be encrypted - with a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of the contents of - your managed disks. By default, the data is encrypted at rest with platform-managed - keys, but customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/disks-cmk.","metadata":{"category":"Compute","version":"2.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id","exists":"False"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"value":"[length(field(''Microsoft.Compute/virtualMachines/storageProfile.dataDisks''))]","greater":0},{"field":"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id","exists":"False"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id","exists":"False"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id","exists":"False"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"count":{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]"},"greater":0},{"not":{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id","exists":"true"}}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"Microsoft.Compute/disks/managedBy","exists":"False"},{"field":"Microsoft.Compute/disks/encryption.diskEncryptionSetId","exists":"False"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/galleries/images/versions"},{"value":"[length(field(''Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId''))]","notEquals":"[length(field(''Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]''))]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/galleries/images/versions"},{"value":"[length(field(''Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]''))]","greater":0},{"anyOf":[{"count":{"field":"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*]","where":{"value":"[length(current(''Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId''))]","notEquals":"[length(field(''Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]''))]"}},"greater":0},{"not":{"field":"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId","exists":"true"}}]}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/images"},{"field":"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id","exists":"False"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/images"},{"value":"[length(field(''Microsoft.Compute/images/storageProfile.dataDisks[*]''))]","greater":0},{"not":{"field":"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id","exists":"true"}}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/702dd420-7fcc-42c5-afe8-4026edd20fe0","type":"Microsoft.Authorization/policyDefinitions","name":"702dd420-7fcc-42c5-afe8-4026edd20fe0"}' - headers: - cache-control: - - no-cache - content-length: - - '4125' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7040a231-fb65-4412-8c0a-b365f4866c24'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Windows Components''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Windows Components''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"SendFileSamplesWhenFurtherAnalysisIsRequired":{"type":"String","metadata":{"displayName":"[Deprecated]: - Send file samples when further analysis is required","description":"Specifies - whether and how Windows Defender will submit samples of suspected malware to - Microsoft for further analysis when opt-in for MAPS telemetry is set."}},"AllowIndexingOfEncryptedFiles":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allow indexing of encrypted files","description":"Specifies whether encrypted - items are allowed to be indexed."}},"AllowTelemetry":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allow Telemetry","description":"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent."}},"AllowUnencryptedTraffic":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allow unencrypted traffic","description":"Specifies whether the Windows Remote - Management (WinRM) service sends and receives unencrypted messages over the - network."}},"AlwaysInstallWithElevatedPrivileges":{"type":"String","metadata":{"displayName":"[Deprecated]: - Always install with elevated privileges","description":"Specifies whether - Windows Installer should use system permissions when it installs any program - on the system."}},"AlwaysPromptForPasswordUponConnection":{"type":"String","metadata":{"displayName":"[Deprecated]: - Always prompt for password upon connection","description":"Specifies whether - Terminal Services/Remote Desktop Connection always prompts the client computer - for a password upon connection."}},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"[Deprecated]: - Application: Specify the maximum log file size (KB)","description":"Specifies - the maximum size for the Application event log in kilobytes."}},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"type":"String","metadata":{"displayName":"[Deprecated]: - Automatically send memory dumps for OS-generated error reports","description":"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically."}},"ConfigureDefaultConsent":{"type":"String","metadata":{"displayName":"[Deprecated]: - Configure Default consent","description":"Specifies setting of the default - consent handling for error reports sent to Microsoft."}},"ConfigureWindowsSmartScreen":{"type":"String","metadata":{"displayName":"[Deprecated]: - Configure Windows SmartScreen","description":"Specifies how to manage the - behavior of Windows SmartScreen. Windows SmartScreen helps keep PCs safer - by warning users before running unrecognized programs downloaded from the - Internet. Some information is sent to Microsoft about files and programs run - on PCs with this feature enabled."}},"DisallowDigestAuthentication":{"type":"String","metadata":{"displayName":"[Deprecated]: - Disallow Digest authentication","description":"Specifies whether the Windows - Remote Management (WinRM) client will not use Digest authentication."}},"DisallowWinRMFromStoringRunAsCredentials":{"type":"String","metadata":{"displayName":"[Deprecated]: - Disallow WinRM from storing RunAs credentials","description":"Specifies whether - the Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins."}},"DoNotAllowPasswordsToBeSaved":{"type":"String","metadata":{"displayName":"[Deprecated]: - Do not allow passwords to be saved","description":"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer."}},"SecuritySpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"[Deprecated]: - Security: Specify the maximum log file size (KB)","description":"Specifies - the maximum size for the Security event log in kilobytes."}},"SetClientConnectionEncryptionLevel":{"type":"String","metadata":{"displayName":"[Deprecated]: - Set client connection encryption level","description":"Specifies whether to - require the use of a specific encryption level to secure communications between - client computers and RD Session Host servers during Remote Desktop Protocol - (RDP) connections. This policy only applies when you are using native RDP - encryption."}},"SetTheDefaultBehaviorForAutoRun":{"type":"String","metadata":{"displayName":"[Deprecated]: - Set the default behavior for AutoRun","description":"Specifies the default - behavior for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines."}},"SetupSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"[Deprecated]: - Setup: Specify the maximum log file size (KB)","description":"Specifies the - maximum size for the Setup event log in kilobytes."}},"SystemSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"[Deprecated]: - System: Specify the maximum log file size (KB)","description":"Specifies the - maximum size for the System event log in kilobytes."}},"TurnOffDataExecutionPreventionForExplorer":{"type":"String","metadata":{"displayName":"[Deprecated]: - Turn off Data Execution Prevention for Explorer","description":"Specifies - whether to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer."}},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"type":"String","metadata":{"displayName":"[Deprecated]: - Specify the interval to check for definition updates","description":"Specifies - an interval at which to check for Windows Defender definition updates. The - time value is represented as the number of hours between update checks."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsComponents","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Send - file samples when further analysis is required;ExpectedValue'', ''='', parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired''), - '','', ''Allow indexing of encrypted files;ExpectedValue'', ''='', parameters(''AllowIndexingOfEncryptedFiles''), - '','', ''Allow Telemetry;ExpectedValue'', ''='', parameters(''AllowTelemetry''), - '','', ''Allow unencrypted traffic;ExpectedValue'', ''='', parameters(''AllowUnencryptedTraffic''), - '','', ''Always install with elevated privileges;ExpectedValue'', ''='', parameters(''AlwaysInstallWithElevatedPrivileges''), - '','', ''Always prompt for password upon connection;ExpectedValue'', ''='', - parameters(''AlwaysPromptForPasswordUponConnection''), '','', ''Application: - Specify the maximum log file size (KB);ExpectedValue'', ''='', parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB''), - '','', ''Automatically send memory dumps for OS-generated error reports;ExpectedValue'', - ''='', parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports''), - '','', ''Configure Default consent;ExpectedValue'', ''='', parameters(''ConfigureDefaultConsent''), - '','', ''Configure Windows SmartScreen;ExpectedValue'', ''='', parameters(''ConfigureWindowsSmartScreen''), - '','', ''Disallow Digest authentication;ExpectedValue'', ''='', parameters(''DisallowDigestAuthentication''), - '','', ''Disallow WinRM from storing RunAs credentials;ExpectedValue'', ''='', - parameters(''DisallowWinRMFromStoringRunAsCredentials''), '','', ''Do not - allow passwords to be saved;ExpectedValue'', ''='', parameters(''DoNotAllowPasswordsToBeSaved''), - '','', ''Security: Specify the maximum log file size (KB);ExpectedValue'', - ''='', parameters(''SecuritySpecifyTheMaximumLogFileSizeKB''), '','', ''Set - client connection encryption level;ExpectedValue'', ''='', parameters(''SetClientConnectionEncryptionLevel''), - '','', ''Set the default behavior for AutoRun;ExpectedValue'', ''='', parameters(''SetTheDefaultBehaviorForAutoRun''), - '','', ''Setup: Specify the maximum log file size (KB);ExpectedValue'', ''='', - parameters(''SetupSpecifyTheMaximumLogFileSizeKB''), '','', ''System: Specify - the maximum log file size (KB);ExpectedValue'', ''='', parameters(''SystemSpecifyTheMaximumLogFileSizeKB''), - '','', ''Turn off Data Execution Prevention for Explorer;ExpectedValue'', - ''='', parameters(''TurnOffDataExecutionPreventionForExplorer''), '','', ''Specify - the interval to check for definition updates;ExpectedValue'', ''='', parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_WindowsComponents"},"SendFileSamplesWhenFurtherAnalysisIsRequired":{"value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},"AllowIndexingOfEncryptedFiles":{"value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},"AllowTelemetry":{"value":"[parameters(''AllowTelemetry'')]"},"AllowUnencryptedTraffic":{"value":"[parameters(''AllowUnencryptedTraffic'')]"},"AlwaysInstallWithElevatedPrivileges":{"value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},"AlwaysPromptForPasswordUponConnection":{"value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},"ConfigureDefaultConsent":{"value":"[parameters(''ConfigureDefaultConsent'')]"},"ConfigureWindowsSmartScreen":{"value":"[parameters(''ConfigureWindowsSmartScreen'')]"},"DisallowDigestAuthentication":{"value":"[parameters(''DisallowDigestAuthentication'')]"},"DisallowWinRMFromStoringRunAsCredentials":{"value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},"DoNotAllowPasswordsToBeSaved":{"value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},"SecuritySpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},"SetClientConnectionEncryptionLevel":{"value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},"SetTheDefaultBehaviorForAutoRun":{"value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},"SetupSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},"SystemSpecifyTheMaximumLogFileSizeKB":{"value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},"TurnOffDataExecutionPreventionForExplorer":{"value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"SendFileSamplesWhenFurtherAnalysisIsRequired":{"type":"string"},"AllowIndexingOfEncryptedFiles":{"type":"string"},"AllowTelemetry":{"type":"string"},"AllowUnencryptedTraffic":{"type":"string"},"AlwaysInstallWithElevatedPrivileges":{"type":"string"},"AlwaysPromptForPasswordUponConnection":{"type":"string"},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"type":"string"},"ConfigureDefaultConsent":{"type":"string"},"ConfigureWindowsSmartScreen":{"type":"string"},"DisallowDigestAuthentication":{"type":"string"},"DisallowWinRMFromStoringRunAsCredentials":{"type":"string"},"DoNotAllowPasswordsToBeSaved":{"type":"string"},"SecuritySpecifyTheMaximumLogFileSizeKB":{"type":"string"},"SetClientConnectionEncryptionLevel":{"type":"string"},"SetTheDefaultBehaviorForAutoRun":{"type":"string"},"SetupSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"SystemSpecifyTheMaximumLogFileSizeKB":{"type":"string"},"TurnOffDataExecutionPreventionForExplorer":{"type":"string"},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Send - file samples when further analysis is required;ExpectedValue","value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},{"name":"Allow - indexing of encrypted files;ExpectedValue","value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},{"name":"Allow - Telemetry;ExpectedValue","value":"[parameters(''AllowTelemetry'')]"},{"name":"Allow - unencrypted traffic;ExpectedValue","value":"[parameters(''AllowUnencryptedTraffic'')]"},{"name":"Always - install with elevated privileges;ExpectedValue","value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},{"name":"Always - prompt for password upon connection;ExpectedValue","value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},{"name":"Application: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Automatically - send memory dumps for OS-generated error reports;ExpectedValue","value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},{"name":"Configure - Default consent;ExpectedValue","value":"[parameters(''ConfigureDefaultConsent'')]"},{"name":"Configure - Windows SmartScreen;ExpectedValue","value":"[parameters(''ConfigureWindowsSmartScreen'')]"},{"name":"Disallow - Digest authentication;ExpectedValue","value":"[parameters(''DisallowDigestAuthentication'')]"},{"name":"Disallow - WinRM from storing RunAs credentials;ExpectedValue","value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},{"name":"Do - not allow passwords to be saved;ExpectedValue","value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},{"name":"Security: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Set - client connection encryption level;ExpectedValue","value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},{"name":"Set - the default behavior for AutoRun;ExpectedValue","value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},{"name":"Setup: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"System: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Turn - off Data Execution Prevention for Explorer;ExpectedValue","value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},{"name":"Specify - the interval to check for definition updates;ExpectedValue","value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Send - file samples when further analysis is required;ExpectedValue","value":"[parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired'')]"},{"name":"Allow - indexing of encrypted files;ExpectedValue","value":"[parameters(''AllowIndexingOfEncryptedFiles'')]"},{"name":"Allow - Telemetry;ExpectedValue","value":"[parameters(''AllowTelemetry'')]"},{"name":"Allow - unencrypted traffic;ExpectedValue","value":"[parameters(''AllowUnencryptedTraffic'')]"},{"name":"Always - install with elevated privileges;ExpectedValue","value":"[parameters(''AlwaysInstallWithElevatedPrivileges'')]"},{"name":"Always - prompt for password upon connection;ExpectedValue","value":"[parameters(''AlwaysPromptForPasswordUponConnection'')]"},{"name":"Application: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Automatically - send memory dumps for OS-generated error reports;ExpectedValue","value":"[parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports'')]"},{"name":"Configure - Default consent;ExpectedValue","value":"[parameters(''ConfigureDefaultConsent'')]"},{"name":"Configure - Windows SmartScreen;ExpectedValue","value":"[parameters(''ConfigureWindowsSmartScreen'')]"},{"name":"Disallow - Digest authentication;ExpectedValue","value":"[parameters(''DisallowDigestAuthentication'')]"},{"name":"Disallow - WinRM from storing RunAs credentials;ExpectedValue","value":"[parameters(''DisallowWinRMFromStoringRunAsCredentials'')]"},{"name":"Do - not allow passwords to be saved;ExpectedValue","value":"[parameters(''DoNotAllowPasswordsToBeSaved'')]"},{"name":"Security: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SecuritySpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Set - client connection encryption level;ExpectedValue","value":"[parameters(''SetClientConnectionEncryptionLevel'')]"},{"name":"Set - the default behavior for AutoRun;ExpectedValue","value":"[parameters(''SetTheDefaultBehaviorForAutoRun'')]"},{"name":"Setup: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SetupSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"System: - Specify the maximum log file size (KB);ExpectedValue","value":"[parameters(''SystemSpecifyTheMaximumLogFileSizeKB'')]"},{"name":"Turn - off Data Execution Prevention for Explorer;ExpectedValue","value":"[parameters(''TurnOffDataExecutionPreventionForExplorer'')]"},{"name":"Specify - the interval to check for definition updates;ExpectedValue","value":"[parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7040a231-fb65-4412-8c0a-b365f4866c24","type":"Microsoft.Authorization/policyDefinitions","name":"7040a231-fb65-4412-8c0a-b365f4866c24"}' - headers: - cache-control: - - no-cache - content-length: - - '22181' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7066131b-61a6-4917-a7e4-72e8983f0aa6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - System''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - System''. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7066131b-61a6-4917-a7e4-72e8983f0aa6","type":"Microsoft.Authorization/policyDefinitions","name":"7066131b-61a6-4917-a7e4-72e8983f0aa6"}' - headers: - cache-control: - - no-cache - content-length: - - '3248' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7227ebe5-9ff7-47ab-b823-171cd02fb90f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs on which the DSC configuration is not compliant","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs on which the Desired State Configuration (DSC) configuration - is not compliant. This policy is only applicable to machines with WMF 4 and - above. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDscConfiguration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7227ebe5-9ff7-47ab-b823-171cd02fb90f","type":"Microsoft.Authorization/policyDefinitions","name":"7227ebe5-9ff7-47ab-b823-171cd02fb90f"}' - headers: - cache-control: - - no-cache - content-length: - - '3272' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7229bd6a-693d-478a-87f0-1dc1af06f3b8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Administrative Templates - Network''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - Network''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesNetwork","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7229bd6a-693d-478a-87f0-1dc1af06f3b8","type":"Microsoft.Authorization/policyDefinitions","name":"7229bd6a-693d-478a-87f0-1dc1af06f3b8"}' - headers: - cache-control: - - no-cache - content-length: - - '3261' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7238174a-fd10-4ef0-817e-fc820a951d73'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Python version'' is the - latest, if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.","metadata":{"version":"3.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Windows Python version","description":"Latest supported Python version for - App Services","deprecated":true}},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7238174a-fd10-4ef0-817e-fc820a951d73","type":"Microsoft.Authorization/policyDefinitions","name":"7238174a-fd10-4ef0-817e-fc820a951d73"}' - headers: - cache-control: - - no-cache - content-length: - - '1821' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7261b898-8a84-4db8-9e04-18527132abb3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''PHP version'' is the latest, - if used as a part of the WEB app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for PHP software either due to security flaws - or to include additional functionality. Using the latest PHP version for web - apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"Latest - PHP version","description":"Latest supported PHP version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7261b898-8a84-4db8-9e04-18527132abb3","type":"Microsoft.Authorization/policyDefinitions","name":"7261b898-8a84-4db8-9e04-18527132abb3"}' - headers: - cache-control: - - no-cache - content-length: - - '1571' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''72650e9f-97bc-4b2a-ab5f-9781a9fcecbc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Windows machines should meet - requirements of the Azure Security Center baseline","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine is not - configured correctly for one of the recommendations in the Azure Security - Center baseline.","metadata":{"category":"Guest Configuration","version":"1.0.0-preview","preview":true,"requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureWindowsBaseline","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"[Preview]: - Include Arc connected servers","description":"By selecting this option, you - agree to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureWindowsBaseline","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72650e9f-97bc-4b2a-ab5f-9781a9fcecbc","type":"Microsoft.Authorization/policyDefinitions","name":"72650e9f-97bc-4b2a-ab5f-9781a9fcecbc"}' - headers: - cache-control: - - no-cache - content-length: - - '3740' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''726671ac-c4de-4908-8c7d-6043ae62e3b6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that allow re-use of the previous 24 passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that allow re-use of the previous 24 passwords. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"EnforcePasswordHistory"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/726671ac-c4de-4908-8c7d-6043ae62e3b6","type":"Microsoft.Authorization/policyDefinitions","name":"726671ac-c4de-4908-8c7d-6043ae62e3b6"}' - headers: - cache-control: - - no-cache - content-length: - - '5679' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''726aca4c-86e9-4b04-b0c5-073027359532'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add a tag to resource groups","policyType":"BuiltIn","mode":"All","description":"Adds - the specified tag and value when any resource group missing this tag is created - or updated. Existing resource groups can be remediated by triggering a remediation - task. If the tag exists with a different value it will not be changed.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/726aca4c-86e9-4b04-b0c5-073027359532","type":"Microsoft.Authorization/policyDefinitions","name":"726aca4c-86e9-4b04-b0c5-073027359532"}' - headers: - cache-control: - - no-cache - content-length: - - '1315' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''72d11df1-dd8a-41f7-8925-b05b960ebafc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Synapse workspaces should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to Azure Synapse workspace, data leakage - risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/synapse-analytics/security/how-to-connect-to-workspace-with-private-links.","metadata":{"version":"1.0.1","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"count":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*]","where":{"field":"Microsoft.Synapse/workspaces/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/72d11df1-dd8a-41f7-8925-b05b960ebafc","type":"Microsoft.Authorization/policyDefinitions","name":"72d11df1-dd8a-41f7-8925-b05b960ebafc"}' - headers: - cache-control: - - no-cache - content-length: - - '1405' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''73290fa2-dfa7-4bbb-945d-a5e23b75df2c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure App Configuration to disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for App Configuration so that it isn''t accessible over - the public internet. This configuration helps protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},{"field":"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"audit","operations":[{"condition":"[greater(requestContext().apiVersion, - ''2019-10-01'')]","operation":"addOrReplace","field":"Microsoft.AppConfiguration/configurationStores/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/73290fa2-dfa7-4bbb-945d-a5e23b75df2c","type":"Microsoft.Authorization/policyDefinitions","name":"73290fa2-dfa7-4bbb-945d-a5e23b75df2c"}' - headers: - cache-control: - - no-cache - content-length: - - '1505' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''73d6ab6c-2475-4850-afd6-43795f3492ef'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Workflow Automation for Azure - Security Center recommendations","policyType":"BuiltIn","mode":"All","description":"Enable - automation of Azure Security Center recommendations. This policy deploys a - workflow automation with your conditions and triggers on the assigned scope. - To deploy this policy on newly created subscriptions, open the Compliance - tab, select the relevant non-compliant assignment and create a remediation - task.","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"automationName":{"type":"String","metadata":{"displayName":"Automation - name","description":"This is the automation name."}},"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the workflow automation - is created. If you enter a name for a resource group that doesn''t exist, - it''ll be created in the subscription."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - workflow automation are created.","strongType":"location"}},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"For all recommendations, leave empty. For specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/en-us/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Determines recommendation severities. Example: - High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"recommendationStates":{"type":"Array","metadata":{"displayName":"Recommendation - states","description":"Determines recommendation states. Recommendations with - unhealthy state require your attention to resolve. When a recommendation state - is healthy, it no longer applies to the resource as Security Center detects - it as healthy. A recommendation is not-applicable if, for example, it was - disabled in the Security Policy. Example: Healthy;Unhealthy;Not Applicable;"},"allowedValues":["Healthy","Unhealthy","Not - Applicable"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic - App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic - app trigger","description":"The trigger connector of the logic app that is - triggered. Possible values: ''Manual (Incoming HTTP request)'', ''When an - Azure Security Center Recommendation is created or triggered''."},"allowedValues":["Manual - (Incoming HTTP request)","When an Azure Security Center Recommendation is - created or triggered"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"[parameters(''automationName'')]","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","in":"[union(if(equals(length(parameters(''recommendationNames'')),0),array(''Microsoft.Security/assessments''),parameters(''recommendationNames'')),parameters(''recommendationSeverities''),if(contains(parameters(''recommendationStates''),''Not - Applicable''),union(parameters(''recommendationStates''), array(''notapplicable'')),parameters(''recommendationStates'')))]"},{"count":{"value":"[parameters(''recommendationSeverities'')]","name":"recommendationSeverity","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"properties.metadata.severity"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[current(''recommendationSeverity'')]"}]}},"equals":"[mul(max(1,length(parameters(''recommendationNames''))),length(parameters(''recommendationStates'')))]"}},"equals":"[length(parameters(''recommendationSeverities''))]"},{"count":{"value":"[parameters(''recommendationStates'')]","name":"recommendationState","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"properties.status.code"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[replace(current(''recommendationState''), - '' '','''')]"}]}},"equals":"[mul(max(1,length(parameters(''recommendationNames''))),length(parameters(''recommendationSeverities'')))]"}},"equals":"[length(parameters(''recommendationStates''))]"},{"count":{"value":"[parameters(''recommendationNames'')]","name":"recommendationName","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"name"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[current(''recommendationName'')]"}]}},"equals":"[mul(length(parameters(''recommendationSeverities'')),length(parameters(''recommendationStates'')))]"}},"equals":"[length(parameters(''recommendationNames''))]"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"automationName":{"type":"string"},"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"recommendationNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"recommendationStates":{"type":"array"},"logicAppResourceId":{"type":"string"},"logicAppTrigger":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","recommendationStatesLength":"[length(parameters(''recommendationStates''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","recommendationStatesLengthIfEmpty":"[if(equals(variables(''recommendationStatesLength''), - 0), 1, variables(''recommendationStatesLength''))]","totalRuleCombinationsForOneRecommendationName":"[mul(variables(''recommendationSeveritiesLengthIfEmpty''),variables(''recommendationStatesLengthIfEmpty''))]","totalRuleCombinationsForOneRecommendationSeverity":"[variables(''recommendationStatesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationState":1,"stateMap":{"Healthy":"healthy","Unhealthy":"unhealthy","Not - Applicable":"notapplicable"},"triggerMap":{"Manual (Incoming HTTP request)":"manual","When - an Azure Security Center Recommendation is created or triggered":"When_an_Azure_Security_Center_Recommendation_is_created_or_triggered"}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"[parameters(''automationName'')]","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Workflow - Automation for Azure Security Center recommendations via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":[{"eventSource":"Assessments","copy":[{"name":"ruleSets","count":"[mul(variables(''recommendationNamesLengthIfEmpty''), - mul(variables(''recommendationSeveritiesLengthIfEmpty''),variables(''recommendationStatesLengthIfEmpty'')))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''), - 0), ''type'', ''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''), - 0), ''Microsoft.Security/assessments'', parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationName'')), variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationSeverity'')), variables(''recommendationSeveritiesLength''))]]","operator":"Equals"},{"propertyJPath":"properties.status.code","propertyType":"string","expectedValue":"[variables(''stateMap'')[parameters(''recommendationStates'')[mod(div(copyIndex(''ruleSets''), - variables(''totalRuleCombinationsForOneRecommendationState'')), variables(''recommendationStatesLength''))]]]","operator":"Contains"}]}}]}],"actions":[{"actionType":"LogicApp","logicAppResourceId":"[parameters(''logicAppResourceId'')]","uri":"[listCallbackUrl(concat(parameters(''logicAppResourceId''), - ''/triggers/'', variables(''triggerMap'')[parameters(''logicAppTrigger'')]),''2016-06-01'').value]"}]}}]}}}]},"parameters":{"automationName":{"value":"[parameters(''automationName'')]"},"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"recommendationStates":{"value":"[parameters(''recommendationStates'')]"},"logicAppResourceId":{"value":"[parameters(''logicAppResourceId'')]"},"logicAppTrigger":{"value":"[parameters(''logicAppTrigger'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/73d6ab6c-2475-4850-afd6-43795f3492ef","type":"Microsoft.Authorization/policyDefinitions","name":"73d6ab6c-2475-4850-afd6-43795f3492ef"}' - headers: - cache-control: - - no-cache - content-length: - - '11206' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''73ef9241-5d81-4cd4-b483-8443d1730fe5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"API Management service should use a SKU - that supports virtual networks","policyType":"BuiltIn","mode":"Indexed","description":"With - supported SKUs of API Management, deploying service into a virtual network - unlocks advanced API Management networking and security features which provides - you greater control over your network security configuration. Learn more at: - https://aka.ms/apimvnet.","metadata":{"version":"1.0.0","category":"API Management"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for Azure API Management service.","displayName":"Allowed - SKUs"},"allowedValues":["Developer","Basic","Standard","Premium","Isolated","Consumption"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ApiManagement/service"},{"not":{"field":"Microsoft.ApiManagement/service/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/73ef9241-5d81-4cd4-b483-8443d1730fe5","type":"Microsoft.Authorization/policyDefinitions","name":"73ef9241-5d81-4cd4-b483-8443d1730fe5"}' - headers: - cache-control: - - no-cache - content-length: - - '1347' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7433c107-6db4-4ad1-b57a-a76dce0154a1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should be limited by - allowed SKUs","policyType":"BuiltIn","mode":"Indexed","description":"Restrict - the set of storage account SKUs that your organization can deploy.","metadata":{"version":"1.1.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the audit policy"},"allowedValues":["Audit","Deny","Disabled"]},"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of SKUs that can be specified for storage accounts.","displayName":"Allowed - SKUs","strongType":"StorageSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7433c107-6db4-4ad1-b57a-a76dce0154a1","type":"Microsoft.Authorization/policyDefinitions","name":"7433c107-6db4-4ad1-b57a-a76dce0154a1"}' - headers: - cache-control: - - no-cache - content-length: - - '1075' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''74c3584d-afae-46f7-a20a-6f8adba71a16'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Python version'' is the - latest, if used as a part of the API app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Python software either due to security flaws - or to include additional functionality. Using the latest Python version for - API apps is recommended in order to take advantage of security fixes, if any, - and/or new functionalities of the latest version. Currently, this policy only - applies to Linux web apps.","metadata":{"version":"3.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"WindowsPythonLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Windows Python version","description":"Latest supported Python version for - App Services","deprecated":true}},"LinuxPythonLatestVersion":{"type":"String","metadata":{"displayName":"Linux - Latest Python version","description":"Latest supported Python version for - App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PYTHON"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PYTHON|'', - parameters(''LinuxPythonLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c3584d-afae-46f7-a20a-6f8adba71a16","type":"Microsoft.Authorization/policyDefinitions","name":"74c3584d-afae-46f7-a20a-6f8adba71a16"}' - headers: - cache-control: - - no-cache - content-length: - - '1803' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''74c5a0ae-5e48-4738-b093-65e23a060488'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for Batch accounts","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access on a Batch account improves security by ensuring your - Batch account can only be accessed from a private endpoint. Learn more about - disabling public network access at https://docs.microsoft.com/azure/batch/private-connectivity.","metadata":{"version":"1.0.0","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/74c5a0ae-5e48-4738-b093-65e23a060488","type":"Microsoft.Authorization/policyDefinitions","name":"74c5a0ae-5e48-4738-b093-65e23a060488"}' - headers: - cache-control: - - no-cache - content-length: - - '1040' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''752154a7-1e0f-45c6-a880-ac75a7e4f648'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public IP addresses should have resource - logs enabled for Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Enable - resource logs for public IP addressess in diagnostic settings to stream to - a Log Analytics workspace. Get detailed visibility into attack traffic and - actions taken to mitigate DDoS attacks via notifications, reports and flow - logs.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Diagnostic - setting name","description":"Profile name for the Azure diagnostic settings - resource"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"The target Log Analytics workspace for - the diagnostic settings","strongType":"omsWorkspace","assignPermissions":true}},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - Logs","description":"Enable Logs - True or False"},"allowedValues":["True","False"]},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - Metrics","description":"Enable Metrics - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/publicIPAddresses"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''LogsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''MetricsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","equals":"[parameters(''logAnalytics'')]"}]},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Network/publicIPAddresses/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''name''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"DDoSProtectionNotifications","enabled":"[parameters(''logsEnabled'')]"},{"category":"DDoSMitigationFlowLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"DDoSMitigationReports","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(parameters(''logAnalytics''), - ''configured for resource logs for '', '': '', parameters(''name''))]"}}},"parameters":{"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"name":{"value":"[field(''name'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/752154a7-1e0f-45c6-a880-ac75a7e4f648","type":"Microsoft.Authorization/policyDefinitions","name":"752154a7-1e0f-45c6-a880-ac75a7e4f648"}' - headers: - cache-control: - - no-cache - content-length: - - '3656' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''752c6934-9bcc-4749-b004-655e676ae2ac'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit enabling of diagnostic - logs in App Services","policyType":"BuiltIn","mode":"All","description":"Audit - enabling of diagnostic logs on the app. This enables you to recreate activity - trails for investigation purposes if a security incident occurs or your network - is compromised","metadata":{"version":"1.0.0-deprecated","category":"App Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites/config"},{"field":"name","equals":"web"},{"anyOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","notEquals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/752c6934-9bcc-4749-b004-655e676ae2ac","type":"Microsoft.Authorization/policyDefinitions","name":"752c6934-9bcc-4749-b004-655e676ae2ac"}' - headers: - cache-control: - - no-cache - content-length: - - '1214' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7590a335-57cf-4c95-babd-ecbc8fafeb1f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Migrate resources to - use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Migrate - project. Learn more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Migrate"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*]","where":{"allOf":[{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"Default"},{"anyOf":[{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId","contains":"Microsoft.Migrate/assessmentProjects"},{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId","contains":"Microsoft.Migrate/migrateProjects"},{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].privateLinkServiceId","contains":"Microsoft.OffAzure/masterSites"}]}]}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"default-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7590a335-57cf-4c95-babd-ecbc8fafeb1f","type":"Microsoft.Authorization/policyDefinitions","name":"7590a335-57cf-4c95-babd-ecbc8fafeb1f"}' - headers: - cache-control: - - no-cache - content-length: - - '2878' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7595c971-233d-4bcf-bd18-596129188c49'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint should be enabled for - MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure Database for MySQL. Configure a private endpoint connection to enable - access to traffic coming only from known networks and prevent access from - all other IP addresses, including within Azure.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DBforMySQL/servers/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7595c971-233d-4bcf-bd18-596129188c49","type":"Microsoft.Authorization/policyDefinitions","name":"7595c971-233d-4bcf-bd18-596129188c49"}' - headers: - cache-control: - - no-cache - content-length: - - '1210' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''760a85ff-6162-42b3-8d70-698e268f648c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Vulnerabilities should - be remediated by a Vulnerability Assessment solution","policyType":"BuiltIn","mode":"All","description":"Monitors - vulnerabilities detected by Vulnerability Assessment solution and VMs without - a Vulnerability Assessment solution in Azure Security Center as recommendations.","metadata":{"version":"3.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"71992a2a-d168-42e0-b10e-6b45fa2ecddb","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/760a85ff-6162-42b3-8d70-698e268f648c","type":"Microsoft.Authorization/policyDefinitions","name":"760a85ff-6162-42b3-8d70-698e268f648c"}' - headers: - cache-control: - - no-cache - content-length: - - '1200' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''765266ab-e40e-4c61-bcb2-5a5275d0b7c0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Dependency agent for Linux virtual - machine scale sets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Linux virtual machine scale sets if the VM Image (OS) - is in the list defined and the agent is not installed. Note: if your scale - set upgradePolicy is set to Manual, you need to apply the extension to the - all virtual machines in the set by calling upgrade on them. In CLI this would - be az vmss update-instances.","metadata":{"version":"1.3.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude":{"type":"Array","metadata":{"displayName":"Optional: - List of VM images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude'')]"},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgentLinux","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux","vmExtensionTypeHandlerVersion":"9.7"},"resources":[{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","apiVersion":"2018-06-01","location":"[parameters(''location'')]","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","typeHandlerVersion":"[variables(''vmExtensionTypeHandlerVersion'')]","autoUpgradeMinorVersion":true}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for: '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/765266ab-e40e-4c61-bcb2-5a5275d0b7c0","type":"Microsoft.Authorization/policyDefinitions","name":"765266ab-e40e-4c61-bcb2-5a5275d0b7c0"}' - headers: - cache-control: - - no-cache - content-length: - - '4249' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7698e800-9299-47a6-b3b6-5a0fee576eed'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Private endpoint connections on Azure - SQL Database should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections enforce secure communication by enabling private connectivity - to Azure SQL Database.","metadata":{"version":"1.1.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"count":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*]","where":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7698e800-9299-47a6-b3b6-5a0fee576eed","type":"Microsoft.Authorization/policyDefinitions","name":"7698e800-9299-47a6-b3b6-5a0fee576eed"}' - headers: - cache-control: - - no-cache - content-length: - - '1031' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''76bed37b-484f-430f-a009-fd7592dff818'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit delegation of scopes to a managing - tenant","policyType":"BuiltIn","mode":"All","description":"Audit delegation - of scopes to a managing tenant via Azure Lighthouse.","metadata":{"version":"1.0.0","category":"Lighthouse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ManagedServices/registrationAssignments"},{"value":"true","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/76bed37b-484f-430f-a009-fd7592dff818","type":"Microsoft.Authorization/policyDefinitions","name":"76bed37b-484f-430f-a009-fd7592dff818"}' - headers: - cache-control: - - no-cache - content-length: - - '814' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7796937f-307b-4598-941c-67d3a05ebfe7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure subscriptions should have a log - profile for Activity Log","policyType":"BuiltIn","mode":"All","description":"This - policy ensures if a log profile is enabled for exporting activity logs. It - audits if there is no log profile created to export the logs either to a storage - account or to an event hub.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"field":"Microsoft.Insights/logProfiles/categories","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7796937f-307b-4598-941c-67d3a05ebfe7","type":"Microsoft.Authorization/policyDefinitions","name":"7796937f-307b-4598-941c-67d3a05ebfe7"}' - headers: - cache-control: - - no-cache - content-length: - - '1041' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''77d40665-3120-4348-b539-3192ec808307'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Data Factory should - use a Git repository for source control","policyType":"BuiltIn","mode":"Indexed","description":"Enable - source control on data factories, to gain capabilities such as change tracking, - collaboration, continuous integration, and deployment.","metadata":{"version":"1.0.0-preview","category":"Data - Factory","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories"},{"anyOf":[{"field":"Microsoft.DataFactory/factories/repoConfiguration.repositoryName","exists":"false"},{"field":"Microsoft.DataFactory/factories/repoConfiguration.repositoryName","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/77d40665-3120-4348-b539-3192ec808307","type":"Microsoft.Authorization/policyDefinitions","name":"77d40665-3120-4348-b539-3192ec808307"}' - headers: - cache-control: - - no-cache - content-length: - - '1106' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''77e8b146-0078-4fb2-b002-e112381199f0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual network firewall rule on Azure - SQL Database should be enabled to allow traffic from the specified subnet","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure SQL Database while ensuring the traffic stays within the Azure boundary.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"subnetId":{"type":"String","metadata":{"displayName":"Subnet - ID","strongType":"Microsoft.Network/virtualNetworks/subnets","description":"The - resource ID of the virtual network subnet that should have a rule enabled. - Example: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/Default/providers/Microsoft.Network/virtualNetworks/testvnet/subnets/testsubnet"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Sql/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId","equals":"[parameters(''subnetId'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/77e8b146-0078-4fb2-b002-e112381199f0","type":"Microsoft.Authorization/policyDefinitions","name":"77e8b146-0078-4fb2-b002-e112381199f0"}' - headers: - cache-control: - - no-cache - content-length: - - '1307' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7803067c-7d34-46e3-8c79-0ca68fc4036d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cache for Redis should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Private endpoints - lets you connect your virtual network to Azure services without a public IP - address at the source or destination. By mapping private endpoints to your - Azure Cache for Redis instances, data leakage risks are reduced. Learn more - at: https://docs.microsoft.com/azure/azure-cache-for-redis/cache-private-link.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Cache/redis"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Cache/redis/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Cache/redis/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7803067c-7d34-46e3-8c79-0ca68fc4036d","type":"Microsoft.Authorization/policyDefinitions","name":"7803067c-7d34-46e3-8c79-0ca68fc4036d"}' - headers: - cache-control: - - no-cache - content-length: - - '1216' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7838fd83-5cbb-4b5d-888c-bfa240972597'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Machine Learning workspaces - with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - Azure Machine Learning workspace, you can reduce data leakage risks. Learn - more about private links at: https://docs.microsoft.com/azure/machine-learning/how-to-configure-private-link.","metadata":{"version":"1.0.0","category":"Machine - Learning"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.MachineLearningServices/workspaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["amlworkspace"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7838fd83-5cbb-4b5d-888c-bfa240972597","type":"Microsoft.Authorization/policyDefinitions","name":"7838fd83-5cbb-4b5d-888c-bfa240972597"}' - headers: - cache-control: - - no-cache - content-length: - - '3615' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''797b37f7-06b8-444c-b1ad-fc62867f335a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB should disable public - network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that your CosmosDB account - isn''t exposed on the public internet. Creating private endpoints can limit - exposure of your CosmosDB account. Learn more at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/797b37f7-06b8-444c-b1ad-fc62867f335a","type":"Microsoft.Authorization/policyDefinitions","name":"797b37f7-06b8-444c-b1ad-fc62867f335a"}' - headers: - cache-control: - - no-cache - content-length: - - '1155' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7a031c68-d6ab-406e-a506-697a19c634b0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows Server VMs on which Windows Serial Console is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows Server virtual - machines on which Windows Serial Console is not enabled. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"EMSPortNumber":{"type":"String","metadata":{"displayName":"[Deprecated]: - EMS Port Number","description":"An integer indicating the COM port to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["1","2","3","4"]},"EMSBaudRate":{"type":"String","metadata":{"displayName":"[Deprecated]: - EMS Baud Rate","description":"An integer indicating the baud rate to be used - for the Emergency Management Services (EMS) console redirection. For more - information on EMS settings, please visit https://aka.ms/gcpolwsc"},"allowedValues":["9600","19200","38400","57600","115200"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsSerialConsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber'', - ''='', parameters(''EMSPortNumber''), '','', ''[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate'', - ''='', parameters(''EMSBaudRate'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsSerialConsole"},"EMSPortNumber":{"value":"[parameters(''EMSPortNumber'')]"},"EMSBaudRate":{"value":"[parameters(''EMSBaudRate'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EMSPortNumber":{"type":"string"},"EMSBaudRate":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber","value":"[parameters(''EMSPortNumber'')]"},{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate","value":"[parameters(''EMSBaudRate'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSPortNumber","value":"[parameters(''EMSPortNumber'')]"},{"name":"[WindowsSerialConsole]WindowsSerialConsole;EMSBaudRate","value":"[parameters(''EMSBaudRate'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a031c68-d6ab-406e-a506-697a19c634b0","type":"Microsoft.Authorization/policyDefinitions","name":"7a031c68-d6ab-406e-a506-697a19c634b0"}' - headers: - cache-control: - - no-cache - content-length: - - '7362' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7a860e27-9ca2-4fc6-822d-c2d248c300df'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private DNS zones for private - endpoints connected to App Configuration","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve app configuration - instances. Learn more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS zone","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"configurationStores"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink-azconfig-io","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a860e27-9ca2-4fc6-822d-c2d248c300df","type":"Microsoft.Authorization/policyDefinitions","name":"7a860e27-9ca2-4fc6-822d-c2d248c300df"}' - headers: - cache-control: - - no-cache - content-length: - - '2482' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7a8a51a3-ad87-4def-96f3-65a1839242b6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allow managing tenant ids to onboard - through Azure Lighthouse","policyType":"BuiltIn","mode":"All","description":"Restricting - Azure Lighthouse delegations to specific managing tenants increases security - by limiting those who can manage your Azure resources.","metadata":{"version":"1.0.1","category":"Lighthouse"},"parameters":{"listOfAllowedTenants":{"type":"Array","metadata":{"displayName":"Allowed - tenants","description":"List of the tenants IDs that can be onboarded through - Azure Lighthouse"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ManagedServices/registrationDefinitions"},{"not":{"field":"Microsoft.ManagedServices/registrationDefinitions/managedByTenantId","in":"[parameters(''listOfAllowedTenants'')]"}}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7a8a51a3-ad87-4def-96f3-65a1839242b6","type":"Microsoft.Authorization/policyDefinitions","name":"7a8a51a3-ad87-4def-96f3-65a1839242b6"}' - headers: - cache-control: - - no-cache - content-length: - - '993' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7b256a2d-058b-41f8-bed9-3f870541c40a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Attestation providers should use - private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints provide a way to connect Azure Attestation providers to your Azure - resources without sending traffic over the public internet. By preventing - public access, private endpoints help protect against undesired anonymous - access.","metadata":{"version":"1.0.0","category":"Attestation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Attestation/attestationProviders"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Attestation/attestationProviders/privateEndpointConnections","existenceCondition":{"allOf":[{"field":"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateEndpoint","exists":"true"},{"field":"Microsoft.Attestation/attestationProviders/privateEndpointConnections/provisioningState","equals":"Succeeded"},{"field":"Microsoft.Attestation/attestationProviders/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7b256a2d-058b-41f8-bed9-3f870541c40a","type":"Microsoft.Authorization/policyDefinitions","name":"7b256a2d-058b-41f8-bed9-3f870541c40a"}' - headers: - cache-control: - - no-cache - content-length: - - '1460' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7c1b1214-f927-48bf-8882-84f0af6588b1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Virtual Machine Scale - Sets should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"It - is recommended to enable Logs so that activity trail can be recreated when - investigations are required in the event of an incident or a compromise.","metadata":{"version":"2.0.1","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"includeAKSClusters":{"type":"Boolean","metadata":{"displayName":"Include - AKS Clusters","description":"Whether to include AKS Clusters to resource logs - extension - True or False"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"value":"[parameters(''includeAKSClusters'')]","equals":true}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"value":"[parameters(''includeAKSClusters'')]","equals":false},{"field":"Microsoft.Compute/imagePublisher","notEquals":"microsoft-aks"},{"field":"Microsoft.Compute/imageOffer","notEquals":"aks"},{"field":"Microsoft.Compute/imageSKU","notLike":"aks*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"IaaSDiagnostics"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Diagnostics"}]},{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","equals":"LinuxDiagnostic"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","in":["Microsoft.OSTCExtensions","Microsoft.Azure.Diagnostics"]}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c1b1214-f927-48bf-8882-84f0af6588b1","type":"Microsoft.Authorization/policyDefinitions","name":"7c1b1214-f927-48bf-8882-84f0af6588b1"}' - headers: - cache-control: - - no-cache - content-length: - - '2044' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:43:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:43:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Require blob encryption - for storage accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy ensures blob encryption for storage accounts is turned on. It only - applies to Microsoft.Storage resource types, not other storage providers. - This policy is deprecated because storage blob encryption is now enabled by - default, and can no longer be disabled.","metadata":{"version":"1.0.0-deprecated","category":"Storage","deprecated":true},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/enableBlobEncryption","equals":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f","type":"Microsoft.Authorization/policyDefinitions","name":"7c5a74bf-ae94-4a74-8fcf-644d1e0e6e6f"}' - headers: - cache-control: - - no-cache - content-length: - - '910' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7d092e0a-7acd-40d2-a975-dca21cae48c4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cache for Redis should reside within - a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Virtual Network deployment provides enhanced security and isolation for your - Azure Cache for Redis, as well as subnets, access control policies, and other - features to further restrict access.When an Azure Cache for Redis instance - is configured with a virtual network, it is not publicly addressable and can - only be accessed from virtual machines and applications within the virtual - network.","metadata":{"version":"1.0.3","category":"Cache"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Cache/redis"},{"field":"Microsoft.Cache/Redis/subnetId","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d092e0a-7acd-40d2-a975-dca21cae48c4","type":"Microsoft.Authorization/policyDefinitions","name":"7d092e0a-7acd-40d2-a975-dca21cae48c4"}' - headers: - cache-control: - - no-cache - content-length: - - '1192' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7d7be79c-23ba-4033-84dd-45e2a5ccdd67'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Both operating systems and data disks - in Azure Kubernetes Service clusters should be encrypted by customer-managed - keys","policyType":"BuiltIn","mode":"Indexed","description":"Encrypting OS - and data disks using customer-managed keys provides more control and greater - flexibility in key management. This is a common requirement in many regulatory - and industry compliance standards.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"''Audit'' - allows a non-compliant resource to be created or updated, but flags it as - non-compliant. ''Deny'' blocks the non-compliant resource creation or update. - ''Disabled'' turns off the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/diskEncryptionSetID","exists":"False"},{"field":"Microsoft.ContainerService/managedClusters/diskEncryptionSetID","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d7be79c-23ba-4033-84dd-45e2a5ccdd67","type":"Microsoft.Authorization/policyDefinitions","name":"7d7be79c-23ba-4033-84dd-45e2a5ccdd67"}' - headers: - cache-control: - - no-cache - content-length: - - '1328' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7d890f7f-100c-473d-baa1-2777e2266535'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Service Bus namespaces with - private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Service - Bus namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service - Bus"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"Specifies the subnet to use to configure - private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},{"field":"Microsoft.ServiceBus/namespaces/sku.tier","equals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ServiceBus/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.ServiceBus/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/090c5cfd-751d-490a-894a-3ce6f1109419"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["namespace"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7d890f7f-100c-473d-baa1-2777e2266535","type":"Microsoft.Authorization/policyDefinitions","name":"7d890f7f-100c-473d-baa1-2777e2266535"}' - headers: - cache-control: - - no-cache - content-length: - - '3692' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7e56b49b-5990-4159-a734-511ea19b731c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have the specified applications installed. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e56b49b-5990-4159-a734-511ea19b731c","type":"Microsoft.Authorization/policyDefinitions","name":"7e56b49b-5990-4159-a734-511ea19b731c"}' - headers: - cache-control: - - no-cache - content-length: - - '3188' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7e84ba44-6d03-46fd-950e-5efa5a1112fa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that have not restarted within the specified number of days","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that have not restarted within the specified - number of days. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MachineLastBootUpTime","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7e84ba44-6d03-46fd-950e-5efa5a1112fa","type":"Microsoft.Authorization/policyDefinitions","name":"7e84ba44-6d03-46fd-950e-5efa5a1112fa"}' - headers: - cache-control: - - no-cache - content-length: - - '3212' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7ea8a143-05e3-4553-abfe-f56bef8b0b70'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - for Azure SQL Database server to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure SQL Database server to stream resource logs - to a Log Analytics workspace when any SQL Server which is missing this diagnostic - settings is created or updated.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"logAnalyticsWorkspaceId":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Specify the Log Analytics workspace the - server should be connected to.","strongType":"omsWorkspace","assignPermissions":true}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"Enabled"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"logAnalyticsWorkspaceId":{"type":"string"}},"variables":{"diagnosticSettingsName":"SQLSecurityAuditEvents_3d229c42-c7e7-4c97-9a99-ec0d0d8b86c1"},"resources":[{"type":"Microsoft.Sql/servers/databases/providers/diagnosticSettings","name":"[concat(parameters(''serverName''),''/master/microsoft.insights/'',variables(''diagnosticSettingsName''))]","apiVersion":"2017-05-01-preview","properties":{"name":"[variables(''diagnosticSettingsName'')]","workspaceId":"[parameters(''logAnalyticsWorkspaceId'')]","logs":[{"category":"SQLSecurityAuditEvents","enabled":true,"retentionPolicy":{"days":0,"enabled":false}}]}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/auditingSettings","apiVersion":"2017-03-01-preview","dependsOn":["[concat(''Microsoft.Sql/servers/'', - parameters(''serverName''),''/databases/master/providers/microsoft.insights/diagnosticSettings/'', - variables(''diagnosticSettingsName''))]"],"properties":{"state":"Enabled","isAzureMonitorTargetEnabled":true}}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"logAnalyticsWorkspaceId":{"value":"[parameters(''logAnalyticsWorkspaceId'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ea8a143-05e3-4553-abfe-f56bef8b0b70","type":"Microsoft.Authorization/policyDefinitions","name":"7ea8a143-05e3-4553-abfe-f56bef8b0b70"}' - headers: - cache-control: - - no-cache - content-length: - - '2886' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have the password complexity setting enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the password complexity setting enabled. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordMustMeetComplexityRequirements"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8","type":"Microsoft.Authorization/policyDefinitions","name":"7ed40801-8a0f-4ceb-85c0-9fd25c1d61a8"}' - headers: - cache-control: - - no-cache - content-length: - - '5731' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Privilege Use''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Privilege Use''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c","type":"Microsoft.Authorization/policyDefinitions","name":"7f4e96d1-e4f3-4dbb-b767-33ca4df8df7c"}' - headers: - cache-control: - - no-cache - content-length: - - '3268' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7f89b1eb-583c-429a-8828-af049802c1d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit diagnostic setting","policyType":"BuiltIn","mode":"All","description":"Audit - diagnostic setting for selected resource types","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"listOfResourceTypes":{"type":"Array","metadata":{"displayName":"Resource - Types","strongType":"resourceTypes"}}},"policyRule":{"if":{"field":"type","in":"[parameters(''listOfResourceTypes'')]"},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7f89b1eb-583c-429a-8828-af049802c1d9","type":"Microsoft.Authorization/policyDefinitions","name":"7f89b1eb-583c-429a-8828-af049802c1d9"}' - headers: - cache-control: - - no-cache - content-length: - - '908' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7fe3b40f-802b-4cdd-8bd4-fd799c948cc2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for Azure SQL Database - servers should be enabled","policyType":"BuiltIn","mode":"All","description":"Azure - Defender for SQL provides functionality for surfacing and mitigating potential - database vulnerabilities, detecting anomalous activities that could indicate - threats to SQL databases, and discovering and classifying sensitive data.","metadata":{"version":"1.0.2","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"SqlServers","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7fe3b40f-802b-4cdd-8bd4-fd799c948cc2","type":"Microsoft.Authorization/policyDefinitions","name":"7fe3b40f-802b-4cdd-8bd4-fd799c948cc2"}' - headers: - cache-control: - - no-cache - content-length: - - '1145' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''7ff426e2-515f-405a-91c8-4f2333442eb5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Auditing settings should have Action-Groups - configured to capture critical activities","policyType":"BuiltIn","mode":"Indexed","description":"The - AuditActionsAndGroups property should contain at least SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP, - FAILED_DATABASE_AUTHENTICATION_GROUP, BATCH_COMPLETED_GROUP to ensure a thorough - audit logging","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"allOf":[{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"FAILED_DATABASE_AUTHENTICATION_GROUP"}},{"not":{"field":"Microsoft.Sql/servers/auditingSettings/auditActionsAndGroups[*]","notEquals":"BATCH_COMPLETED_GROUP"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/7ff426e2-515f-405a-91c8-4f2333442eb5","type":"Microsoft.Authorization/policyDefinitions","name":"7ff426e2-515f-405a-91c8-4f2333442eb5"}' - headers: - cache-control: - - no-cache - content-length: - - '1421' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''80e94a21-c6cd-4c95-a2c7-beb5704e61c0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure suppression rules - for Azure Security Center alerts","policyType":"BuiltIn","mode":"All","description":"Suppress - Azure Security Center alerts to reduce alerts fatigue by deploying suppression - rules on your management group or subscription.","metadata":{"category":"Security - Center","version":"1.0.0"},"parameters":{"alertType":{"type":"String","metadata":{"displayName":"Alert - Type","description":"Enter the alert type field of the alert you would like - to suppress. Alert type could be queried via alerts api or PowerShell, learn - more at https://aka.ms/asc-alertsPwoershell"}},"suppressionRuleName":{"type":"String","metadata":{"displayName":"Rule - name","description":"Rule names must begin with a letter or a number, be between - 2 and 50 characters, and contain no symbols other than dashes ( - ) or underscores - ( _ )"}},"state":{"type":"String","metadata":{"displayName":"State"},"allowedValues":["Enabled","Disabled"]},"reason":{"type":"String","metadata":{"displayName":"Reason"},"allowedValues":["The - severity of the alert should be lower","The alert detecting too many normal - activities","The alert is too noisy - hitting on the same resources too many - times","The resource isn''t relevant for me to monitor","The alert detecting - normal activity on specific entity","The alert isn''t actionable - not clear - how to investigate the threat","Other"]},"comment":{"type":"String","metadata":{"displayName":"Comment"}},"expirationDate":{"type":"DateTime","metadata":{"displayName":"Expiration - date"}},"entityOneType":{"type":"String","metadata":{"displayName":"First - entity type","description":"To refine the suppression rules to suppress alerts - only for specific entities, enter the type of the entity you would like to - suppress. Only alerts containing all of the entities defined in the rule will - be suppressed (alerts without entities will be suppressed entirely)."},"allowedValues":["User - account - name","User account - AAD user ID","User account - UPN suffix","Azure - resource ID","File - name","File - directory","File hash","Host - name","Host - - Azure ID","Host - DNS Domain","Host - OMS agent ID","IP address","Malware - - name","Malware - category","Process - command line",""]},"entityOneOp":{"type":"String","metadata":{"displayName":"First - entity operation"},"allowedValues":["Equals","Contains",""]},"entityOneValue":{"type":"String","metadata":{"displayName":"First - entity value","description":"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely)."}},"entitySecondType":{"type":"String","metadata":{"displayName":"Second - entity type","description":"To refine the suppression rules to suppress alerts - only for specific entities, enter the type of the entity you would like to - suppress. Only alerts containing all of the entities defined in the rule will - be suppressed (alerts without entities will be suppressed entirely)."},"allowedValues":["User - account - name","User account - AAD user ID","User account - UPN suffix","Azure - resource ID","File - name","File - directory","File hash","Host - name","Host - - Azure ID","Host - DNS Domain","Host - OMS agent ID","IP address","Malware - - name","Malware - category","Process - command line",""]},"entitySecondOp":{"type":"String","metadata":{"displayName":"Second - entity operation"},"allowedValues":["Equals","Contains",""]},"entitySecondValue":{"type":"String","metadata":{"displayName":"Second - entity value","description":"The value of the entity. Only alerts containing - all of the entities defined in the rule will be suppressed (alerts without - entities will be suppressed entirely)."}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/alertsSuppressionRules","name":"[parameters(''suppressionRuleName'')]","existenceScope":"subscription","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"deployment":{"location":"centralus","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"alertType":{"type":"String"},"suppressionRuleName":{"type":"String"},"state":{"type":"String"},"reason":{"type":"String"},"comment":{"type":"String"},"expirationDate":{"type":"String"},"entityOneType":{"type":"String"},"entityOneOp":{"type":"String"},"entityOneValue":{"type":"String"},"entitySecondType":{"type":"String"},"entitySecondOp":{"type":"String"},"entitySecondValue":{"type":"String"}},"variables":{"reasonToEnum":{"The - severity of the alert should be lower":"AlertSeverityTooHigh","The alert detecting - too many normal activities":"FalsePositive","The alert is too noisy - hitting - on the same resources too many times":"Noise","The resource isn''t relevant - for me to monitor":"NotRelevant","The alert detecting normal activity on specific - entity":"SpecificEntityFalsePositive","The alert isn''t actionable - not clear - how to investigate the threat":"Unclear","Other":"Other"},"entityNameToType":{"User - account - name":"entities.account.name","User account - AAD user ID":"entities.account.aaduserid","User - account - UPN suffix":"entities.account.upnsuffix","Azure resource ID":"entities.azureresource.resourceid","File - - name":"entities.file.name","File - directory":"entities.file.directory","File - hash":"entities.filehash.value","Host - name":"entities.host.hostname","Host - - Azure ID":"entities.host.azureid","Host - DNS Domain":"entities.host.dnsdomain","Host - - OMS agent ID":"entities.host.omsagentid","IP address":"entities.ip.address","Malware - - name":"entities.malware.name","Malware - category":"entities.malware.category","Process - - command line: ":"entities.process.commandline"},"entityOperationNameToOperation":{"Equals":"in","Contains":"contains"}},"resources":[{"type":"Microsoft.Security/alertsSuppressionRules","apiVersion":"2019-01-01-preview","name":"[parameters(''suppressionRuleName'')]","location":"centralus","properties":{"alertType":"[parameters(''alertType'')]","state":"[parameters(''state'')]","reason":"[variables(''reasonToEnum'')[parameters(''reason'')]]","comment":"[parameters(''comment'')]","expirationDateUtc":"[parameters(''expirationDate'')]","suppressionAlertsScope":"[if(and(or(empty(parameters(''entityOneType'')), - empty(parameters(''entityOneOp'')), empty(parameters(''entityOneValue''))), - or(empty(parameters(''entitySecondType'')), empty(parameters(''entitySecondOp'')), - empty(parameters(''entitySecondValue'')))), null(), json(concat(''{ \"allOf\": - ['', if(or(empty(parameters(''entityOneType'')), empty(parameters(''entityOneOp'')), - empty(parameters(''entityOneValue''))), '''', concat('' { \"field\": \"'', - variables(''entityNameToType'')[parameters(''entityOneType'')], ''\", \"'', - variables(''entityOperationNameToOperation'')[parameters(''entityOneOp'')], - ''\":'', if(equals(parameters(''entityOneOp''), ''Equals''), ''['', ''''), - '' \"'', parameters(''entityOneValue''), ''\"'', if(equals(parameters(''entityOneOp''), - ''Equals''), '']'', ''''), '' }'', if(or(empty(parameters(''entitySecondType'')), - empty(parameters(''entitySecondOp'')), empty(parameters(''entitySecondValue''))), - '''', '', ''))), if(or(empty(parameters(''entitySecondType'')), empty(parameters(''entitySecondOp'')), - empty(parameters(''entitySecondValue''))), '''', concat('' { \"field\": \"'', - variables(''entityNameToType'')[parameters(''entitySecondType'')], ''\", \"'', - variables(''entityOperationNameToOperation'')[parameters(''entitySecondOp'')], - ''\":'', if(equals(parameters(''entitySecondOp''), ''Equals''), ''['', ''''), - '' \"'', parameters(''entitySecondValue''), ''\"'', if(equals(parameters(''entitySecondOp''), - ''Equals''), '']'', ''''), '' } '')), ''] }'')))]"}}]},"parameters":{"alertType":{"value":"[parameters(''alertType'')]"},"suppressionRuleName":{"value":"[parameters(''suppressionRuleName'')]"},"state":{"value":"[parameters(''state'')]"},"reason":{"value":"[parameters(''reason'')]"},"comment":{"value":"[parameters(''comment'')]"},"expirationDate":{"value":"[parameters(''expirationDate'')]"},"entityOneType":{"value":"[parameters(''entityOneType'')]"},"entityOneOp":{"value":"[parameters(''entityOneOp'')]"},"entityOneValue":{"value":"[parameters(''entityOneValue'')]"},"entitySecondType":{"value":"[parameters(''entitySecondType'')]"},"entitySecondOp":{"value":"[parameters(''entitySecondOp'')]"},"entitySecondValue":{"value":"[parameters(''entitySecondValue'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/80e94a21-c6cd-4c95-a2c7-beb5704e61c0","type":"Microsoft.Authorization/policyDefinitions","name":"80e94a21-c6cd-4c95-a2c7-beb5704e61c0"}' - headers: - cache-control: - - no-cache - content-length: - - '8697' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''815dcc9f-6662-43f2-9a03-1b83e9876f24'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''User Rights Assignment''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''User Rights Assignment''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may access this computer from the network","description":"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection."}},"UsersOrGroupsThatMayLogOnLocally":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may log on locally","description":"Specifies which users - or groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right."}},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may log on through Remote Desktop Services","description":"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance."}},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that are denied access to this computer from the network","description":"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network."}},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may manage auditing and security log","description":"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log."}},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may back up files and directories","description":"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system."}},"UsersOrGroupsThatMayChangeTheSystemTime":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may change the system time","description":"Specifies - which users and groups are permitted to change the time and date on the internal - clock of the computer."}},"UsersOrGroupsThatMayChangeTheTimeZone":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may change the time zone","description":"Specifies which - users and groups are permitted to change the time zone of the computer."}},"UsersOrGroupsThatMayCreateATokenObject":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may create a token object","description":"Specifies which - users and groups are permitted to create an access token, which may provide - elevated rights to access sensitive data."}},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that are denied logging on as a batch job","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task)."}},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that are denied logging on as a service","description":"Specifies - which service accounts are explicitly not permitted to register a process - as a service."}},"UsersAndGroupsThatAreDeniedLocalLogon":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that are denied local logon","description":"Specifies which - users and groups are explicitly not permitted to log on to the computer."}},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that are denied log on through Remote Desktop Services","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client."}},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"type":"String","metadata":{"displayName":"[Deprecated]: - User and groups that may force shutdown from a remote system","description":"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network."}},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that may restore files and directories","description":"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories."}},"UsersAndGroupsThatMayShutDownTheSystem":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users and groups that may shut down the system","description":"Specifies which - users and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command."}},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"type":"String","metadata":{"displayName":"[Deprecated]: - Users or groups that may take ownership of files or other objects","description":"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_UserRightsAssignment","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Access - this computer from the network;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork''), - '','', ''Allow log on locally;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayLogOnLocally''), - '','', ''Allow log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices''), '','', - ''Deny access to this computer from the network;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork''), - '','', ''Manage auditing and security log;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog''), - '','', ''Back up files and directories;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories''), - '','', ''Change the system time;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheSystemTime''), - '','', ''Change the time zone;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheTimeZone''), - '','', ''Create a token object;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayCreateATokenObject''), - '','', ''Deny log on as a batch job;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob''), - '','', ''Deny log on as a service;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService''), - '','', ''Deny log on locally;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLocalLogon''), - '','', ''Deny log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices''), - '','', ''Force shutdown from a remote system;ExpectedValue'', ''='', parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem''), - '','', ''Restore files and directories;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories''), - '','', ''Shut down the system;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayShutDownTheSystem''), - '','', ''Take ownership of files or other objects;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_UserRightsAssignment"},"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},"UsersOrGroupsThatMayLogOnLocally":{"value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},"UsersOrGroupsThatMayChangeTheSystemTime":{"value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},"UsersOrGroupsThatMayChangeTheTimeZone":{"value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},"UsersOrGroupsThatMayCreateATokenObject":{"value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},"UsersAndGroupsThatAreDeniedLocalLogon":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},"UsersAndGroupsThatMayShutDownTheSystem":{"value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"type":"string"},"UsersOrGroupsThatMayLogOnLocally":{"type":"string"},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"type":"string"},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"type":"string"},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"type":"string"},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"type":"string"},"UsersOrGroupsThatMayChangeTheSystemTime":{"type":"string"},"UsersOrGroupsThatMayChangeTheTimeZone":{"type":"string"},"UsersOrGroupsThatMayCreateATokenObject":{"type":"string"},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"type":"string"},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"type":"string"},"UsersAndGroupsThatAreDeniedLocalLogon":{"type":"string"},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"type":"string"},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"type":"string"},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"type":"string"},"UsersAndGroupsThatMayShutDownTheSystem":{"type":"string"},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Access - this computer from the network;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},{"name":"Allow - log on locally;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},{"name":"Allow - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},{"name":"Deny - access to this computer from the network;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},{"name":"Manage - auditing and security log;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},{"name":"Back - up files and directories;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},{"name":"Change - the system time;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},{"name":"Change - the time zone;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},{"name":"Create - a token object;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},{"name":"Deny - log on as a batch job;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},{"name":"Deny - log on as a service;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},{"name":"Deny - log on locally;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},{"name":"Deny - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},{"name":"Force - shutdown from a remote system;ExpectedValue","value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},{"name":"Restore - files and directories;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},{"name":"Shut - down the system;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},{"name":"Take - ownership of files or other objects;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Access - this computer from the network;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork'')]"},{"name":"Allow - log on locally;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnLocally'')]"},{"name":"Allow - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices'')]"},{"name":"Deny - access to this computer from the network;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork'')]"},{"name":"Manage - auditing and security log;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog'')]"},{"name":"Back - up files and directories;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories'')]"},{"name":"Change - the system time;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheSystemTime'')]"},{"name":"Change - the time zone;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayChangeTheTimeZone'')]"},{"name":"Create - a token object;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayCreateATokenObject'')]"},{"name":"Deny - log on as a batch job;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob'')]"},{"name":"Deny - log on as a service;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService'')]"},{"name":"Deny - log on locally;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLocalLogon'')]"},{"name":"Deny - log on through Remote Desktop Services;ExpectedValue","value":"[parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices'')]"},{"name":"Force - shutdown from a remote system;ExpectedValue","value":"[parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem'')]"},{"name":"Restore - files and directories;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories'')]"},{"name":"Shut - down the system;ExpectedValue","value":"[parameters(''UsersAndGroupsThatMayShutDownTheSystem'')]"},{"name":"Take - ownership of files or other objects;ExpectedValue","value":"[parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/815dcc9f-6662-43f2-9a03-1b83e9876f24","type":"Microsoft.Authorization/policyDefinitions","name":"815dcc9f-6662-43f2-9a03-1b83e9876f24"}' - headers: - cache-control: - - no-cache - content-length: - - '20951' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''81e74cea-30fd-40d5-802f-d72103c2aaaa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Data Explorer encryption at rest - should use a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Enabling - encryption at rest using a customer-managed key on your Azure Data Explorer - cluster provides additional control over the key being used by the encryption - at rest. This feature is oftentimes applicable to customers with special compliance - requirements and requires a Key Vault to managing the keys.","metadata":{"version":"1.0.0","category":"Azure - Data Explorer"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kusto/Clusters"},{"anyOf":[{"field":"Microsoft.Kusto/clusters/keyVaultProperties","exists":false},{"field":"Microsoft.Kusto/clusters/keyVaultProperties.keyName","exists":false},{"field":"Microsoft.Kusto/clusters/keyVaultProperties.keyVersion","exists":false},{"field":"Microsoft.Kusto/clusters/keyVaultProperties.keyVaultUri","exists":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/81e74cea-30fd-40d5-802f-d72103c2aaaa","type":"Microsoft.Authorization/policyDefinitions","name":"81e74cea-30fd-40d5-802f-d72103c2aaaa"}' - headers: - cache-control: - - no-cache - content-length: - - '1365' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''82339799-d096-41ae-8538-b108becf0970'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Geo-redundant backup should be enabled - for Azure Database for MySQL","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Database for MySQL allows you to choose the redundancy option for your database - server. It can be set to a geo-redundant backup storage in which the data - is not only stored within the region in which your server is hosted, but is - also replicated to a paired region to provide recovery option in case of a - region failure. Configuring geo-redundant storage for backup is only allowed - during server create.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/storageProfile.geoRedundantBackup","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/82339799-d096-41ae-8538-b108becf0970","type":"Microsoft.Authorization/policyDefinitions","name":"82339799-d096-41ae-8538-b108becf0970"}' - headers: - cache-control: - - no-cache - content-length: - - '1214' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8316fa92-d69c-4810-8124-62414f560dcf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - System''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - System'' for auditing IPsec driver, system integrity, system - extension, state change, and other system events. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesSystem","version":"1.*","configurationParameter":{"AuditOtherSystemEvents":"Audit - Other System Events;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AuditOtherSystemEvents":{"type":"String","metadata":{"displayName":"Audit - Other System Events","description":"Specifies whether audit events are generated - for Windows Firewall Service and Windows Firewall driver start and stop events, - failure events for these services and Windows Firewall Service policy processing - failures."},"allowedValues":["No Auditing","Success","Failure","Success and - Failure"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesSystem","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Other System Events;ExpectedValue'', ''='', parameters(''AuditOtherSystemEvents'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8316fa92-d69c-4810-8124-62414f560dcf","type":"Microsoft.Authorization/policyDefinitions","name":"8316fa92-d69c-4810-8124-62414f560dcf"}' - headers: - cache-control: - - no-cache - content-length: - - '4548' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''83644c87-93dd-49fe-bf9f-6aff8fd0834e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Configure backup on virtual - machines with a given tag to a new recovery services vault with a default - policy","policyType":"BuiltIn","mode":"Indexed","description":"Enforce backup - for all virtual machines by deploying a recovery services vault in the same - location and resource group as the virtual machine. Doing this is useful when - different application teams in your organization are allocated separate resource - groups and need to manage their own backups and restores. You can optionally - include virtual machines containing a specified tag to control the scope of - assignment. See https://aka.ms/AzureVMAppCentricBackupIncludeTag.","metadata":{"version":"2.0.0-preview","preview":true,"category":"Backup"},"parameters":{"inclusionTagName":{"type":"String","metadata":{"displayName":"[Preview]: - Inclusion Tag Name","description":"Name of the tag to use for including VMs - in the scope of this policy. This should be used along with the Inclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy."}},"inclusionTagValue":{"type":"Array","metadata":{"displayName":"[Preview]: - Inclusion Tag Values","description":"Value of the tag to use for including - VMs in the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Inclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"id","notContains":"/resourceGroups/databricks-rg-"},{"anyOf":[{"field":"[concat(''tags['', - parameters(''inclusionTagName''), '']'')]","in":"[parameters(''inclusionTagValue'')]"},{"value":"[empty(parameters(''inclusionTagValue''))]","equals":"true"},{"value":"[empty(parameters(''inclusionTagName''))]","equals":"true"}]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2019"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"20.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.RecoveryServices/backupprotecteditems","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string","metadata":{"description":"Name - of Azure Virtual Machines"}},"vmRgName":{"type":"string","metadata":{"description":"Resource - group containing the virtual machines."}},"location":{"type":"string","metadata":{"description":"Location - for VM and Backup vault"}}},"variables":{"backupFabric":"Azure","backupPolicy":"DefaultPolicy","v2VmType":"Microsoft.Compute/virtualMachines","v2VmContainer":"iaasvmcontainer;iaasvmcontainerv2;","v2Vm":"vm;iaasvmcontainerv2;","vaultName":"[take(concat(''RSVault-'', - parameters(''location''), ''-'', guid(resourceGroup().id)),50)]"},"resources":[{"name":"[variables(''vaultName'')]","type":"Microsoft.RecoveryServices/vaults","apiVersion":"2016-06-01","location":"[parameters(''location'')]","properties":{},"sku":{"name":"Standard"}},{"name":"[concat(variables(''vaultName''), - ''/'', variables(''backupFabric''), ''/'', variables(''v2VmContainer''), concat(parameters(''vmRgName''),'';'',parameters(''vmName'')), - ''/'', variables(''v2Vm''), concat(parameters(''vmRgName''),'';'',parameters(''vmName'')))]","apiVersion":"2016-12-01","location":"[parameters(''location'')]","type":"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems","dependsOn":["[resourceId(''Microsoft.RecoveryServices/vaults/'', - variables(''vaultName''))]"],"properties":{"protectedItemType":"[variables(''v2VmType'')]","policyId":"[resourceId(''Microsoft.RecoveryServices/vaults/backupPolicies'', - variables(''vaultName''),variables(''backupPolicy''))]","sourceResourceId":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/'', parameters(''vmRgName''), - ''/providers/Microsoft.Compute/virtualMachines/'', parameters(''vmName''))]"}}],"outputs":{"status":{"type":"string","value":"[concat(''Backup - enabled successfully for VM:'', '' '', parameters(''vmName''), ''Backup Vault: - '', variables(''vaultName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"vmRgName":{"value":"[resourceGroup().name]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83644c87-93dd-49fe-bf9f-6aff8fd0834e","type":"Microsoft.Authorization/policyDefinitions","name":"83644c87-93dd-49fe-bf9f-6aff8fd0834e"}' - headers: - cache-control: - - no-cache - content-length: - - '9003' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''83a214f7-d01a-484b-91a9-ed54470c9a6a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Event Hub should be - enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes; when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a214f7-d01a-484b-91a9-ed54470c9a6a","type":"Microsoft.Authorization/policyDefinitions","name":"83a214f7-d01a-484b-91a9-ed54470c9a6a"}' - headers: - cache-control: - - no-cache - content-length: - - '1933' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''83a86a26-fd1f-447c-b59d-e51f44264114'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Network interfaces should not have public - IPs","policyType":"BuiltIn","mode":"Indexed","description":"This policy denies - the network interfaces which are configured with any public IP. Public IP - addresses allow internet resources to communicate inbound to Azure resources, - and Azure resources to communicate outbound to the internet. This should be - reviewed by the network security team.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"not":{"field":"Microsoft.Network/networkInterfaces/ipconfigurations[*].publicIpAddress.id","notLike":"*"}}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83a86a26-fd1f-447c-b59d-e51f44264114","type":"Microsoft.Authorization/policyDefinitions","name":"83a86a26-fd1f-447c-b59d-e51f44264114"}' - headers: - cache-control: - - no-cache - content-length: - - '912' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''83cef61d-dbd1-4b20-a4fc-5fbc7da10833'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Bring your own key data protection should - be enabled for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your MySQL servers. - By default, the data is encrypted at rest with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.","metadata":{"version":"1.0.3","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMySQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMySQL/servers/keys","existenceCondition":{"allOf":[{"field":"Microsoft.DBforMySQL/servers/keys/serverKeyType","equals":"AzureKeyVault"},{"field":"Microsoft.DBforMySQL/servers/keys/uri","notEquals":""},{"field":"Microsoft.DBforMySQL/servers/keys/uri","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/83cef61d-dbd1-4b20-a4fc-5fbc7da10833","type":"Microsoft.Authorization/policyDefinitions","name":"83cef61d-dbd1-4b20-a4fc-5fbc7da10833"}' - headers: - cache-control: - - no-cache - content-length: - - '1460' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8405fdab-1faf-48aa-b702-999c9c172094'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed disks should disable public network - access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling public - network access improves security by ensuring that a managed disk isn''t exposed - on the public internet. Creating private endpoints can limit exposure of managed - disks. Learn more at: https://aka.ms/disksprivatelinksdoc.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"Microsoft.Compute/disks/networkAccessPolicy","notIn":["DenyAll","AllowPrivate"]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8405fdab-1faf-48aa-b702-999c9c172094","type":"Microsoft.Authorization/policyDefinitions","name":"8405fdab-1faf-48aa-b702-999c9c172094"}' - headers: - cache-control: - - no-cache - content-length: - - '1048' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8426280e-b5be-43d9-979e-653d12a08638'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure managed disks to disable public - network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your managed disk resource so that it''s not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://aka.ms/disksprivatelinksdoc.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]},"location":{"type":"String","metadata":{"displayName":"Location","strongType":"location","description":"All - disks in this region are validated and disk access resource would be associated - with them."}},"diskAccessId":{"type":"String","metadata":{"displayName":"Resource - Id for the DiskAccess in the given location to which the disk resource needs - to be linked","strongType":"Microsoft.Compute/diskAccesses","description":"Disk - access resources enable exporting managed disks securely via private endpoints. - Learn more at: https://aka.ms/disksprivatelinksdoc"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"location","equals":"[parameters(''location'')]"},{"field":"Microsoft.Compute/disks/networkAccessPolicy","notIn":["AllowPrivate","DenyAll"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"audit","operations":[{"operation":"addOrReplace","field":"Microsoft.Compute/disks/diskAccessId","value":"[parameters(''diskAccessId'')]"},{"operation":"addOrReplace","field":"Microsoft.Compute/disks/networkAccessPolicy","value":"AllowPrivate"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8426280e-b5be-43d9-979e-653d12a08638","type":"Microsoft.Authorization/policyDefinitions","name":"8426280e-b5be-43d9-979e-653d12a08638"}' - headers: - cache-control: - - no-cache - content-length: - - '1993' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''842c54e8-c2f9-4d79-ae8d-38d8b8019373'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Log Analytics agent should - be installed on your Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Linux Azure Arc machines if the Log Analytics agent is not installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.HybridCompute/machines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/842c54e8-c2f9-4d79-ae8d-38d8b8019373","type":"Microsoft.Authorization/policyDefinitions","name":"842c54e8-c2f9-4d79-ae8d-38d8b8019373"}' - headers: - cache-control: - - no-cache - content-length: - - '1327' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''843664e0-7563-41ee-a9cb-7522c382d2c4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that ''.NET Framework'' - version is the latest, if used as a part of the Web app","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/843664e0-7563-41ee-a9cb-7522c382d2c4","type":"Microsoft.Authorization/policyDefinitions","name":"843664e0-7563-41ee-a9cb-7522c382d2c4"}' - headers: - cache-control: - - no-cache - content-length: - - '1118' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''84662df4-0e37-44a6-9ce1-c9d2150db18c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that are not joined - to the specified domain","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - Domain property in WMI class win32_computersystem does not match the value - in the policy parameter.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsDomainMembership","version":"1.*","configurationParameter":{"DomainName":"[DomainMembership]WindowsDomainMembership;DomainName"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"DomainName":{"type":"String","metadata":{"displayName":"Domain - Name (FQDN)","description":"The fully qualified domain name (FQDN) that the - Windows machines should be joined to"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDomainMembership","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[DomainMembership]WindowsDomainMembership;DomainName'', - ''='', parameters(''DomainName'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/84662df4-0e37-44a6-9ce1-c9d2150db18c","type":"Microsoft.Authorization/policyDefinitions","name":"84662df4-0e37-44a6-9ce1-c9d2150db18c"}' - headers: - cache-control: - - no-cache - content-length: - - '3991' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8537fe96-8cbe-43de-b0ef-131bc72bc22a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Windows Components''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Windows - Components'' for basic authentication, unencrypted traffic, Microsoft accounts, - telemetry, Cortana, and other Windows behaviors. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_WindowsComponents","version":"1.*","configurationParameter":{"SendFileSamplesWhenFurtherAnalysisIsRequired":"Send - file samples when further analysis is required;ExpectedValue","AllowIndexingOfEncryptedFiles":"Allow - indexing of encrypted files;ExpectedValue","AllowTelemetry":"Allow Telemetry;ExpectedValue","AllowUnencryptedTraffic":"Allow - unencrypted traffic;ExpectedValue","AlwaysInstallWithElevatedPrivileges":"Always - install with elevated privileges;ExpectedValue","AlwaysPromptForPasswordUponConnection":"Always - prompt for password upon connection;ExpectedValue","ApplicationSpecifyTheMaximumLogFileSizeKB":"Application: - Specify the maximum log file size (KB);ExpectedValue","AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":"Automatically - send memory dumps for OS-generated error reports;ExpectedValue","ConfigureDefaultConsent":"Configure - Default consent;ExpectedValue","ConfigureWindowsSmartScreen":"Configure Windows - SmartScreen;ExpectedValue","DisallowDigestAuthentication":"Disallow Digest - authentication;ExpectedValue","DisallowWinRMFromStoringRunAsCredentials":"Disallow - WinRM from storing RunAs credentials;ExpectedValue","DoNotAllowPasswordsToBeSaved":"Do - not allow passwords to be saved;ExpectedValue","SecuritySpecifyTheMaximumLogFileSizeKB":"Security: - Specify the maximum log file size (KB);ExpectedValue","SetClientConnectionEncryptionLevel":"Set - client connection encryption level;ExpectedValue","SetTheDefaultBehaviorForAutoRun":"Set - the default behavior for AutoRun;ExpectedValue","SetupSpecifyTheMaximumLogFileSizeKB":"Setup: - Specify the maximum log file size (KB);ExpectedValue","SystemSpecifyTheMaximumLogFileSizeKB":"System: - Specify the maximum log file size (KB);ExpectedValue","TurnOffDataExecutionPreventionForExplorer":"Turn - off Data Execution Prevention for Explorer;ExpectedValue","SpecifyTheIntervalToCheckForDefinitionUpdates":"Specify - the interval to check for definition updates;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"SendFileSamplesWhenFurtherAnalysisIsRequired":{"type":"String","metadata":{"displayName":"Send - file samples when further analysis is required","description":"Specifies whether - and how Windows Defender will submit samples of suspected malware to Microsoft - for further analysis when opt-in for MAPS telemetry is set."}},"AllowIndexingOfEncryptedFiles":{"type":"String","metadata":{"displayName":"Allow - indexing of encrypted files","description":"Specifies whether encrypted items - are allowed to be indexed."}},"AllowTelemetry":{"type":"String","metadata":{"displayName":"Allow - Telemetry","description":"Specifies configuration of the amount of diagnostic - and usage data reported to Microsoft. The data is transmitted securely and - sensitive data is not sent."}},"AllowUnencryptedTraffic":{"type":"String","metadata":{"displayName":"Allow - unencrypted traffic","description":"Specifies whether the Windows Remote Management - (WinRM) service sends and receives unencrypted messages over the network."}},"AlwaysInstallWithElevatedPrivileges":{"type":"String","metadata":{"displayName":"Always - install with elevated privileges","description":"Specifies whether Windows - Installer should use system permissions when it installs any program on the - system."}},"AlwaysPromptForPasswordUponConnection":{"type":"String","metadata":{"displayName":"Always - prompt for password upon connection","description":"Specifies whether Terminal - Services/Remote Desktop Connection always prompts the client computer for - a password upon connection."}},"ApplicationSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Application: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Application event log in kilobytes."}},"AutomaticallySendMemoryDumpsForOSgeneratedErrorReports":{"type":"String","metadata":{"displayName":"Automatically - send memory dumps for OS-generated error reports","description":"Specifies - if memory dumps in support of OS-generated error reports can be sent to Microsoft - automatically."}},"ConfigureDefaultConsent":{"type":"String","metadata":{"displayName":"Configure - Default consent","description":"Specifies setting of the default consent handling - for error reports sent to Microsoft."}},"ConfigureWindowsSmartScreen":{"type":"String","metadata":{"displayName":"Configure - Windows SmartScreen","description":"Specifies how to manage the behavior of - Windows SmartScreen. Windows SmartScreen helps keep PCs safer by warning users - before running unrecognized programs downloaded from the Internet. Some information - is sent to Microsoft about files and programs run on PCs with this feature - enabled."}},"DisallowDigestAuthentication":{"type":"String","metadata":{"displayName":"Disallow - Digest authentication","description":"Specifies whether the Windows Remote - Management (WinRM) client will not use Digest authentication."}},"DisallowWinRMFromStoringRunAsCredentials":{"type":"String","metadata":{"displayName":"Disallow - WinRM from storing RunAs credentials","description":"Specifies whether the - Windows Remote Management (WinRM) service will not allow RunAs credentials - to be stored for any plug-ins."}},"DoNotAllowPasswordsToBeSaved":{"type":"String","metadata":{"displayName":"Do - not allow passwords to be saved","description":"Specifies whether to prevent - Remote Desktop Services - Terminal Services clients from saving passwords - on a computer."}},"SecuritySpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Security: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Security event log in kilobytes."}},"SetClientConnectionEncryptionLevel":{"type":"String","metadata":{"displayName":"Set - client connection encryption level","description":"Specifies whether to require - the use of a specific encryption level to secure communications between client - computers and RD Session Host servers during Remote Desktop Protocol (RDP) - connections. This policy only applies when you are using native RDP encryption."}},"SetTheDefaultBehaviorForAutoRun":{"type":"String","metadata":{"displayName":"Set - the default behavior for AutoRun","description":"Specifies the default behavior - for Autorun commands. Autorun commands are generally stored in autorun.inf - files. They often launch the installation program or other routines."}},"SetupSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"Setup: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the Setup event log in kilobytes."}},"SystemSpecifyTheMaximumLogFileSizeKB":{"type":"String","metadata":{"displayName":"System: - Specify the maximum log file size (KB)","description":"Specifies the maximum - size for the System event log in kilobytes."}},"TurnOffDataExecutionPreventionForExplorer":{"type":"String","metadata":{"displayName":"Turn - off Data Execution Prevention for Explorer","description":"Specifies whether - to turn off Data Execution Prevention for Windows File Explorer. Disabling - data execution prevention can allow certain legacy plug-in applications to - function without terminating Explorer."}},"SpecifyTheIntervalToCheckForDefinitionUpdates":{"type":"String","metadata":{"displayName":"Specify - the interval to check for definition updates","description":"Specifies an - interval at which to check for Windows Defender definition updates. The time - value is represented as the number of hours between update checks."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsComponents","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Send - file samples when further analysis is required;ExpectedValue'', ''='', parameters(''SendFileSamplesWhenFurtherAnalysisIsRequired''), - '','', ''Allow indexing of encrypted files;ExpectedValue'', ''='', parameters(''AllowIndexingOfEncryptedFiles''), - '','', ''Allow Telemetry;ExpectedValue'', ''='', parameters(''AllowTelemetry''), - '','', ''Allow unencrypted traffic;ExpectedValue'', ''='', parameters(''AllowUnencryptedTraffic''), - '','', ''Always install with elevated privileges;ExpectedValue'', ''='', parameters(''AlwaysInstallWithElevatedPrivileges''), - '','', ''Always prompt for password upon connection;ExpectedValue'', ''='', - parameters(''AlwaysPromptForPasswordUponConnection''), '','', ''Application: - Specify the maximum log file size (KB);ExpectedValue'', ''='', parameters(''ApplicationSpecifyTheMaximumLogFileSizeKB''), - '','', ''Automatically send memory dumps for OS-generated error reports;ExpectedValue'', - ''='', parameters(''AutomaticallySendMemoryDumpsForOSgeneratedErrorReports''), - '','', ''Configure Default consent;ExpectedValue'', ''='', parameters(''ConfigureDefaultConsent''), - '','', ''Configure Windows SmartScreen;ExpectedValue'', ''='', parameters(''ConfigureWindowsSmartScreen''), - '','', ''Disallow Digest authentication;ExpectedValue'', ''='', parameters(''DisallowDigestAuthentication''), - '','', ''Disallow WinRM from storing RunAs credentials;ExpectedValue'', ''='', - parameters(''DisallowWinRMFromStoringRunAsCredentials''), '','', ''Do not - allow passwords to be saved;ExpectedValue'', ''='', parameters(''DoNotAllowPasswordsToBeSaved''), - '','', ''Security: Specify the maximum log file size (KB);ExpectedValue'', - ''='', parameters(''SecuritySpecifyTheMaximumLogFileSizeKB''), '','', ''Set - client connection encryption level;ExpectedValue'', ''='', parameters(''SetClientConnectionEncryptionLevel''), - '','', ''Set the default behavior for AutoRun;ExpectedValue'', ''='', parameters(''SetTheDefaultBehaviorForAutoRun''), - '','', ''Setup: Specify the maximum log file size (KB);ExpectedValue'', ''='', - parameters(''SetupSpecifyTheMaximumLogFileSizeKB''), '','', ''System: Specify - the maximum log file size (KB);ExpectedValue'', ''='', parameters(''SystemSpecifyTheMaximumLogFileSizeKB''), - '','', ''Turn off Data Execution Prevention for Explorer;ExpectedValue'', - ''='', parameters(''TurnOffDataExecutionPreventionForExplorer''), '','', ''Specify - the interval to check for definition updates;ExpectedValue'', ''='', parameters(''SpecifyTheIntervalToCheckForDefinitionUpdates'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8537fe96-8cbe-43de-b0ef-131bc72bc22a","type":"Microsoft.Authorization/policyDefinitions","name":"8537fe96-8cbe-43de-b0ef-131bc72bc22a"}' - headers: - cache-control: - - no-cache - content-length: - - '13641' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''859dfc91-ea35-43a6-8256-31271c363794'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure IoT Hub device provisioning - service instances to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your IoT Hub device provisioning instance so that - it''s not accessible over the public internet. This can reduce data leakage - risks. Learn more at: https://aka.ms/iotdpsvnet.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/provisioningServices"},{"field":"Microsoft.Devices/provisioningServices/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2020-03-01'')]","operation":"addOrReplace","field":"Microsoft.Devices/provisioningServices/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/859dfc91-ea35-43a6-8256-31271c363794","type":"Microsoft.Authorization/policyDefinitions","name":"859dfc91-ea35-43a6-8256-31271c363794"}' - headers: - cache-control: - - no-cache - content-length: - - '1412' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''85bb39b5-2f66-49f8-9306-77da3ac5130f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Data Factory integration - runtime should have a limit for number of cores","policyType":"BuiltIn","mode":"All","description":"To - manage your resources and costs, limit the number of cores for an integration - runtime.","metadata":{"version":"1.0.0-preview","category":"Data Factory","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"maxCores":{"type":"Integer","metadata":{"displayName":"[Preview]: - Allowed max number of cores","description":"The max number of cores allowed - for dataflow."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories/integrationRuntimes"},{"field":"Microsoft.DataFactory/factories/integrationruntimes/type","equals":"Managed"},{"field":"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount","exists":"true"},{"field":"Microsoft.DataFactory/factories/integrationRuntimes/Managed.typeProperties.computeProperties.dataFlowProperties.coreCount","greater":"[parameters(''maxCores'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/85bb39b5-2f66-49f8-9306-77da3ac5130f","type":"Microsoft.Authorization/policyDefinitions","name":"85bb39b5-2f66-49f8-9306-77da3ac5130f"}' - headers: - cache-control: - - no-cache - content-length: - - '1457' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cosmos DB accounts should have - firewall rules","policyType":"BuiltIn","mode":"All","description":"Firewall - rules should be defined on your Azure Cosmos DB accounts to prevent traffic - from unauthorized sources. Accounts that have at least one IP rule defined - with the virtual network filter enabled are deemed compliant. Accounts disabling - public access are also deemed compliant.","metadata":{"version":"1.0.1","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Policy - Effect","description":"The desired effect of the policy."},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","equals":"Enabled"}]},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/isVirtualNetworkFilterEnabled","equals":"false"},{"allOf":[{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/ipRules","exists":"false"},{"count":{"field":"Microsoft.DocumentDB/databaseAccounts/ipRules[*]"},"equals":0}]},{"anyOf":[{"field":"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter","exists":"false"},{"field":"Microsoft.DocumentDB/databaseAccounts/ipRangeFilter","equals":""}]}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb","type":"Microsoft.Authorization/policyDefinitions","name":"862e97cf-49fc-4a5c-9de4-40d4e2e7c8eb"}' - headers: - cache-control: - - no-cache - content-length: - - '1730' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86880e5c-df35-43c5-95ad-7e120635775e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Microsoft Network - Server''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Microsoft Network Server''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86880e5c-df35-43c5-95ad-7e120635775e","type":"Microsoft.Authorization/policyDefinitions","name":"86880e5c-df35-43c5-95ad-7e120635775e"}' - headers: - cache-control: - - no-cache - content-length: - - '5807' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86a912f6-9a06-4e26-b447-11b16ba8659f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy SQL DB transparent data encryption","policyType":"BuiltIn","mode":"Indexed","description":"Enables - transparent data encryption on SQL databases","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Sql/servers/databases/transparentDataEncryption","name":"current","existenceCondition":{"field":"Microsoft.Sql/transparentDataEncryption.status","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9b7fa17d-e63e-47b0-bb0a-15c516ac86ec"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullDbName":{"type":"string"}},"resources":[{"name":"[concat(parameters(''fullDbName''), - ''/current'')]","type":"Microsoft.Sql/servers/databases/transparentDataEncryption","apiVersion":"2014-04-01","properties":{"status":"Enabled"}}]},"parameters":{"fullDbName":{"value":"[field(''fullName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86a912f6-9a06-4e26-b447-11b16ba8659f","type":"Microsoft.Authorization/policyDefinitions","name":"86a912f6-9a06-4e26-b447-11b16ba8659f"}' - headers: - cache-control: - - no-cache - content-length: - - '1403' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86b3d65f-7626-441e-b690-81a8b71cff60'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"System updates should be installed on - your machines","policyType":"BuiltIn","mode":"All","description":"Missing - security system updates on your servers will be monitored by Azure Security - Center as recommendations","metadata":{"version":"4.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"4ab6e3c5-74dd-8b35-9ab9-f61b30875b27","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86b3d65f-7626-441e-b690-81a8b71cff60","type":"Microsoft.Authorization/policyDefinitions","name":"86b3d65f-7626-441e-b690-81a8b71cff60"}' - headers: - cache-control: - - no-cache - content-length: - - '1061' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86cd96e1-1745-420d-94d4-d3f2fe415aa4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private DNS zones for private - endpoints that connect to Azure Data Factory","policyType":"BuiltIn","mode":"Indexed","description":"Private - DNS records allow private connections to private endpoints. Private endpoint - connections allow secure communication by enabling private connectivity to - your Azure Data Factory without a need for public IP addresses at the source - or destination. For more information on private endpoints and DNS zones in - Azure Data Factory, see https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data - Factory"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone","strongType":"Microsoft.Network/privateDnsZones","description":"The - private DNS zone to deploy in a new private DNS zone group and link to the - private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"listOfGroupIds":{"type":"Array","metadata":{"description":"The - list of Group Ids that can be specified for Private Endpoints.","displayName":"Allowed - Group Ids"},"allowedValues":["dataFactory","portal"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","in":"[parameters(''listOfGroupIds'')]"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"dataFactory-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86cd96e1-1745-420d-94d4-d3f2fe415aa4","type":"Microsoft.Authorization/policyDefinitions","name":"86cd96e1-1745-420d-94d4-d3f2fe415aa4"}' - headers: - cache-control: - - no-cache - content-length: - - '2901' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86d97760-d216-4d81-a3ad-163087b2b6c3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that Register with - Azure Active Directory is enabled on API app","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3ee - instead.","metadata":{"version":"1.0.0-deprecated","category":"App Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86d97760-d216-4d81-a3ad-163087b2b6c3","type":"Microsoft.Authorization/policyDefinitions","name":"86d97760-d216-4d81-a3ad-163087b2b6c3"}' - headers: - cache-control: - - no-cache - content-length: - - '1155' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''86efb160-8de7-451d-bc08-5d475b0aadae'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Data Box jobs should use a customer-managed - key to encrypt the device unlock password","policyType":"BuiltIn","mode":"Indexed","description":"Use - a customer-managed key to control the encryption of the device unlock password - for Azure Data Box. Customer-managed keys also help manage access to the device - unlock password by the Data Box service in order to prepare the device and - copy data in an automated manner. The data on the device itself is already - encrypted at rest with Advanced Encryption Standard 256-bit encryption, and - the device unlock password is encrypted by default with a Microsoft managed - key.","metadata":{"version":"1.0.0","category":"Data Box"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"supportedSKUs":{"type":"Array","metadata":{"displayName":"Supported - SKUs","description":"The list of SKUs that support customer-managed key encryption - key"},"allowedValues":["DataBox","DataBoxHeavy"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataBox/jobs"},{"field":"Microsoft.Databox/jobs/sku.name","in":"[parameters(''supportedSKUs'')]"},{"field":"Microsoft.DataBox/jobs/details.keyEncryptionKey.kekType","notEquals":"CustomerManaged"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/86efb160-8de7-451d-bc08-5d475b0aadae","type":"Microsoft.Authorization/policyDefinitions","name":"86efb160-8de7-451d-bc08-5d475b0aadae"}' - headers: - cache-control: - - no-cache - content-length: - - '1575' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''871b6d14-10aa-478d-b590-94f262ecfa99'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require a tag on resources","policyType":"BuiltIn","mode":"Indexed","description":"Enforces - existence of a tag. Does not apply to resource groups.","metadata":{"version":"1.0.1","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/871b6d14-10aa-478d-b590-94f262ecfa99","type":"Microsoft.Authorization/policyDefinitions","name":"871b6d14-10aa-478d-b590-94f262ecfa99"}' - headers: - cache-control: - - no-cache - content-length: - - '678' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''87845465-c458-45f3-af66-dcd62176f397'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Privilege Use''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Privilege Use'' for auditing nonsensitive and other privilege - use. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87845465-c458-45f3-af66-dcd62176f397","type":"Microsoft.Authorization/policyDefinitions","name":"87845465-c458-45f3-af66-dcd62176f397"}' - headers: - cache-control: - - no-cache - content-length: - - '3814' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8794ff4f-1a35-4e18-938f-0b22055067cd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Devices''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Devices'' for undocking without logging on, installing print drivers, - and formatting/ejecting media. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsDevices","version":"1.*","configurationParameter":{"DevicesAllowedToFormatAndEjectRemovableMedia":"Devices: - Allowed to format and eject removable media;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"DevicesAllowedToFormatAndEjectRemovableMedia":{"type":"String","metadata":{"displayName":"Devices: - Allowed to format and eject removable media","description":"Specifies who - is allowed to format and eject removable NTFS media. You can use this policy - setting to prevent unauthorized users from removing data on one computer to - access it on another computer on which they have local administrator privileges."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsDevices","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Devices: - Allowed to format and eject removable media;ExpectedValue'', ''='', parameters(''DevicesAllowedToFormatAndEjectRemovableMedia'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8794ff4f-1a35-4e18-938f-0b22055067cd","type":"Microsoft.Authorization/policyDefinitions","name":"8794ff4f-1a35-4e18-938f-0b22055067cd"}' - headers: - cache-control: - - no-cache - content-length: - - '4628' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''87b590fe-4a1d-4697-ae74-d4fe72ab786c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Administrative Templates - Control Panel''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - Control Panel''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesControlPanel","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87b590fe-4a1d-4697-ae74-d4fe72ab786c","type":"Microsoft.Authorization/policyDefinitions","name":"87b590fe-4a1d-4697-ae74-d4fe72ab786c"}' - headers: - cache-control: - - no-cache - content-length: - - '3278' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''87ba29ef-1ab3-4d82-b763-87fcd4f531f7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Stream Analytics jobs should use - customer-managed keys to encrypt data","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys when you want to securely store any metadata and private - data assets of your Stream Analytics jobs in your storage account. This gives - you total control over how your Stream Analytics data is encrypted.","metadata":{"version":"1.0.0","category":"Stream - Analytics"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"Microsoft.StreamAnalytics/streamingJobs/contentStoragePolicy","equals":"SystemAccount"},{"field":"type","equals":"Microsoft.StreamAnalytics/streamingJobs"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/87ba29ef-1ab3-4d82-b763-87fcd4f531f7","type":"Microsoft.Authorization/policyDefinitions","name":"87ba29ef-1ab3-4d82-b763-87fcd4f531f7"}' - headers: - cache-control: - - no-cache - content-length: - - '1062' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''884b209a-963b-4520-8006-d20cb3c213e0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Linux VMs that have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"[Deprecated]: - Application names","description":"A semicolon-separated list of the names - of the applications that should not be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"not_installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', concat(''packages: ['', replace(parameters(''ApplicationName''), '';'', - '',''), '']'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"not_installed_application_linux"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[ChefInSpec]NotInstalledApplicationLinuxResource1;AttributesYmlContent","value":"[concat(''packages: - ['', replace(parameters(''ApplicationName''), '';'', '',''), '']'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/884b209a-963b-4520-8006-d20cb3c213e0","type":"Microsoft.Authorization/policyDefinitions","name":"884b209a-963b-4520-8006-d20cb3c213e0"}' - headers: - cache-control: - - no-cache - content-length: - - '8036' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''88999f4c-376a-45c8-bcb3-4058f713cf39'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Java version'' is the latest, - if used as a part of the API app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java either due to security flaws or to include - additional functionality. Using the latest Python version for API apps is - recommended in order to take advantage of security fixes, if any, and/or new - functionalities of the latest version. Currently, this policy only applies - to Linux web apps.","metadata":{"version":"2.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88999f4c-376a-45c8-bcb3-4058f713cf39","type":"Microsoft.Authorization/policyDefinitions","name":"88999f4c-376a-45c8-bcb3-4058f713cf39"}' - headers: - cache-control: - - no-cache - content-length: - - '1567' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''88c0b9da-ce96-4b03-9635-f29a937e2900'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Network interfaces should disable IP - forwarding","policyType":"BuiltIn","mode":"Indexed","description":"This policy - denies the network interfaces which enabled IP forwarding. The setting of - IP forwarding disables Azure''s check of the source and destination for a - network interface. This should be reviewed by the network security team.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"field":"Microsoft.Network/networkInterfaces/enableIpForwarding","equals":"true"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/88c0b9da-ce96-4b03-9635-f29a937e2900","type":"Microsoft.Authorization/policyDefinitions","name":"88c0b9da-ce96-4b03-9635-f29a937e2900"}' - headers: - cache-control: - - no-cache - content-length: - - '834' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''89099bee-89e0-4b26-a5f4-165451757743'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL servers with auditing to storage - account destination should be configured with 90 days retention or higher","policyType":"BuiltIn","mode":"Indexed","description":"For - incident investigation purposes, we recommend setting the data retention for - your SQL Server'' auditing to storage account destination to at least 90 days. - Confirm that you are meeting the necessary retention rules for the regions - in which you are operating. This is sometimes required for compliance with - regulatory standards.","metadata":{"version":"3.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Sql/servers/auditingSettings/isAzureMonitorTargetEnabled","equals":true},{"field":"Microsoft.Sql/servers/auditingSettings/storageEndpoint","equals":""}]},{"field":"Microsoft.Sql/servers/auditingSettings/retentionDays","equals":0},{"field":"Microsoft.Sql/servers/auditingSettings/retentionDays","greaterOrEquals":90}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/89099bee-89e0-4b26-a5f4-165451757743","type":"Microsoft.Authorization/policyDefinitions","name":"89099bee-89e0-4b26-a5f4-165451757743"}' - headers: - cache-control: - - no-cache - content-length: - - '1584' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''898e9824-104c-4965-8e0e-5197588fa5d4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Modify - Configure Azure Event Grid domains - to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for Azure Event Grid resource so that it isn''t accessible - over the public internet. This will help protect them against data leakage - risks. You can limit exposure of the your resources by creating private endpoints - instead. Learn more at: https://aka.ms/privateendpoints.","metadata":{"category":"Event - Grid","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/domains"},{"field":"Microsoft.EventGrid/domains/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/1e241071-0855-49ea-94dc-649edcd759de"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2020-04-01-preview'')]","operation":"addOrReplace","field":"Microsoft.EventGrid/domains/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/898e9824-104c-4965-8e0e-5197588fa5d4","type":"Microsoft.Authorization/policyDefinitions","name":"898e9824-104c-4965-8e0e-5197588fa5d4"}' - headers: - cache-control: - - no-cache - content-length: - - '1461' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''89c8a434-18f0-402c-8147-630a8dea54e0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"App Configuration should use a SKU that - supports private link","policyType":"BuiltIn","mode":"Indexed","description":"When - using a supported SKU, Azure Private Link lets you connect your virtual network - to Azure services without a public IP address at the source or destination. - The private link platform handles the connectivity between the consumer and - services over the Azure backbone network. By mapping private endpoints to - your app configuration instances instead of the entire service, you''ll also - be protected against data leakage risks. Learn more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.0","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},{"field":"Microsoft.AppConfiguration/configurationStores/sku.name","equals":"Free"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/89c8a434-18f0-402c-8147-630a8dea54e0","type":"Microsoft.Authorization/policyDefinitions","name":"89c8a434-18f0-402c-8147-630a8dea54e0"}' - headers: - cache-control: - - no-cache - content-length: - - '1310' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8a39d1f1-5513-4628-b261-f469a5a3341b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - System settings''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - System settings''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsSystemsettings","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8a39d1f1-5513-4628-b261-f469a5a3341b","type":"Microsoft.Authorization/policyDefinitions","name":"8a39d1f1-5513-4628-b261-f469a5a3341b"}' - headers: - cache-control: - - no-cache - content-length: - - '3260' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8af8f826-edcb-4178-b35f-851ea6fea615'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Container Instance container group - should deploy into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Secure - communication between your containers with Azure Virtual Networks. When you - specify a virtual network, resources within the virtual network can securely - and privately communicate with each other.","metadata":{"version":"1.0.0","category":"Container - Instance"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerInstance/containerGroups"},{"field":"Microsoft.ContainerInstance/containerGroups/networkProfile.id","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8af8f826-edcb-4178-b35f-851ea6fea615","type":"Microsoft.Authorization/policyDefinitions","name":"8af8f826-edcb-4178-b35f-851ea6fea615"}' - headers: - cache-control: - - no-cache - content-length: - - '1046' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8b0323be-cc25-4b61-935d-002c3798c6ea'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Data Factory should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to Azure Data Factory, data leakage - risks are reduced. Learn more about private links at: https://docs.microsoft.com/azure/data-factory/data-factory-private-link.","metadata":{"version":"1.0.0","category":"Data - Factory"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataFactory/factories"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DataFactory/factories/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DataFactory/factories/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0323be-cc25-4b61-935d-002c3798c6ea","type":"Microsoft.Authorization/policyDefinitions","name":"8b0323be-cc25-4b61-935d-002c3798c6ea"}' - headers: - cache-control: - - no-cache - content-length: - - '1369' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8b0de57a-f511-4d45-a277-17cb79cb163b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with a pending reboot. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPendingReboot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8b0de57a-f511-4d45-a277-17cb79cb163b","type":"Microsoft.Authorization/policyDefinitions","name":"8b0de57a-f511-4d45-a277-17cb79cb163b"}' - headers: - cache-control: - - no-cache - content-length: - - '3135' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8bbd627e-4d25-4906-9a6e-3789780af3ec'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:44:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Windows Firewall Properties''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Windows Firewall Properties''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsFirewallProperties","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8bbd627e-4d25-4906-9a6e-3789780af3ec","type":"Microsoft.Authorization/policyDefinitions","name":"8bbd627e-4d25-4906-9a6e-3789780af3ec"}' - headers: - cache-control: - - no-cache - content-length: - - '3242' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:44:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8c122334-9d20-4eb8-89ea-ac9a705b74ae'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''HTTP Version'' is the latest, - if used to run the Web app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","Equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8c122334-9d20-4eb8-89ea-ac9a705b74ae","type":"Microsoft.Authorization/policyDefinitions","name":"8c122334-9d20-4eb8-89ea-ac9a705b74ae"}' - headers: - cache-control: - - no-cache - content-length: - - '1252' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Latest TLS version should be used in - your API App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e","type":"Microsoft.Authorization/policyDefinitions","name":"8cb6aa8b-9e41-4f4e-aa25-089a7ac2581e"}' - headers: - cache-control: - - no-cache - content-length: - - '914' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8ce3da23-7156-49e4-b145-24f95f9dcb46'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require a tag and its value on resource - groups","policyType":"BuiltIn","mode":"All","description":"Enforces a required - tag and its value on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ce3da23-7156-49e4-b145-24f95f9dcb46","type":"Microsoft.Authorization/policyDefinitions","name":"8ce3da23-7156-49e4-b145-24f95f9dcb46"}' - headers: - cache-control: - - no-cache - content-length: - - '922' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8dfab9c4-fe7b-49ad-85e4-1e9be085358f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Arc enabled Kubernetes - clusters should have Azure Defender''s extension installed","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Defender''s extension for Azure Arc provides threat protection for your Arc - enabled Kubernetes clusters. The extension collects data from all control - plane (master) nodes in the cluster and sends it to the Azure Defender for - Kubernetes backend in the cloud for further analysis. Learn more in https://docs.microsoft.com/azure/security-center/defender-for-kubernetes-azure-arc.","metadata":{"version":"1.0.0-preview","category":"Kubernetes","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kubernetes/connectedClusters"},{"field":"Microsoft.Kubernetes/connectedClusters/distribution","in":["generic","openshift"]},{"field":"Microsoft.Kubernetes/connectedClusters/connectivityStatus","equals":"connected"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/extensions/extensionType","equals":"microsoft.azuredefender.kubernetes"},{"field":"Microsoft.KubernetesConfiguration/extensions/installState","equals":"Installed"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8dfab9c4-fe7b-49ad-85e4-1e9be085358f","type":"Microsoft.Authorization/policyDefinitions","name":"8dfab9c4-fe7b-49ad-85e4-1e9be085358f"}' - headers: - cache-control: - - no-cache - content-length: - - '1672' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8e170edb-e0f5-497a-bb36-48b3280cec6a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Object Access''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Object Access''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditDetailedFileShare":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Detailed File Share","description":"If this policy setting is enabled, - access to all shared files and folders on the system is audited. Auditing - for Success can lead to very high volumes of events."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"AuditFileShare":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit File Share","description":"Specifies whether to audit events related - to file shares: creation, deletion, modification, and access attempts. Also, - it shows failed SMB SPN checks. Event volumes can be high on DCs and File - Servers."},"allowedValues":["No Auditing","Success","Failure","Success and - Failure"]},"AuditFileSystem":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit File System","description":"Specifies whether audit events are generated - when users attempt to access file system objects. Audit events are generated - only for objects that have configured system access control lists (SACLs)."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesObjectAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Detailed File Share;ExpectedValue'', ''='', parameters(''AuditDetailedFileShare''), - '','', ''Audit File Share;ExpectedValue'', ''='', parameters(''AuditFileShare''), - '','', ''Audit File System;ExpectedValue'', ''='', parameters(''AuditFileSystem'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesObjectAccess"},"AuditDetailedFileShare":{"value":"[parameters(''AuditDetailedFileShare'')]"},"AuditFileShare":{"value":"[parameters(''AuditFileShare'')]"},"AuditFileSystem":{"value":"[parameters(''AuditFileSystem'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditDetailedFileShare":{"type":"string"},"AuditFileShare":{"type":"string"},"AuditFileSystem":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Detailed File Share;ExpectedValue","value":"[parameters(''AuditDetailedFileShare'')]"},{"name":"Audit - File Share;ExpectedValue","value":"[parameters(''AuditFileShare'')]"},{"name":"Audit - File System;ExpectedValue","value":"[parameters(''AuditFileSystem'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Detailed File Share;ExpectedValue","value":"[parameters(''AuditDetailedFileShare'')]"},{"name":"Audit - File Share;ExpectedValue","value":"[parameters(''AuditFileShare'')]"},{"name":"Audit - File System;ExpectedValue","value":"[parameters(''AuditFileSystem'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e170edb-e0f5-497a-bb36-48b3280cec6a","type":"Microsoft.Authorization/policyDefinitions","name":"8e170edb-e0f5-497a-bb36-48b3280cec6a"}' - headers: - cache-control: - - no-cache - content-length: - - '8205' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8e7da0a5-0a0e-4bbc-bfc0-7773c018b616'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Enable Security Center''s auto provisioning - of the Log Analytics agent on your subscriptions with custom workspace.","policyType":"BuiltIn","mode":"All","description":"Allow - Security Center to auto provision the Log Analytics agent on your subscriptions - to monitor and collect security data using a custom workspace.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Auto provision the Log Analytics agent - on your subscriptions to monitor and collect security data using a custom - workspace.","strongType":"omsWorkspace"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/autoProvisioningSettings","deploymentScope":"Subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"field":"Microsoft.Security/autoProvisioningSettings/autoProvision","equals":"On"},"deployment":{"location":"westus","properties":{"mode":"incremental","parameters":{"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}},"template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"logAnalytics":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Security/autoProvisioningSettings","name":"default","apiVersion":"2017-08-01-preview","properties":{"autoProvision":"On"}},{"type":"Microsoft.Security/workspaceSettings","apiVersion":"2017-08-01-preview","name":"default","properties":{"workspaceId":"[parameters(''logAnalytics'')]","scope":"[subscription().id]"}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e7da0a5-0a0e-4bbc-bfc0-7773c018b616","type":"Microsoft.Authorization/policyDefinitions","name":"8e7da0a5-0a0e-4bbc-bfc0-7773c018b616"}' - headers: - cache-control: - - no-cache - content-length: - - '2166' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8e8ca470-d980-4831-99e6-dc70d9f6af87'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure SQL Server to enable - private endpoint connections","policyType":"BuiltIn","mode":"Indexed","description":"A - private endpoint connection enables private connectivity to your Azure SQL - Database via a private IP address inside a virtual network. This configuration - improves your security posture and supports Azure networking tools and scenarios.","metadata":{"category":"SQL","version":"1.0.0"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Subnet - to use for Private Endpoints","description":"The name of the subnet within - the virtual network that you would like to use for your Private Endpoint Connection - deployment","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"count":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*]","where":{"field":"Microsoft.Sql/servers/privateEndpointConnections[*].id","exists":"false"}},"equals":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/privateEndpointConnections","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/6d8ee4ec-f05a-4a1d-8b00-a9b17e38b437"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"String"},"serviceId":{"type":"String"},"privateEndpointSubnetId":{"type":"String"},"subnetlocation":{"type":"String"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","name":"[variables(''privateEndpointName'')]","location":"[parameters(''subnetlocation'')]","properties":{"privateLinkServiceConnections":[{"name":"[parameters(''name'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["sqlServer"],"privateLinkServiceConnectionState":{"status":"Approved","description":"Auto-approved","actionsRequired":"None"}}}],"manualPrivateLinkServiceConnections":[],"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"customDnsConfigs":[]}}]},"parameters":{"name":{"value":"[parameters(''name'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"serviceId":{"value":"[parameters(''serviceId'')]"},"subnetlocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8e8ca470-d980-4831-99e6-dc70d9f6af87","type":"Microsoft.Authorization/policyDefinitions","name":"8e8ca470-d980-4831-99e6-dc70d9f6af87"}' - headers: - cache-control: - - no-cache - content-length: - - '3779' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''8ff0b18b-262e-4512-857a-48ad0aeb9a78'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not store passwords using reversible encryption","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that do not store passwords using reversible encryption. It also creates a - system-assigned managed identity and deploys the VM extension for Guest Configuration. - This policy should only be used along with its corresponding audit policy - in an initiative. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"2.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"StorePasswordsUsingReversibleEncryption"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/8ff0b18b-262e-4512-857a-48ad0aeb9a78","type":"Microsoft.Authorization/policyDefinitions","name":"8ff0b18b-262e-4512-857a-48ad0aeb9a78"}' - headers: - cache-control: - - no-cache - content-length: - - '5731' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''909c958d-1b99-4c74-b88f-46a5c5bc34f9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Windows Firewall Properties''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Windows Firewall Properties''. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"WindowsFirewallDomainUseProfileSettings":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Domain): Use profile settings","description":"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Domain profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile."}},"WindowsFirewallDomainBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Domain): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Domain profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Domain): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Domain profile."}},"WindowsFirewallDomainApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Domain): Apply local firewall rules","description":"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Domain - profile."}},"WindowsFirewallDomainDisplayNotifications":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Domain): Display notifications","description":"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Domain profile."}},"WindowsFirewallPrivateUseProfileSettings":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Private): Use profile settings","description":"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Private profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile."}},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Private): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Private profile that do not - match an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Private): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Private profile."}},"WindowsFirewallPrivateApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Private): Apply local firewall rules","description":"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Private - profile."}},"WindowsFirewallPrivateDisplayNotifications":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Private): Display notifications","description":"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Private profile."}},"WindowsFirewallPublicUseProfileSettings":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Public): Use profile settings","description":"Specifies - whether Windows Firewall with Advanced Security uses the settings for the - Public profile to filter network traffic. If you select Off, Windows Firewall - with Advanced Security will not use any of the firewall rules or connection - security rules for this profile."}},"WindowsFirewallPublicBehaviorForOutboundConnections":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Public): Behavior for outbound connections","description":"Specifies - the behavior for outbound connections for the Public profile that do not match - an outbound firewall rule. The default value of 0 means to allow connections, - and a value of 1 means to block connections."}},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Public): Apply local connection security rules","description":"Specifies - whether local administrators are allowed to create connection security rules - that apply together with connection security rules configured by Group Policy - for the Public profile."}},"WindowsFirewallPublicApplyLocalFirewallRules":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Public): Apply local firewall rules","description":"Specifies - whether local administrators are allowed to create local firewall rules that - apply together with firewall rules configured by Group Policy for the Public - profile."}},"WindowsFirewallPublicDisplayNotifications":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall (Public): Display notifications","description":"Specifies - whether Windows Firewall with Advanced Security displays notifications to - the user when a program is blocked from receiving inbound connections, for - the Public profile."}},"WindowsFirewallDomainAllowUnicastResponse":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall: Domain: Allow unicast response","description":"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Domain profile."}},"WindowsFirewallPrivateAllowUnicastResponse":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall: Private: Allow unicast response","description":"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Private profile."}},"WindowsFirewallPublicAllowUnicastResponse":{"type":"String","metadata":{"displayName":"[Deprecated]: - Windows Firewall: Public: Allow unicast response","description":"Specifies - whether Windows Firewall with Advanced Security permits the local computer - to receive unicast responses to its outgoing multicast or broadcast messages; - for the Public profile."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsFirewallProperties","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Windows - Firewall: Domain: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainUseProfileSettings''), - '','', ''Windows Firewall: Domain: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallDomainBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainApplyLocalFirewallRules''), '','', - ''Windows Firewall: Domain: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallDomainDisplayNotifications''), '','', ''Windows - Firewall: Private: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateUseProfileSettings''), - '','', ''Windows Firewall: Private: Outbound connections;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections''), - '','', ''Windows Firewall: Private: Settings: Apply local connection security - rules;ExpectedValue'', ''='', parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Private: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateApplyLocalFirewallRules''), '','', - ''Windows Firewall: Private: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateDisplayNotifications''), '','', - ''Windows Firewall: Public: Firewall state;ExpectedValue'', ''='', parameters(''WindowsFirewallPublicUseProfileSettings''), - '','', ''Windows Firewall: Public: Outbound connections;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicBehaviorForOutboundConnections''), '','', - ''Windows Firewall: Public: Settings: Apply local connection security rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules''), - '','', ''Windows Firewall: Public: Settings: Apply local firewall rules;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicApplyLocalFirewallRules''), '','', - ''Windows Firewall: Public: Settings: Display a notification;ExpectedValue'', - ''='', parameters(''WindowsFirewallPublicDisplayNotifications''), '','', ''Windows - Firewall: Domain: Allow unicast response;ExpectedValue'', ''='', parameters(''WindowsFirewallDomainAllowUnicastResponse''), - '','', ''Windows Firewall: Private: Allow unicast response;ExpectedValue'', - ''='', parameters(''WindowsFirewallPrivateAllowUnicastResponse''), '','', - ''Windows Firewall: Public: Allow unicast response;ExpectedValue'', ''='', - parameters(''WindowsFirewallPublicAllowUnicastResponse'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_WindowsFirewallProperties"},"WindowsFirewallDomainUseProfileSettings":{"value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},"WindowsFirewallDomainBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallDomainApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},"WindowsFirewallDomainDisplayNotifications":{"value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},"WindowsFirewallPrivateUseProfileSettings":{"value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallPrivateApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},"WindowsFirewallPrivateDisplayNotifications":{"value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},"WindowsFirewallPublicUseProfileSettings":{"value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},"WindowsFirewallPublicBehaviorForOutboundConnections":{"value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},"WindowsFirewallPublicApplyLocalFirewallRules":{"value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},"WindowsFirewallPublicDisplayNotifications":{"value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},"WindowsFirewallDomainAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},"WindowsFirewallPrivateAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},"WindowsFirewallPublicAllowUnicastResponse":{"value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"WindowsFirewallDomainUseProfileSettings":{"type":"string"},"WindowsFirewallDomainBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallDomainApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallDomainApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallDomainDisplayNotifications":{"type":"string"},"WindowsFirewallPrivateUseProfileSettings":{"type":"string"},"WindowsFirewallPrivateBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallPrivateApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallPrivateApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallPrivateDisplayNotifications":{"type":"string"},"WindowsFirewallPublicUseProfileSettings":{"type":"string"},"WindowsFirewallPublicBehaviorForOutboundConnections":{"type":"string"},"WindowsFirewallPublicApplyLocalConnectionSecurityRules":{"type":"string"},"WindowsFirewallPublicApplyLocalFirewallRules":{"type":"string"},"WindowsFirewallPublicDisplayNotifications":{"type":"string"},"WindowsFirewallDomainAllowUnicastResponse":{"type":"string"},"WindowsFirewallPrivateAllowUnicastResponse":{"type":"string"},"WindowsFirewallPublicAllowUnicastResponse":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Windows - Firewall: Domain: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},{"name":"Windows - Firewall: Domain: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},{"name":"Windows - Firewall: Private: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},{"name":"Windows - Firewall: Private: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},{"name":"Windows - Firewall: Public: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},{"name":"Windows - Firewall: Public: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},{"name":"Windows - Firewall: Domain: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Private: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Public: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Windows - Firewall: Domain: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallDomainUseProfileSettings'')]"},{"name":"Windows - Firewall: Domain: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallDomainBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallDomainApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Domain: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallDomainDisplayNotifications'')]"},{"name":"Windows - Firewall: Private: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateUseProfileSettings'')]"},{"name":"Windows - Firewall: Private: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Private: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Private: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateDisplayNotifications'')]"},{"name":"Windows - Firewall: Public: Firewall state;ExpectedValue","value":"[parameters(''WindowsFirewallPublicUseProfileSettings'')]"},{"name":"Windows - Firewall: Public: Outbound connections;ExpectedValue","value":"[parameters(''WindowsFirewallPublicBehaviorForOutboundConnections'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local connection security rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalConnectionSecurityRules'')]"},{"name":"Windows - Firewall: Public: Settings: Apply local firewall rules;ExpectedValue","value":"[parameters(''WindowsFirewallPublicApplyLocalFirewallRules'')]"},{"name":"Windows - Firewall: Public: Settings: Display a notification;ExpectedValue","value":"[parameters(''WindowsFirewallPublicDisplayNotifications'')]"},{"name":"Windows - Firewall: Domain: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallDomainAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Private: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPrivateAllowUnicastResponse'')]"},{"name":"Windows - Firewall: Public: Allow unicast response;ExpectedValue","value":"[parameters(''WindowsFirewallPublicAllowUnicastResponse'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/909c958d-1b99-4c74-b88f-46a5c5bc34f9","type":"Microsoft.Authorization/policyDefinitions","name":"909c958d-1b99-4c74-b88f-46a5c5bc34f9"}' - headers: - cache-control: - - no-cache - content-length: - - '24339' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''90ba2ee7-4ca8-4673-84d1-c851c50d3baf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have the specified Windows PowerShell modules - installed","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - that do not have the specified Windows PowerShell modules installed. It also - creates a system-assigned managed identity and deploys the VM extension for - Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"Modules":{"type":"String","metadata":{"displayName":"[Deprecated]: - PowerShell Modules","description":"A semicolon-separated list of the names - of the PowerShell modules that should be installed. You may also specify a - specific version of a module that should be installed by including a comma - after the module name, followed by the desired version. e.g. PSDscResources; - SqlServerDsc, 12.0.0.0; ComputerManagementDsc, 6.1.0.0"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellModules","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellModules]PowerShellModules1;Modules'', - ''='', parameters(''Modules'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPowerShellModules"},"Modules":{"value":"[parameters(''Modules'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"Modules":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellModules]PowerShellModules1;Modules","value":"[parameters(''Modules'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellModules]PowerShellModules1;Modules","value":"[parameters(''Modules'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/90ba2ee7-4ca8-4673-84d1-c851c50d3baf","type":"Microsoft.Authorization/policyDefinitions","name":"90ba2ee7-4ca8-4673-84d1-c851c50d3baf"}' - headers: - cache-control: - - no-cache - content-length: - - '6689' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''91678b7c-d721-4fc5-b179-3cdf74e96b1c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Event Hub namespaces with private - endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Event - Hub namespaces, you can reduce data leakage risks. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event - Hub"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"Specifies the subnet to use to configure - private endpoint","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/f526a384-b230-433a-b45c-95f59c4a2dec"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["namespace"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/91678b7c-d721-4fc5-b179-3cdf74e96b1c","type":"Microsoft.Authorization/policyDefinitions","name":"91678b7c-d721-4fc5-b179-3cdf74e96b1c"}' - headers: - cache-control: - - no-cache - content-length: - - '3585' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9178b430-2295-406e-bb28-f6a7a2a2f897'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Windows Components''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Windows Components''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_WindowsComponents","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9178b430-2295-406e-bb28-f6a7a2a2f897","type":"Microsoft.Authorization/policyDefinitions","name":"9178b430-2295-406e-bb28-f6a7a2a2f897"}' - headers: - cache-control: - - no-cache - content-length: - - '3216' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''91a78b24-f231-4a8a-8da9-02c35b2b6510'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in App Services should - be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs on the app. This enables you to recreate activity trails - for investigation purposes if a security incident occurs or your network is - compromised.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","notContains":"functionapp"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/91a78b24-f231-4a8a-8da9-02c35b2b6510","type":"Microsoft.Authorization/policyDefinitions","name":"91a78b24-f231-4a8a-8da9-02c35b2b6510"}' - headers: - cache-control: - - no-cache - content-length: - - '1982' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Dependency agent to be enabled - on Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Dependency agent for Windows Azure Arc machines if the Azure Arc machines - image is in the list defined and the agent is not installed.","metadata":{"version":"1.2.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"DependencyAgentWindows"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"DaExtensionName":"DependencyAgentWindows","DaExtensionType":"DependencyAgentWindows"},"resources":[{"type":"Microsoft.HybridCompute/machines/extensions","apiVersion":"2020-03-11-preview","name":"[concat(parameters(''vmName''), - ''/'', variables(''DaExtensionName''))]","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Monitoring.DependencyAgent","type":"[variables(''DaExtensionType'')]","autoUpgradeMinorVersion":true,"settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - DA extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4","type":"Microsoft.Authorization/policyDefinitions","name":"91cb9edd-cd92-4d2f-b2f2-bdd8d065a3d4"}' - headers: - cache-control: - - no-cache - content-length: - - '2398' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9297c21d-2ed6-4474-b48f-163f75654ce3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"MFA should be enabled accounts with write - permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - write privileges to prevent a breach of accounts or resources.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"57e98606-6b1e-6193-0e3d-fe621387c16b","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9297c21d-2ed6-4474-b48f-163f75654ce3","type":"Microsoft.Authorization/policyDefinitions","name":"9297c21d-2ed6-4474-b48f-163f75654ce3"}' - headers: - cache-control: - - no-cache - content-length: - - '1083' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9328f27e-611e-44a7-a244-39109d7d35ab'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that contain certificates expiring within the specified number - of days","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines that contain certificates expiring within the specified number - of days. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"CertificateExpiration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9328f27e-611e-44a7-a244-39109d7d35ab","type":"Microsoft.Authorization/policyDefinitions","name":"9328f27e-611e-44a7-a244-39109d7d35ab"}' - headers: - cache-control: - - no-cache - content-length: - - '3234' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''934345e1-4dfb-4c70-90d7-41990dc9608b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not contain - the specified certificates in Trusted Root","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the machine Trusted - Root certificate store (Cert:\\LocalMachine\\Root) does not contain one or - more of the certificates listed by the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsCertificateInTrustedRoot","version":"1.*","configurationParameter":{"CertificateThumbprints":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"CertificateThumbprints":{"type":"String","metadata":{"displayName":"Certificate - thumbprints","description":"A semicolon-separated list of certificate thumbprints - that should exist under the Trusted Root certificate store (Cert:\\LocalMachine\\Root). - e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsCertificateInTrustedRoot","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprints'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b","type":"Microsoft.Authorization/policyDefinitions","name":"934345e1-4dfb-4c70-90d7-41990dc9608b"}' - headers: - cache-control: - - no-cache - content-length: - - '4230' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''93507a81-10a4-4af0-9ee2-34cf25a96e98'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs if the Administrators group doesn''t contain all the specified - members","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain all of the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"MembersToInclude":{"type":"String","metadata":{"displayName":"[Deprecated]: - Members to include","description":"A semicolon-separated list of members that - should be included in the Administrators local group. Ex: Administrator; myUser1; - myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;MembersToInclude'', - ''='', parameters(''MembersToInclude'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembersToInclude"},"MembersToInclude":{"value":"[parameters(''MembersToInclude'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MembersToInclude":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToInclude","value":"[parameters(''MembersToInclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;MembersToInclude","value":"[parameters(''MembersToInclude'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/93507a81-10a4-4af0-9ee2-34cf25a96e98","type":"Microsoft.Authorization/policyDefinitions","name":"93507a81-10a4-4af0-9ee2-34cf25a96e98"}' - headers: - cache-control: - - no-cache - content-length: - - '6608' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''94c19f19-8192-48cd-a11b-e37099d3e36b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - only in European data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: North Europe, West Europe","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["northeurope","westeurope"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94c19f19-8192-48cd-a11b-e37099d3e36b","type":"Microsoft.Authorization/policyDefinitions","name":"94c19f19-8192-48cd-a11b-e37099d3e36b"}' - headers: - cache-control: - - no-cache - content-length: - - '639' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''94d9aca8-3757-46df-aa51-f218c5f11954'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''System Audit Policies - Account Management''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''System - Audit Policies - Account Management'' for auditing application, security, - and user group management, and other management events. This policy requires - that the Guest Configuration prerequisites have been deployed to the policy - assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SystemAuditPoliciesAccountManagement","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountManagement","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94d9aca8-3757-46df-aa51-f218c5f11954","type":"Microsoft.Authorization/policyDefinitions","name":"94d9aca8-3757-46df-aa51-f218c5f11954"}' - headers: - cache-control: - - no-cache - content-length: - - '3875' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual networks should be protected - by Azure DDoS Protection Standard","policyType":"BuiltIn","mode":"Indexed","description":"Protect - your virtual networks against volumetric and protocol attacks with Azure DDoS - Protection Standard. For more information, visit https://aka.ms/ddosprotectiondocs.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Audit","Disabled"]},"ddosPlan":{"type":"String","metadata":{"displayName":"DDoS - Protection Plan","description":"DDoS Protection Plan resource to be associated - to the virtual networks","strongType":"Microsoft.Network/ddosProtectionPlans"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks"},{"anyOf":[{"field":"Microsoft.Network/virtualNetworks/enableDdosProtection","notEquals":true},{"field":"Microsoft.Network/virtualNetworks/ddosProtectionPlan","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Network/virtualNetworks/enableDdosProtection","value":true},{"operation":"addOrReplace","field":"Microsoft.Network/virtualNetworks/ddosProtectionPlan.id","value":"[parameters(''ddosPlan'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d","type":"Microsoft.Authorization/policyDefinitions","name":"94de2ad3-e0c1-4caf-ad78-5d47bbc83d3d"}' - headers: - cache-control: - - no-cache - content-length: - - '1691' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''951af2fa-529b-416e-ab6e-066fd85ac459'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - for Azure Key Vault to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure Key Vault to stream resource logs to a Log - Analytics workspace when any Key Vault which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Key Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"diagnosticsSettingNameToUse":{"type":"String","metadata":{"displayName":"Setting - name","description":"Name of the diagnostic settings."}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Specify the Log Analytics workspace the - Key Vault should be connected to.","strongType":"omsWorkspace","assignPermissions":true}},"AuditEventEnabled":{"type":"String","metadata":{"displayName":"AuditEvent - - Enabled","description":"Whether to stream AuditEvent logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"AllMetricsEnabled":{"type":"String","metadata":{"displayName":"AllMetrics - - Enabled","description":"Whether to stream AllMetrics logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"anyof":[{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"True"}]},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","equals":"[parameters(''logAnalytics'')]"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"diagnosticsSettingNameToUse":{"type":"string"},"resourceName":{"type":"string"},"logAnalytics":{"type":"string"},"location":{"type":"string"},"AuditEventEnabled":{"type":"string"},"AllMetricsEnabled":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.KeyVault/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''AllMetricsEnabled'')]","retentionPolicy":{"days":0,"enabled":false},"timeGrain":null}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''AuditEventEnabled'')]"}]}}],"outputs":{}},"parameters":{"diagnosticsSettingNameToUse":{"value":"[parameters(''diagnosticsSettingNameToUse'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"AuditEventEnabled":{"value":"[parameters(''AllMetricsEnabled'')]"},"AllMetricsEnabled":{"value":"[parameters(''AuditEventEnabled'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/951af2fa-529b-416e-ab6e-066fd85ac459","type":"Microsoft.Authorization/policyDefinitions","name":"951af2fa-529b-416e-ab6e-066fd85ac459"}' - headers: - cache-control: - - no-cache - content-length: - - '3680' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''955a914f-bf86-4f0e-acd5-e0766b0efcb6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Automation accounts should disable public - network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that the resource isn''t - exposed on the public internet. You can limit exposure of your Automation - account resources by creating private endpoints instead. Learn more at: https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Automation/automationAccounts"},{"field":"Microsoft.Automation/automationAccounts/publicNetworkAccess","notEquals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/955a914f-bf86-4f0e-acd5-e0766b0efcb6","type":"Microsoft.Authorization/policyDefinitions","name":"955a914f-bf86-4f0e-acd5-e0766b0efcb6"}' - headers: - cache-control: - - no-cache - content-length: - - '1119' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''95bccee9-a7f8-4bec-9ee9-62c3473701fc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authentication should be enabled on your - web app","policyType":"BuiltIn","mode":"Indexed","description":"Azure App - Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the web app, or authenticate those that have tokens before they - reach the web app","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/95bccee9-a7f8-4bec-9ee9-62c3473701fc","type":"Microsoft.Authorization/policyDefinitions","name":"95bccee9-a7f8-4bec-9ee9-62c3473701fc"}' - headers: - cache-control: - - no-cache - content-length: - - '1065' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''96670d01-0a4d-4649-9c89-2d3abc0a5025'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require a tag on resource groups","policyType":"BuiltIn","mode":"All","description":"Enforces - existence of a tag on resource groups.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/96670d01-0a4d-4649-9c89-2d3abc0a5025","type":"Microsoft.Authorization/policyDefinitions","name":"96670d01-0a4d-4649-9c89-2d3abc0a5025"}' - headers: - cache-control: - - no-cache - content-length: - - '753' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9677b740-f641-4f3c-b9c5-466005c85278'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Advanced data security - settings for SQL server should contain an email address to receive security - alerts","policyType":"BuiltIn","mode":"Indexed","description":"Ensure that - an email address is provided for the ''Send alerts to'' field in the Advanced - Data Security server settings. This email address receives alert notifications - when anomalous activities are detected on SQL servers.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/emailAddresses[*]","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9677b740-f641-4f3c-b9c5-466005c85278","type":"Microsoft.Authorization/policyDefinitions","name":"9677b740-f641-4f3c-b9c5-466005c85278"}' - headers: - cache-control: - - no-cache - content-length: - - '1208' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"App Configuration should use a customer-managed - key","policyType":"BuiltIn","mode":"Indexed","description":"Customer-managed - keys provide enhanced data protection by allowing you to manage your encryption - keys. This is often required to meet compliance requirements.","metadata":{"version":"1.1.0","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},{"field":"Microsoft.AppConfiguration/configurationStores/encryption.keyVaultProperties.keyIdentifier","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1","type":"Microsoft.Authorization/policyDefinitions","name":"967a4b4b-2da9-43c1-b7d0-f98d0d74d0b1"}' - headers: - cache-control: - - no-cache - content-length: - - '1009' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''968410dc-5ca0-4518-8a5b-7b55f0530ea9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Administrative Templates - System''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Administrative - Templates - System'' for settings that control the administrative experience - and Remote Assistance. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_AdministrativeTemplatesSystem","version":"1.*","configurationParameter":{"AlwaysUseClassicLogon":"Always - use classic logon;ExpectedValue","BootStartDriverInitializationPolicy":"Boot-Start - Driver Initialization Policy;ExpectedValue","EnableWindowsNTPClient":"Enable - Windows NTP Client;ExpectedValue","TurnOnConveniencePINSignin":"Turn on convenience - PIN sign-in;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AlwaysUseClassicLogon":{"type":"String","metadata":{"displayName":"Always - use classic logon","description":"Specifies whether to force the user to log - on to the computer using the classic logon screen. This setting only works - when the computer is not on a domain."}},"BootStartDriverInitializationPolicy":{"type":"String","metadata":{"displayName":"Boot-Start - Driver Initialization Policy","description":"Specifies which boot-start drivers - are initialized based on a classification determined by an Early Launch Antimalware - boot-start driver."}},"EnableWindowsNTPClient":{"type":"String","metadata":{"displayName":"Enable - Windows NTP Client","description":"Specifies whether the Windows NTP Client - is enabled. Enabling the Windows NTP Client allows your computer to synchronize - its computer clock with other NTP servers."}},"TurnOnConveniencePINSignin":{"type":"String","metadata":{"displayName":"Turn - on convenience PIN sign-in","description":"Specifies whether a domain user - can sign in using a convenience PIN."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesSystem","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Always - use classic logon;ExpectedValue'', ''='', parameters(''AlwaysUseClassicLogon''), - '','', ''Boot-Start Driver Initialization Policy;ExpectedValue'', ''='', parameters(''BootStartDriverInitializationPolicy''), - '','', ''Enable Windows NTP Client;ExpectedValue'', ''='', parameters(''EnableWindowsNTPClient''), - '','', ''Turn on convenience PIN sign-in;ExpectedValue'', ''='', parameters(''TurnOnConveniencePINSignin'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/968410dc-5ca0-4518-8a5b-7b55f0530ea9","type":"Microsoft.Authorization/policyDefinitions","name":"968410dc-5ca0-4518-8a5b-7b55f0530ea9"}' - headers: - cache-control: - - no-cache - content-length: - - '5697' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''96d9a89c-0d67-41fc-899d-2b9599f76a24'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add a tag to subscriptions","policyType":"BuiltIn","mode":"All","description":"Adds - the specified tag and value to subscriptions via a remediation task. If the - tag exists with a different value it will not be changed. See https://aka.ms/azurepolicyremediation - for more information on policy remediation.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4a9ae827-6dc8-4573-8ac7-8239d42aa03f"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/96d9a89c-0d67-41fc-899d-2b9599f76a24","type":"Microsoft.Authorization/policyDefinitions","name":"96d9a89c-0d67-41fc-899d-2b9599f76a24"}' - headers: - cache-control: - - no-cache - content-length: - - '1284' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''970f84d8-71b6-4091-9979-ace7e3fb6dbb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"HPC Cache accounts should use customer-managed - key for encryption","policyType":"BuiltIn","mode":"Indexed","description":"Manage - encryption at rest of Azure HPC Cache with customer-managed keys. By default, - customer data is encrypted with service-managed keys, but customer-managed - keys are commonly required to meet regulatory compliance standards. Customer-managed - keys enable the data to be encrypted with an Azure Key Vault key created and - owned by you. You have full control and responsibility for the key lifecycle, - including rotation and management.","metadata":{"version":"2.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.StorageCache/caches"},{"anyOf":[{"field":"identity.type","exists":false},{"field":"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.keyUrl","exists":false},{"field":"Microsoft.StorageCache/caches/encryptionSettings.keyEncryptionKey.sourceVault.Id","exists":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/970f84d8-71b6-4091-9979-ace7e3fb6dbb","type":"Microsoft.Authorization/policyDefinitions","name":"970f84d8-71b6-4091-9979-ace7e3fb6dbb"}' - headers: - cache-control: - - no-cache - content-length: - - '1413' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''97646672-5efa-4622-9b54-740270ad60bf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Administrative Templates - MSS (Legacy)''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - MSS (Legacy)''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.1-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97646672-5efa-4622-9b54-740270ad60bf","type":"Microsoft.Authorization/policyDefinitions","name":"97646672-5efa-4622-9b54-740270ad60bf"}' - headers: - cache-control: - - no-cache - content-length: - - '3272' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''97b595c8-fd10-400e-8543-28e2b9138b13'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Policy Change''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Policy Change''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditAuthenticationPolicyChange":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Authentication Policy Change","description":"Specifies whether audit - events are generated when changes are made to authentication policy. This - setting is useful for tracking changes in domain-level and forest-level trust - and privileges that are granted to user accounts or groups."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]},"AuditAuthorizationPolicyChange":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Authorization Policy Change","description":"Specifies whether audit - events are generated for assignment and removal of user rights in user right - policies, changes in security token object permission, resource attributes - changes and Central Access Policy changes for file system objects."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPolicyChange","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Authentication Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthenticationPolicyChange''), - '','', ''Audit Authorization Policy Change;ExpectedValue'', ''='', parameters(''AuditAuthorizationPolicyChange'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesPolicyChange"},"AuditAuthenticationPolicyChange":{"value":"[parameters(''AuditAuthenticationPolicyChange'')]"},"AuditAuthorizationPolicyChange":{"value":"[parameters(''AuditAuthorizationPolicyChange'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditAuthenticationPolicyChange":{"type":"string"},"AuditAuthorizationPolicyChange":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Authentication Policy Change;ExpectedValue","value":"[parameters(''AuditAuthenticationPolicyChange'')]"},{"name":"Audit - Authorization Policy Change;ExpectedValue","value":"[parameters(''AuditAuthorizationPolicyChange'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Authentication Policy Change;ExpectedValue","value":"[parameters(''AuditAuthenticationPolicyChange'')]"},{"name":"Audit - Authorization Policy Change;ExpectedValue","value":"[parameters(''AuditAuthorizationPolicyChange'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/97b595c8-fd10-400e-8543-28e2b9138b13","type":"Microsoft.Authorization/policyDefinitions","name":"97b595c8-fd10-400e-8543-28e2b9138b13"}' - headers: - cache-control: - - no-cache - content-length: - - '7871' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9830b652-8523-49cc-b1b3-e17dce1127ca'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Event Grid domains should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to your Event Grid domain instead of - the entire service, you''ll also be protected against data leakage risks. - Learn more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.2","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/domains"},{"count":{"field":"Microsoft.EventGrid/domains/privateEndpointConnections[*]","where":{"field":"Microsoft.EventGrid/domains/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9830b652-8523-49cc-b1b3-e17dce1127ca","type":"Microsoft.Authorization/policyDefinitions","name":"9830b652-8523-49cc-b1b3-e17dce1127ca"}' - headers: - cache-control: - - no-cache - content-length: - - '1360' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''983211ba-f348-4758-983b-21fa29294869'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - only in United States data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: Central US, East US, East - US2, North Central US, South Central US, West US","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["centralus","eastus","eastus2","northcentralus","southcentralus","westus"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/983211ba-f348-4758-983b-21fa29294869","type":"Microsoft.Authorization/policyDefinitions","name":"983211ba-f348-4758-983b-21fa29294869"}' - headers: - cache-control: - - no-cache - content-length: - - '740' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''985285b7-b97a-419c-8d48-c88cc934c8d8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Administrative Templates - Network''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - Network''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.1.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"EnableInsecureGuestLogons":{"type":"String","metadata":{"displayName":"[Deprecated]: - Enable insecure guest logons","description":"Specifies whether the SMB client - will allow insecure guest logons to an SMB server."}},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"type":"String","metadata":{"displayName":"[Deprecated]: - Allow simultaneous connections to the Internet or a Windows Domain","description":"Specify - whether to prevent computers from connecting to both a domain based network - and a non-domain based network at the same time. A value of 0 allows simultaneous - connections, and a value of 1 blocks them."}},"TurnOffMulticastNameResolution":{"type":"String","metadata":{"displayName":"[Deprecated]: - Turn off multicast name resolution","description":"Specifies whether LLMNR, - a secondary name resolution protocol that transmits using multicast over a - local subnet link on a single subnet, is enabled."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesNetwork","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enable - insecure guest logons;ExpectedValue'', ''='', parameters(''EnableInsecureGuestLogons''), - '','', ''Minimize the number of simultaneous connections to the Internet or - a Windows Domain;ExpectedValue'', ''='', parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain''), - '','', ''Turn off multicast name resolution;ExpectedValue'', ''='', parameters(''TurnOffMulticastNameResolution'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesNetwork"},"EnableInsecureGuestLogons":{"value":"[parameters(''EnableInsecureGuestLogons'')]"},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},"TurnOffMulticastNameResolution":{"value":"[parameters(''TurnOffMulticastNameResolution'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EnableInsecureGuestLogons":{"type":"string"},"AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain":{"type":"string"},"TurnOffMulticastNameResolution":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enable - insecure guest logons;ExpectedValue","value":"[parameters(''EnableInsecureGuestLogons'')]"},{"name":"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue","value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},{"name":"Turn - off multicast name resolution;ExpectedValue","value":"[parameters(''TurnOffMulticastNameResolution'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enable - insecure guest logons;ExpectedValue","value":"[parameters(''EnableInsecureGuestLogons'')]"},{"name":"Minimize - the number of simultaneous connections to the Internet or a Windows Domain;ExpectedValue","value":"[parameters(''AllowSimultaneousConnectionsToTheInternetOrAWindowsDomain'')]"},{"name":"Turn - off multicast name resolution;ExpectedValue","value":"[parameters(''TurnOffMulticastNameResolution'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/985285b7-b97a-419c-8d48-c88cc934c8d8","type":"Microsoft.Authorization/policyDefinitions","name":"985285b7-b97a-419c-8d48-c88cc934c8d8"}' - headers: - cache-control: - - no-cache - content-length: - - '8615' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Configure backup on virtual - machines without a given tag to a new recovery services vault with a default - policy","policyType":"BuiltIn","mode":"Indexed","description":"Enforce backup - for all virtual machines by deploying a recovery services vault in the same - location and resource group as the virtual machine. Doing this is useful when - different application teams in your organization are allocated separate resource - groups and need to manage their own backups and restores. You can optionally - exclude virtual machines containing a specified tag to control the scope of - assignment. See https://aka.ms/AzureVMAppCentricBackupExcludeTag.","metadata":{"version":"2.0.0-preview","preview":true,"category":"Backup"},"parameters":{"exclusionTagName":{"type":"String","metadata":{"displayName":"[Preview]: - Exclusion Tag Name","description":"Name of the tag to use for excluding VMs - from the scope of this policy. This should be used along with the Exclusion - Tag Value parameter. Learn more at https://aka.ms/AppCentricVMBackupPolicy."}},"exclusionTagValue":{"type":"Array","metadata":{"displayName":"[Preview]: - Exclusion Tag Values","description":"Value of the tag to use for excluding - VMs from the scope of this policy (in case of multiple values, use a comma-separated - list). This should be used along with the Exclusion Tag Name parameter. Learn - more at https://aka.ms/AppCentricVMBackupPolicy."}},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"field":"[concat(''tags['', - parameters(''exclusionTagName''), '']'')]","in":"[parameters(''exclusionTagValue'')]"}},{"field":"id","notContains":"/resourceGroups/databricks-rg-"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2019"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"20.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.RecoveryServices/backupprotecteditems","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c","/providers/Microsoft.Authorization/roleDefinitions/5e467623-bb1f-42f4-a55d-6e525e11384b"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string","metadata":{"description":"Name - of Azure Virtual Machines"}},"vmRgName":{"type":"string","metadata":{"description":"Resource - group containing the virtual machines."}},"location":{"type":"string","metadata":{"description":"Location - for VM and Backup vault"}}},"variables":{"backupFabric":"Azure","backupPolicy":"DefaultPolicy","v2VmType":"Microsoft.Compute/virtualMachines","v2VmContainer":"iaasvmcontainer;iaasvmcontainerv2;","v2Vm":"vm;iaasvmcontainerv2;","vaultName":"[take(concat(''RSVault-'', - parameters(''location''), ''-'', guid(resourceGroup().id)),50)]"},"resources":[{"name":"[variables(''vaultName'')]","type":"Microsoft.RecoveryServices/vaults","apiVersion":"2016-06-01","location":"[parameters(''location'')]","properties":{},"sku":{"name":"Standard"}},{"name":"[concat(variables(''vaultName''), - ''/'', variables(''backupFabric''), ''/'', variables(''v2VmContainer''), concat(parameters(''vmRgName''),'';'',parameters(''vmName'')), - ''/'', variables(''v2Vm''), concat(parameters(''vmRgName''),'';'',parameters(''vmName'')))]","apiVersion":"2016-12-01","location":"[parameters(''location'')]","type":"Microsoft.RecoveryServices/vaults/backupFabrics/protectionContainers/protectedItems","dependsOn":["[resourceId(''Microsoft.RecoveryServices/vaults/'', - variables(''vaultName''))]"],"properties":{"protectedItemType":"[variables(''v2VmType'')]","policyId":"[resourceId(''Microsoft.RecoveryServices/vaults/backupPolicies'', - variables(''vaultName''),variables(''backupPolicy''))]","sourceResourceId":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/'', parameters(''vmRgName''), - ''/providers/Microsoft.Compute/virtualMachines/'', parameters(''vmName''))]"}}],"outputs":{"status":{"type":"string","value":"[concat(''Backup - enabled successfully for VM:'', '' '', parameters(''vmName''), ''Backup Vault: - '', variables(''vaultName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"vmRgName":{"value":"[resourceGroup().name]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86","type":"Microsoft.Authorization/policyDefinitions","name":"98d0b9f8-fd90-49c9-88e2-d3baf3b0dd86"}' - headers: - cache-control: - - no-cache - content-length: - - '8869' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''991310cd-e9f3-47bc-b7b6-f57b557d07db'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''HTTP Version'' is the latest, - if used to run the API app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/991310cd-e9f3-47bc-b7b6-f57b557d07db","type":"Microsoft.Authorization/policyDefinitions","name":"991310cd-e9f3-47bc-b7b6-f57b557d07db"}' - headers: - cache-control: - - no-cache - content-length: - - '1252' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''99e9ccd8-3db9-4592-b0d1-14b1715a4d8a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Batch account should use customer-managed - keys to encrypt data","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to manage the encryption at rest of your Batch account''s - data. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/Batch-CMK.","metadata":{"version":"1.0.1","category":"Batch"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"field":"Microsoft.Batch/batchAccounts/encryption.keySource","notEquals":"Microsoft.KeyVault"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/99e9ccd8-3db9-4592-b0d1-14b1715a4d8a","type":"Microsoft.Authorization/policyDefinitions","name":"99e9ccd8-3db9-4592-b0d1-14b1715a4d8a"}' - headers: - cache-control: - - no-cache - content-length: - - '1292' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9a1b8c48-453a-4044-86c3-d8bfd823e4f5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"FTPS only should be required in your - API App","policyType":"BuiltIn","mode":"Indexed","description":"Enable FTPS - enforcement for enhanced security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/ftpsState","in":["FtpsOnly","Disabled"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a1b8c48-453a-4044-86c3-d8bfd823e4f5","type":"Microsoft.Authorization/policyDefinitions","name":"9a1b8c48-453a-4044-86c3-d8bfd823e4f5"}' - headers: - cache-control: - - no-cache - content-length: - - '931' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9a7c7a7d-49e5-4213-bea8-6a502b6272e0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Azure - SQL Database to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure SQL Database to stream to a regional Event - Hub on any Azure SQL Database which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.1.0","category":"SQL"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"fullName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"resources":[{"type":"Microsoft.Sql/servers/databases/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''fullName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"QueryStoreRuntimeStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"QueryStoreWaitStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"Errors","enabled":"[parameters(''logsEnabled'')]"},{"category":"DatabaseWaitStatistics","enabled":"[parameters(''logsEnabled'')]"},{"category":"Blocks","enabled":"[parameters(''logsEnabled'')]"},{"category":"SQLInsights","enabled":"[parameters(''logsEnabled'')]"},{"category":"SQLSecurityAuditEvents","enabled":"[parameters(''logsEnabled'')]"},{"category":"Timeouts","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutomaticTuning","enabled":"[parameters(''logsEnabled'')]"},{"category":"Deadlocks","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - diagnostic settings for '', parameters(''fullName''))]"}}},"parameters":{"location":{"value":"[field(''location'')]"},"fullName":{"value":"[field(''fullName'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9a7c7a7d-49e5-4213-bea8-6a502b6272e0","type":"Microsoft.Authorization/policyDefinitions","name":"9a7c7a7d-49e5-4213-bea8-6a502b6272e0"}' - headers: - cache-control: - - no-cache - content-length: - - '4190' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9ad2fd1f-b25f-47a2-aa01-1a5a779e6413'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual network injection should be enabled - for Azure Data Explorer","policyType":"BuiltIn","mode":"Indexed","description":"Secure - your network perimeter with virtual network injection which allows you to - enforce network security group rules, connect on-premises and secure your - data connection sources with service endpoints.","metadata":{"version":"1.0.0","category":"Azure - Data Explorer"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kusto/Clusters"},{"anyOf":[{"field":"Microsoft.Kusto/clusters/virtualNetworkConfiguration","exists":false},{"field":"Microsoft.Kusto/clusters/virtualNetworkConfiguration.subnetId","exists":false},{"field":"Microsoft.Kusto/clusters/virtualNetworkConfiguration.enginePublicIpId","exists":false},{"field":"Microsoft.Kusto/clusters/virtualNetworkConfiguration.dataManagementPublicIpId","exists":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ad2fd1f-b25f-47a2-aa01-1a5a779e6413","type":"Microsoft.Authorization/policyDefinitions","name":"9ad2fd1f-b25f-47a2-aa01-1a5a779e6413"}' - headers: - cache-control: - - no-cache - content-length: - - '1312' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9b597639-28e4-48eb-b506-56b05d366257'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Microsoft IaaSAntimalware extension should - be deployed on Windows servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows server VM without Microsoft IaaSAntimalware extension - deployed.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9b597639-28e4-48eb-b506-56b05d366257","type":"Microsoft.Authorization/policyDefinitions","name":"9b597639-28e4-48eb-b506-56b05d366257"}' - headers: - cache-control: - - no-cache - content-length: - - '1892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9b75ea5b-c796-4c99-aaaf-21c204daac43'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure IoT Hub device provisioning - service instances with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to IoT - Hub device provisioning service, you can reduce data leakage risks. Learn - more about private links at: https://aka.ms/iotdpsvnet.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Devices/provisioningServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Devices/provisioningServices","existenceCondition":{"count":{"field":"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]","where":{"field":"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"greaterOrEquals":1},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["iotDps"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9b75ea5b-c796-4c99-aaaf-21c204daac43","type":"Microsoft.Authorization/policyDefinitions","name":"9b75ea5b-c796-4c99-aaaf-21c204daac43"}' - headers: - cache-control: - - no-cache - content-length: - - '3644' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9bfe3727-0a17-471f-a2fe-eddd6b668745'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit API Applications - that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9bfe3727-0a17-471f-a2fe-eddd6b668745","type":"Microsoft.Authorization/policyDefinitions","name":"9bfe3727-0a17-471f-a2fe-eddd6b668745"}' - headers: - cache-control: - - no-cache - content-length: - - '1195' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9cee519f-d9c1-4fd9-9f79-24ec3449ed30'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Cognitive Search services - to disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your Azure Cognitive Search service so that it is - not accessible over the public internet. This can reduce data leakage risks. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"category":"Search","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"field":"Microsoft.Search/searchServices/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0"],"operations":[{"operation":"addOrReplace","field":"Microsoft.Search/searchServices/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9cee519f-d9c1-4fd9-9f79-24ec3449ed30","type":"Microsoft.Authorization/policyDefinitions","name":"9cee519f-d9c1-4fd9-9f79-24ec3449ed30"}' - headers: - cache-control: - - no-cache - content-length: - - '1413' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''Java version'' is the latest, - if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for Java software either due to security flaws - or to include additional functionality. Using the latest Java version for - Function apps is recommended in order to take advantage of security fixes, - if any, and/or new functionalities of the latest version. Currently, this - policy only applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"JavaLatestVersion":{"type":"String","metadata":{"displayName":"Latest - Java version","description":"Latest supported Java version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"JAVA"},{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","like":"[concat(''*'', - parameters(''JavaLatestVersion''))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc","type":"Microsoft.Authorization/policyDefinitions","name":"9d0b6ea4-93e2-4578-bf2f-6bb17d22b4bc"}' - headers: - cache-control: - - no-cache - content-length: - - '1592' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9d2b61b4-1d14-4a63-be30-d4498e7ad2cf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy Log Analytics agent - to Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Log Analytics agent to Linux Azure Arc machines if the - agent isn''t installed.","metadata":{"version":"1.1.0-preview","category":"Monitoring","preview":true},"parameters":{"logAnalytics":{"type":"String","metadata":{"displayName":"[Preview]: - Log Analytics workspace","description":"Specify the Log Analytics workspace - the agent should be connected to. If this workspace is outside of the scope - of the assignment you must manually grant ''Log Analytics Contributor'' permissions - (or similar) to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"OmsAgentForLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"}},"variables":{"vmExtensionName":"OMSAgentForLinux","vmExtensionPublisher":"Microsoft.EnterpriseCloud.Monitoring","vmExtensionType":"OmsAgentForLinux"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{"workspaceId":"[reference(parameters(''logAnalytics''), - ''2015-03-20'').customerId]","stopOnMultipleConnections":"true"},"protectedSettings":{"workspaceKey":"[listKeys(parameters(''logAnalytics''), - ''2015-03-20'').primarySharedKey]"}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9d2b61b4-1d14-4a63-be30-d4498e7ad2cf","type":"Microsoft.Authorization/policyDefinitions","name":"9d2b61b4-1d14-4a63-be30-d4498e7ad2cf"}' - headers: - cache-control: - - no-cache - content-length: - - '2911' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9daedab3-fb2d-461e-b861-71790eead4f6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"All network ports should be restricted - on network security groups associated to your virtual machine","policyType":"BuiltIn","mode":"All","description":"Azure - Security Center has identified some of your network security groups'' inbound - rules to be too permissive. Inbound rules should not allow access from ''Any'' - or ''Internet'' ranges. This can potentially enable attackers to target your - resources.","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"3b20e985-f71f-483b-b078-f30d73936d43","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9daedab3-fb2d-461e-b861-71790eead4f6","type":"Microsoft.Authorization/policyDefinitions","name":"9daedab3-fb2d-461e-b861-71790eead4f6"}' - headers: - cache-control: - - no-cache - content-length: - - '1246' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9db7917b-1607-4e7d-a689-bca978dd0633'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Application definition for Managed Application - should use customer provided storage account","policyType":"BuiltIn","mode":"Indexed","description":"Use - your own storage account to control the application definition data when this - is a regulatory or compliance requirement. You can choose to store your managed - application definition within a storage account provided by you during creation, - so that its location and access can be fully managed by you to fulfill regulatory - compliance requirements.","metadata":{"version":"1.0.0","category":"Managed - Application"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Solutions/applicationDefinitions"},{"field":"Microsoft.Solutions/applicationDefinitions/storageAccountId","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9db7917b-1607-4e7d-a689-bca978dd0633","type":"Microsoft.Authorization/policyDefinitions","name":"9db7917b-1607-4e7d-a689-bca978dd0633"}' - headers: - cache-control: - - no-cache - content-length: - - '1208' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9ea02ca2-71db-412d-8b00-7c7ca9fcd32d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:45:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Append a tag and its value from the resource - group","policyType":"BuiltIn","mode":"Indexed","description":"Appends the - specified tag with its value from the resource group when any resource which - is missing this tag is created or updated. Does not modify the tags of resources - created before this policy was applied until those resources are changed. - New ''modify'' effect policies are available that support remediation of tags - on existing resources (see https://aka.ms/modifydoc).","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"append","details":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9ea02ca2-71db-412d-8b00-7c7ca9fcd32d","type":"Microsoft.Authorization/policyDefinitions","name":"9ea02ca2-71db-412d-8b00-7c7ca9fcd32d"}' - headers: - cache-control: - - no-cache - content-length: - - '1225' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:45:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9f658460-46b7-43af-8565-94fc0662be38'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that are not set to the specified time zone","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not set to the specified time zone. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsTimeZone","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9f658460-46b7-43af-8565-94fc0662be38","type":"Microsoft.Authorization/policyDefinitions","name":"9f658460-46b7-43af-8565-94fc0662be38"}' - headers: - cache-control: - - no-cache - content-length: - - '3174' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''9f766f00-8d11-464e-80e1-4091d7874074'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Storage account to use a private - link connection","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - storage account, you can reduce data leakage risks. Learn more about private - links at - https://aka.ms/azureprivatelinkoverview","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"The subnetId that private endpoint connections - should link to","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"targetSubResource":{"type":"String","metadata":{"displayName":"Target - sub-resource","description":"Type of sub-resource for the resource selected - above, that your private endpoint will be able to access"},"allowedValues":["blob","blob_secondary","table","table_secondary","queue","queue_secondary","file","web","web_secondary","dfs","dfs_secondary"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"kind","in":["StorageV2","BlobStorage","BlockBlobStorage","FileStorage"]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Storage/storageAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Storage/storageAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"targetSubResource":{"value":"[parameters(''targetSubResource'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"targetSubResource":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"targetSubResource":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":"[array(parameters(''targetSubResource''))]","requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"targetSubResource":{"value":"[parameters(''targetSubResource'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/9f766f00-8d11-464e-80e1-4091d7874074","type":"Microsoft.Authorization/policyDefinitions","name":"9f766f00-8d11-464e-80e1-4091d7874074"}' - headers: - cache-control: - - no-cache - content-length: - - '4283' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a030a57e-4639-4e8f-ade9-a92f33afe7ee'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs on which the Log Analytics agent is not connected as expected","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the Log Analytics agent is not - connected to the specified workspaces. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsLogAnalyticsAgentConnection","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a030a57e-4639-4e8f-ade9-a92f33afe7ee","type":"Microsoft.Authorization/policyDefinitions","name":"a030a57e-4639-4e8f-ade9-a92f33afe7ee"}' - headers: - cache-control: - - no-cache - content-length: - - '3245' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a049bf77-880b-470f-ba6d-9f21c530cf83'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cognitive Search service should - use a SKU that supports private link","policyType":"BuiltIn","mode":"Indexed","description":"With - supported SKUs of Azure Cognitive Search, Azure Private Link lets you connect - your virtual network to Azure services without a public IP address at the - source or destination. The private link platform handles the connectivity - between the consumer and services over the Azure backbone network. By mapping - private endpoints to your Search service, data leakage risks are reduced. - Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"version":"1.0.0","category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or Deny the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"field":"Microsoft.Search/searchServices/sku.name","equals":"free"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a049bf77-880b-470f-ba6d-9f21c530cf83","type":"Microsoft.Authorization/policyDefinitions","name":"a049bf77-880b-470f-ba6d-9f21c530cf83"}' - headers: - cache-control: - - no-cache - content-length: - - '1256' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a08ec900-254a-4555-9bf5-e42af04b5c5c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allowed resource types","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify the resource types that your organization can - deploy. Only resource types that support ''tags'' and ''location'' will be - affected by this policy. To restrict all resources please duplicate this policy - and change the ''mode'' to ''All''.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfResourceTypesAllowed":{"type":"Array","metadata":{"description":"The - list of resource types that can be deployed.","displayName":"Allowed resource - types","strongType":"resourceTypes"}}},"policyRule":{"if":{"not":{"field":"type","in":"[parameters(''listOfResourceTypesAllowed'')]"}},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a08ec900-254a-4555-9bf5-e42af04b5c5c","type":"Microsoft.Authorization/policyDefinitions","name":"a08ec900-254a-4555-9bf5-e42af04b5c5c"}' - headers: - cache-control: - - no-cache - content-length: - - '948' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a1181c5f-672a-477a-979a-7d58aa086233'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Security Center standard pricing tier - should be selected","policyType":"BuiltIn","mode":"All","description":"The - standard pricing tier enables threat detection for networks and virtual machines, - providing threat intelligence, anomaly detection, and behavior analytics in - Azure Security Center","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Security/pricings"},{"field":"Microsoft.Security/pricings/pricingTier","exists":"true"},{"field":"Microsoft.Security/pricings/pricingTier","notEquals":"Standard"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1181c5f-672a-477a-979a-7d58aa086233","type":"Microsoft.Authorization/policyDefinitions","name":"a1181c5f-672a-477a-979a-7d58aa086233"}' - headers: - cache-control: - - no-cache - content-length: - - '1030' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a1817ec0-a368-432a-8057-8371e17ac6ee'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"All authorization rules except RootManageSharedAccessKey - should be removed from Service Bus namespace","policyType":"BuiltIn","mode":"All","description":"Service - Bus clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity","metadata":{"version":"1.0.1","category":"Service - Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceBus/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1817ec0-a368-432a-8057-8371e17ac6ee","type":"Microsoft.Authorization/policyDefinitions","name":"a1817ec0-a368-432a-8057-8371e17ac6ee"}' - headers: - cache-control: - - no-cache - content-length: - - '1164' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a1ad735a-e96f-45d2-a7b2-9a4932cab7ec'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Event Hub namespaces should use a customer-managed - key for encryption","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Event Hubs supports the option of encrypting data at rest with either Microsoft-managed - keys (default) or customer-managed keys. Choosing to encrypt data using customer-managed - keys enables you to assign, rotate, disable, and revoke access to the keys - that Event Hub will use to encrypt data in your namespace. Note that Event - Hub only supports encryption with customer-managed keys for namespaces in - dedicated clusters.","metadata":{"version":"1.0.0","category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"},{"field":"Microsoft.EventHub/namespaces/clusterArmId","exists":"true"},{"not":{"field":"Microsoft.EventHub/namespaces/encryption.keySource","equals":"Microsoft.Keyvault"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1ad735a-e96f-45d2-a7b2-9a4932cab7ec","type":"Microsoft.Authorization/policyDefinitions","name":"a1ad735a-e96f-45d2-a7b2-9a4932cab7ec"}' - headers: - cache-control: - - no-cache - content-length: - - '1315' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a1dae6c7-13f3-48ea-a149-ff8442661f60'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Logic - Apps to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Logic Apps to stream to a regional Event Hub when - any Logic Apps which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Logic - Apps in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Logic/workflows"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Logic/workflows/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"WorkflowRuntime","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1dae6c7-13f3-48ea-a149-ff8442661f60","type":"Microsoft.Authorization/policyDefinitions","name":"a1dae6c7-13f3-48ea-a149-ff8442661f60"}' - headers: - cache-control: - - no-cache - content-length: - - '3998' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a1e8dda3-9fd2-4835-aec3-0e55531fde33'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Administrative Templates - System''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Administrative Templates - System''. For more information on Guest - Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a1e8dda3-9fd2-4835-aec3-0e55531fde33","type":"Microsoft.Authorization/policyDefinitions","name":"a1e8dda3-9fd2-4835-aec3-0e55531fde33"}' - headers: - cache-control: - - no-cache - content-length: - - '3258' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a29ee95c-0395-4515-9851-cc04ffe82a91'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that are not joined to the specified domain","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that are not joined to the specified domain. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDomainMembership","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a29ee95c-0395-4515-9851-cc04ffe82a91","type":"Microsoft.Authorization/policyDefinitions","name":"a29ee95c-0395-4515-9851-cc04ffe82a91"}' - headers: - cache-control: - - no-cache - content-length: - - '3182' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a2a5b911-5617-447e-a49e-59dbe0e0434b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Azure Key Vault Managed - HSM should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"To - recreate activity trails for investigation purposes when a security incident - occurs or when your network is compromised, you may want to audit by enabling - resource logs on Managed HSMs. Please follow the instructions here: https://docs.microsoft.com/azure/key-vault/managed-hsm/logging.","metadata":{"version":"1.0.0","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2a5b911-5617-447e-a49e-59dbe0e0434b","type":"Microsoft.Authorization/policyDefinitions","name":"a2a5b911-5617-447e-a49e-59dbe0e0434b"}' - headers: - cache-control: - - no-cache - content-length: - - '2052' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a2d0e922-65d0-40c4-8f87-ea6da2d307a2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not restrict - the minimum password length to 14 characters","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not restrict the minimum password length to 14 characters","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"MinimumPasswordLength","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MinimumPasswordLength","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2","type":"Microsoft.Authorization/policyDefinitions","name":"a2d0e922-65d0-40c4-8f87-ea6da2d307a2"}' - headers: - cache-control: - - no-cache - content-length: - - '3668' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a3701552-92ea-433e-9d17-33b7f1208fc9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Container registries to disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your Container Registry resource so that it''s not - accessible over the public internet. This can reduce data leakage risks. Learn - more at https://aka.ms/acr/portal/public-network and https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"field":"Microsoft.ContainerRegistry/registries/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"conflictEffect":"audit","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"Microsoft.ContainerRegistry/registries/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a3701552-92ea-433e-9d17-33b7f1208fc9","type":"Microsoft.Authorization/policyDefinitions","name":"a3701552-92ea-433e-9d17-33b7f1208fc9"}' - headers: - cache-control: - - no-cache - content-length: - - '1353' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a3a6ea0c-e018-4933-9ef0-5aaa1501449b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log Analytics agent should be installed - on your virtual machine scale sets for Azure Security Center monitoring","policyType":"BuiltIn","mode":"All","description":"Security - Center collects data from your Azure virtual machines (VMs) to monitor for - security vulnerabilities and threats.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachineScaleSets"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"45cfe080-ceb1-a91e-9743-71551ed24e94","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a3a6ea0c-e018-4933-9ef0-5aaa1501449b","type":"Microsoft.Authorization/policyDefinitions","name":"a3a6ea0c-e018-4933-9ef0-5aaa1501449b"}' - headers: - cache-control: - - no-cache - content-length: - - '1098' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a4034bc6-ae50-406d-bf76-50f4ee5a7811'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy - Configure Linux Azure - Monitor agent to enable Azure Monitor assignments on Linux virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"Configure - Linux Azure Monitor agent to Linux virtual machines hosted in Azure that are - supported by Azure Monitor. Azure Monitor agent collects events from the virtual - machine that can be used to provide recommendations. Target virtual machines - must be in a supported location.","metadata":{"category":"Monitoring","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":["australiacentral","australiaeast","australiasoutheast","centralindia","centralus","eastasia","eastus2euap","eastus","eastus2","germanywestcentral","japaneast","northcentralus","northeurope","southcentralus","southeastasia","uksouth","westcentralus","westeurope","westus","westus2"]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"12*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"14.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"16.04*LTS"},{"field":"Microsoft.Compute/imageSKU","like":"18.04*LTS"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["CentOS","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","in":["debian"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"8"},{"field":"Microsoft.Compute/imageSKU","like":"9"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Debian"},{"field":"Microsoft.Compute/imageOffer","in":["debian-10"]},{"field":"Microsoft.Compute/imageSKU","like":"10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzureMonitorLinuxAgent","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitor"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"AzureMonitorLinuxAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/AzureMonitorLinuxAgent'')]","apiVersion":"2019-07-01","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Monitor","type":"AzureMonitorLinuxAgent","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a4034bc6-ae50-406d-bf76-50f4ee5a7811","type":"Microsoft.Authorization/policyDefinitions","name":"a4034bc6-ae50-406d-bf76-50f4ee5a7811"}' - headers: - cache-control: - - no-cache - content-length: - - '4591' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a451c1ef-c6ca-483d-87ed-f49761e3ffb5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit usage of custom RBAC rules","policyType":"BuiltIn","mode":"All","description":"Audit - built-in roles such as ''Owner, Contributer, Reader'' instead of custom RBAC - roles, which are error prone. Using custom roles is treated as an exception - and requires a rigorous review and threat modeling","metadata":{"version":"1.0.0","category":"General"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Authorization/roleDefinitions"},{"field":"Microsoft.Authorization/roleDefinitions/type","equals":"CustomRole"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a451c1ef-c6ca-483d-87ed-f49761e3ffb5","type":"Microsoft.Authorization/policyDefinitions","name":"a451c1ef-c6ca-483d-87ed-f49761e3ffb5"}' - headers: - cache-control: - - no-cache - content-length: - - '970' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a4af4a39-4135-47fb-b175-47fbdf85311d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web Application should only be accessible - over HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use of - HTTPS ensures server/service authentication and protects data in transit from - network layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a4af4a39-4135-47fb-b175-47fbdf85311d","type":"Microsoft.Authorization/policyDefinitions","name":"a4af4a39-4135-47fb-b175-47fbdf85311d"}' - headers: - cache-control: - - no-cache - content-length: - - '903' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a4fe33eb-e377-4efb-ab31-0784311bc499'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log Analytics agent should be installed - on your virtual machine for Azure Security Center monitoring","policyType":"BuiltIn","mode":"All","description":"This - policy audits any Windows/Linux virtual machines (VMs) if the Log Analytics - agent is not installed which Security Center uses to monitor for security - vulnerabilities and threats","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"d1db3318-01ff-16de-29eb-28b344515626","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a4fe33eb-e377-4efb-ab31-0784311bc499","type":"Microsoft.Authorization/policyDefinitions","name":"a4fe33eb-e377-4efb-ab31-0784311bc499"}' - headers: - cache-control: - - no-cache - content-length: - - '1183' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a63cc0bd-cda4-4178-b705-37dc439d3e0f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure CosmosDB accounts to use private - DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use private - DNS zones to override the DNS resolution for a private endpoint. A private - DNS zone links to your virtual network to resolve to CosmosDB account. Learn - more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - Dns Zone Id","description":"The private DNS zone to deploy in a new private - DNS zone group and link to the private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"Private - Endpoint Group Id","description":"A group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"[parameters(''privateEndpointGroupId'')]"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"cosmosDB-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a63cc0bd-cda4-4178-b705-37dc439d3e0f","type":"Microsoft.Authorization/policyDefinitions","name":"a63cc0bd-cda4-4178-b705-37dc439d3e0f"}' - headers: - cache-control: - - no-cache - content-length: - - '2618' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a6d2c800-5230-4a40-bff3-8268b4987d42'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - to an Event Hub to be enabled on Azure Key Vault Managed HSM","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Event Hub when any Azure Key Vault Managed HSM which is missing this diagnostic - settings is created or updated.","metadata":{"version":"1.0.0","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Azure - Key Vault Managed HSMs in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"hsmName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"resources":[{"type":"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''hsmName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - diagnostic settings for '', parameters(''hsmName''))]"}}},"parameters":{"location":{"value":"[field(''location'')]"},"hsmName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6d2c800-5230-4a40-bff3-8268b4987d42","type":"Microsoft.Authorization/policyDefinitions","name":"a6d2c800-5230-4a40-bff3-8268b4987d42"}' - headers: - cache-control: - - no-cache - content-length: - - '4136' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a6f560f4-f582-4b67-b123-a37dcd1bf7ea'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Kubernetes clusters with specified - GitOps configuration using HTTPS secrets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - a ''sourceControlConfiguration'' to Kubernetes clusters to assure that the - clusters get their source of truth for workloads and configurations from the - defined git repo. This definition requires HTTPS user and key secrets stored - in Key Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"configurationResourceName":{"type":"String","metadata":{"displayName":"Configuration - resource name","description":"The name for the sourceControlConfiguration. Learn - more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps."}},"operatorInstanceName":{"type":"String","metadata":{"displayName":"Operator - instance name","description":"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character."}},"operatorNamespace":{"type":"String","metadata":{"displayName":"Operator - namespace","description":"Namespace within which the operators will be installed. - Maximum of 23 lowercase alphanumeric characters or hyphen. Must start and - end with an alphanumeric character."}},"operatorScope":{"type":"String","metadata":{"displayName":"Operator - scope","description":"The permission scope for the operator. Possible values - are ''cluster'' (full access) or ''namespace'' (restricted access)."},"allowedValues":["cluster","namespace"]},"operatorType":{"type":"String","metadata":{"displayName":"Operator - type","description":"The type of operator to install. Currently, ''Flux'' - is supported."},"allowedValues":["Flux"]},"operatorParams":{"type":"String","metadata":{"displayName":"Operator - parameters","description":"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams."}},"repositoryUrl":{"type":"String","metadata":{"displayName":"Repository - Url","description":"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters"}},"enableHelmOperator":{"type":"String","metadata":{"displayName":"Enable - Helm","description":"Indicate whether to enable Helm for this instance of - Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm."},"allowedValues":["true","false"]},"chartVersion":{"type":"String","metadata":{"displayName":"Helm - chart version for installing Flux Helm","description":"The version of the - Helm chart for installing Flux Helm. For example, 1.2.0"}},"chartValues":{"type":"String","metadata":{"displayName":"Helm - chart parameters for installing Flux Helm","description":"Parameters for the - Helm chart for installing Flux Helm, separated by spaces. For example, --set - helm.versions=v3"}},"keyVaultResourceId":{"type":"String","metadata":{"displayName":"Key - Vault resource id","description":"The resource id for the Key Vault that holds - the SSH or HTTPS secrets. For example: ''/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/''","strongType":"Microsoft.KeyVault/vaults","assignPermissions":"true"}},"httpsUserKeyVaultSecretName":{"type":"String","metadata":{"displayName":"HTTPS - user name Key Vault secret","description":"The name of the Key Vault secret - that holds the base64-encoded HTTPS user name."}},"httpsKeyKeyVaultSecretName":{"type":"String","metadata":{"displayName":"HTTPS - key Key Vault secret","description":"The name of the Key Vault secret that - holds the base64-encoded HTTPS key."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/sourceControlConfigurations","name":"[parameters(''configurationResourceName'')]","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deploymentScope":"ResourceGroup","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams","in":["[parameters(''operatorParams'')]","[concat(''--git-readonly - '',parameters(''operatorParams''))]"]},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl","equals":"[parameters(''repositoryUrl'')]"},{"anyOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"false"},{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"true"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion","equals":"[parameters(''chartVersion'')]"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues","equals":"[parameters(''chartValues'')]"}]}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"configurationResourceName":{"type":"string"},"clusterLocation":{"type":"string"},"clusterName":{"type":"string"},"operatorInstanceName":{"type":"string"},"operatorNamespace":{"type":"string"},"operatorScope":{"type":"string"},"operatorType":{"type":"string"},"operatorParams":{"type":"string"},"repositoryUrl":{"type":"string"},"enableHelmOperator":{"type":"string"},"chartVersion":{"type":"string"},"chartValues":{"type":"string"},"httpsUser":{"type":"securestring"},"httpsKey":{"type":"securestring"},"clusterResourceType":{"type":"string"}},"resources":[{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''connectedclusters''))]","type":"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"},"configurationProtectedSettings":{"httpsUser":"[parameters(''httpsUser'')]","httpsKey":"[parameters(''httpsKey'')]"}}},{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''managedclusters''))]","type":"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"},"configurationProtectedSettings":{"httpsUser":"[parameters(''httpsUser'')]","httpsKey":"[parameters(''httpsKey'')]"}}}]},"parameters":{"clusterLocation":{"value":"[field(''location'')]"},"clusterName":{"value":"[field(''name'')]"},"configurationResourceName":{"value":"[parameters(''configurationResourceName'')]"},"operatorInstanceName":{"value":"[parameters(''operatorInstanceName'')]"},"operatorNamespace":{"value":"[parameters(''operatorNamespace'')]"},"operatorScope":{"value":"[parameters(''operatorScope'')]"},"operatorType":{"value":"[parameters(''operatorType'')]"},"operatorParams":{"value":"[parameters(''operatorParams'')]"},"repositoryUrl":{"value":"[parameters(''repositoryUrl'')]"},"enableHelmOperator":{"value":"[parameters(''enableHelmOperator'')]"},"chartVersion":{"value":"[parameters(''chartVersion'')]"},"chartValues":{"value":"[parameters(''chartValues'')]"},"httpsUser":{"reference":{"keyVault":{"id":"[parameters(''keyVaultResourceId'')]"},"secretName":"[parameters(''httpsUserKeyVaultSecretName'')]"}},"httpsKey":{"reference":{"keyVault":{"id":"[parameters(''keyVaultResourceId'')]"},"secretName":"[parameters(''httpsKeyKeyVaultSecretName'')]"}},"clusterResourceType":{"value":"[field(''type'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6f560f4-f582-4b67-b123-a37dcd1bf7ea","type":"Microsoft.Authorization/policyDefinitions","name":"a6f560f4-f582-4b67-b123-a37dcd1bf7ea"}' - headers: - cache-control: - - no-cache - content-length: - - '9159' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Auditing on SQL server should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Auditing - on your SQL Server should be enabled to track database activities across all - databases on the server and save them in an audit log.","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"setting":{"type":"String","metadata":{"displayName":"Desired - Auditing setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9","type":"Microsoft.Authorization/policyDefinitions","name":"a6fb4358-5bf4-4ad7-ba82-2cd2f41ce5e9"}' - headers: - cache-control: - - no-cache - content-length: - - '1171' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a70ca396-0a34-413a-88e1-b956c1e683be'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"The Log Analytics agent should be installed - on virtual machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows/Linux virtual machines if the Log Analytics agent - is not installed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","in":["MicrosoftMonitoringAgent","OmsAgentForLinux"]},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"},{"field":"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a70ca396-0a34-413a-88e1-b956c1e683be","type":"Microsoft.Authorization/policyDefinitions","name":"a70ca396-0a34-413a-88e1-b956c1e683be"}' - headers: - cache-control: - - no-cache - content-length: - - '1332' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a7aca53f-2ed4-4466-a25e-0b45ade68efd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure DDoS Protection Standard should - be enabled","policyType":"BuiltIn","mode":"All","description":"DDoS protection - standard should be enabled for all virtual networks with a subnet that is - part of an application gateway with a public IP.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"microsoft.network/virtualNetworks"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"e3de1cc0-f4dd-3b34-e496-8b5381ba2d70","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7aca53f-2ed4-4466-a25e-0b45ade68efd","type":"Microsoft.Authorization/policyDefinitions","name":"a7aca53f-2ed4-4466-a25e-0b45ade68efd"}' - headers: - cache-control: - - no-cache - content-length: - - '1046' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a7ff3161-0087-490a-9ad9-ad6217f4f43a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Require encryption on Data Lake Store - accounts","policyType":"BuiltIn","mode":"Indexed","description":"This policy - ensures encryption is enabled on all Data Lake Store accounts","metadata":{"version":"1.0.0","category":"Data - Lake"},"parameters":{},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"field":"Microsoft.DataLakeStore/accounts/encryptionState","equals":"Disabled"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a7ff3161-0087-490a-9ad9-ad6217f4f43a","type":"Microsoft.Authorization/policyDefinitions","name":"a7ff3161-0087-490a-9ad9-ad6217f4f43a"}' - headers: - cache-control: - - no-cache - content-length: - - '672' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a8793640-60f7-487c-b5c3-1d37215905c4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Managed Instance should have the - minimal TLS version of 1.2","policyType":"BuiltIn","mode":"Indexed","description":"Setting - minimal TLS version to 1.2 improves security by ensuring your SQL Managed - Instance can only be accessed from clients using TLS 1.2. Using versions of - TLS less than 1.2 is not recommended since they have well documented security - vulnerabilities.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/managedInstances"},{"anyOf":[{"field":"Microsoft.Sql/managedInstances/minimalTlsVersion","exists":false},{"field":"Microsoft.Sql/managedInstances/minimalTlsVersion","notEquals":"1.2"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8793640-60f7-487c-b5c3-1d37215905c4","type":"Microsoft.Authorization/policyDefinitions","name":"a8793640-60f7-487c-b5c3-1d37215905c4"}' - headers: - cache-control: - - no-cache - content-length: - - '1125' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a8bef009-a5c9-4d0f-90d7-6018734e8a16'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Monitor unencrypted SQL - databases in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Unencrypted - SQL databases will be monitored by Azure Security Center as recommendations. - This policy is deprecated and replaced by the following policy: Transparent - Data Encryption on SQL databases should be enabled''","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"encryption","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8bef009-a5c9-4d0f-90d7-6018734e8a16","type":"Microsoft.Authorization/policyDefinitions","name":"a8bef009-a5c9-4d0f-90d7-6018734e8a16"}' - headers: - cache-control: - - no-cache - content-length: - - '1174' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a8eff44f-8c92-45c3-a3fb-9880802d67a7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Azure Policy Add-on to Azure Kubernetes - Service clusters","policyType":"BuiltIn","mode":"Indexed","description":"Use - Azure Policy Add-on to manage and report on the compliance state of your Azure - Kubernetes Service (AKS) clusters. For more information, see https://aka.ms/akspolicydoc.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.ContainerService/managedClusters","name":"[field(''name'')]","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/ed7f3fbd-7b88-4dd4-9017-9adb7ce333f8"],"existenceCondition":{"field":"Microsoft.ContainerService/managedClusters/addonProfiles.azurePolicy.enabled","equals":"true"},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"clusterName":{"type":"string"},"clusterResourceGroupName":{"type":"string"}},"variables":{"clusterGetDeploymentName":"[concat(''PolicyDeployment-Get-'', - parameters(''clusterName''))]","clusterUpdateDeploymentName":"[concat(''PolicyDeployment-Update-'', - parameters(''clusterName''))]"},"resources":[{"apiVersion":"2020-06-01","type":"Microsoft.Resources/deployments","name":"[variables(''clusterGetDeploymentName'')]","properties":{"mode":"Incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[],"outputs":{"aksCluster":{"type":"object","value":"[reference(resourceId(parameters(''clusterResourceGroupName''), - ''Microsoft.ContainerService/managedClusters'', parameters(''clusterName'')), - ''2020-04-01'', ''Full'')]"}}}}},{"apiVersion":"2020-06-01","type":"Microsoft.Resources/deployments","name":"[variables(''clusterUpdateDeploymentName'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"aksClusterName":{"type":"string"},"aksClusterContent":{"type":"object"}},"resources":[{"apiVersion":"2020-04-01","type":"Microsoft.ContainerService/managedClusters","name":"[parameters(''aksClusterName'')]","location":"[parameters(''aksClusterContent'').location]","sku":"[parameters(''aksClusterContent'').sku]","tags":"[if(contains(parameters(''aksClusterContent''), - ''tags''), parameters(''aksClusterContent'').tags, json(''null''))]","identity":"[if(contains(parameters(''aksClusterContent''), - ''identity''), parameters(''aksClusterContent'').identity, json(''null''))]","properties":{"kubernetesVersion":"[parameters(''aksClusterContent'').properties.kubernetesVersion]","dnsPrefix":"[parameters(''aksClusterContent'').properties.dnsPrefix]","agentPoolProfiles":"[if(contains(parameters(''aksClusterContent'').properties, - ''agentPoolProfiles''), parameters(''aksClusterContent'').properties.agentPoolProfiles, - json(''null''))]","linuxProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''linuxProfile''), parameters(''aksClusterContent'').properties.linuxProfile, - json(''null''))]","windowsProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''windowsProfile''), parameters(''aksClusterContent'').properties.windowsProfile, - json(''null''))]","servicePrincipalProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''servicePrincipalProfile''), parameters(''aksClusterContent'').properties.servicePrincipalProfile, - json(''null''))]","addonProfiles":{"azurepolicy":{"enabled":true}},"nodeResourceGroup":"[parameters(''aksClusterContent'').properties.nodeResourceGroup]","enableRBAC":"[if(contains(parameters(''aksClusterContent'').properties, - ''enableRBAC''), parameters(''aksClusterContent'').properties.enableRBAC, - json(''null''))]","enablePodSecurityPolicy":"[if(contains(parameters(''aksClusterContent'').properties, - ''enablePodSecurityPolicy''), parameters(''aksClusterContent'').properties.enablePodSecurityPolicy, - json(''null''))]","networkProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''networkProfile''), parameters(''aksClusterContent'').properties.networkProfile, - json(''null''))]","aadProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''aadProfile''), parameters(''aksClusterContent'').properties.aadProfile, - json(''null''))]","autoScalerProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''autoScalerProfile''), parameters(''aksClusterContent'').properties.autoScalerProfile, - json(''null''))]","apiServerAccessProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''apiServerAccessProfile''), parameters(''aksClusterContent'').properties.apiServerAccessProfile, - json(''null''))]","diskEncryptionSetID":"[if(contains(parameters(''aksClusterContent'').properties, - ''diskEncryptionSetID''), parameters(''aksClusterContent'').properties.diskEncryptionSetID, - json(''null''))]","identityProfile":"[if(contains(parameters(''aksClusterContent'').properties, - ''identityProfile''), parameters(''aksClusterContent'').properties.identityProfile, - json(''null''))]"}}],"outputs":{}},"parameters":{"aksClusterName":{"value":"[parameters(''clusterName'')]"},"aksClusterContent":{"value":"[reference(variables(''clusterGetDeploymentName'')).outputs.aksCluster.value]"}}}}]},"parameters":{"clusterName":{"value":"[field(''name'')]"},"clusterResourceGroupName":{"value":"[resourceGroup().name]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a8eff44f-8c92-45c3-a3fb-9880802d67a7","type":"Microsoft.Authorization/policyDefinitions","name":"a8eff44f-8c92-45c3-a3fb-9880802d67a7"}' - headers: - cache-control: - - no-cache - content-length: - - '5681' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a9934fd7-29f2-4e6d-ab3d-607ea38e9079'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Managed Instances should avoid using - GRS backup redundancy","policyType":"BuiltIn","mode":"Indexed","description":"Managed - Instances should avoid using the default geo-redundant storage for backups, - if data residency rules require data to stay within a specific region. Note: - Azure Policy is not enforced when creating a database using T-SQL. If not - explicitly specified, database with geo-redundant backup storage is created - via T-SQL.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/managedInstances"},{"not":{"anyOf":[{"field":"Microsoft.Sql/managedInstances/storageAccountType","equals":"LRS"},{"field":"Microsoft.Sql/managedInstances/storageAccountType","equals":"ZRS"}]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9934fd7-29f2-4e6d-ab3d-607ea38e9079","type":"Microsoft.Authorization/policyDefinitions","name":"a9934fd7-29f2-4e6d-ab3d-607ea38e9079"}' - headers: - cache-control: - - no-cache - content-length: - - '1199' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a9a33475-481d-4b81-9116-0bf02ffe67e8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Detailed Tracking''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Detailed Tracking''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesDetailedTracking","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9a33475-481d-4b81-9116-0bf02ffe67e8","type":"Microsoft.Authorization/policyDefinitions","name":"a9a33475-481d-4b81-9116-0bf02ffe67e8"}' - headers: - cache-control: - - no-cache - content-length: - - '3280' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''a9b99dd8-06c5-4317-8629-9d86a3c6e7d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy network watcher when virtual networks - are created","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a network watcher resource in regions with virtual networks. You need - to ensure existence of a resource group named networkWatcherRG, which will - be used to deploy network watcher instances.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"DeployIfNotExists","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"networkWatcherRG","existenceCondition":{"field":"location","equals":"[field(''location'')]"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"}},"resources":[{"apiVersion":"2016-09-01","type":"Microsoft.Network/networkWatchers","name":"[concat(''networkWatcher_'', - parameters(''location''))]","location":"[parameters(''location'')]"}]},"parameters":{"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/a9b99dd8-06c5-4317-8629-9d86a3c6e7d9","type":"Microsoft.Authorization/policyDefinitions","name":"a9b99dd8-06c5-4317-8629-9d86a3c6e7d9"}' - headers: - cache-control: - - no-cache - content-length: - - '1484' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''aa633080-8b72-40c4-a2d7-d00c03e80bed'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"MFA should be enabled on accounts with - owner permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - owner permissions to prevent a breach of accounts or resources.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"94290b00-4d0c-d7b4-7cea-064a9554e681","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aa633080-8b72-40c4-a2d7-d00c03e80bed","type":"Microsoft.Authorization/policyDefinitions","name":"aa633080-8b72-40c4-a2d7-d00c03e80bed"}' - headers: - cache-control: - - no-cache - content-length: - - '1087' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''aa81768c-cb87-4ce2-bfaa-00baa10d760c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that Register with - Azure Active Directory is enabled on WEB App","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/2b9ad585-36bc-4615-b300-fd4435808332 - instead.","metadata":{"version":"1.0.0-deprecated","category":"App Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aa81768c-cb87-4ce2-bfaa-00baa10d760c","type":"Microsoft.Authorization/policyDefinitions","name":"aa81768c-cb87-4ce2-bfaa-00baa10d760c"}' - headers: - cache-control: - - no-cache - content-length: - - '1156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''aaa64d2d-2fa3-45e5-b332-0b031b9b30e8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure IoT Hub device provisioning - instances to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to an IoT Hub device - provisioning service instance. Learn more at: https://aka.ms/iotdpsvnet.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"iotDps"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink.azure-devices-provisioning.net","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aaa64d2d-2fa3-45e5-b332-0b031b9b30e8","type":"Microsoft.Authorization/policyDefinitions","name":"aaa64d2d-2fa3-45e5-b332-0b031b9b30e8"}' - headers: - cache-control: - - no-cache - content-length: - - '2483' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ab965db2-d2bf-4b64-8b39-c38ec8179461'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that ''PHP version'' - is the latest, if used as a part of the Function app","policyType":"BuiltIn","mode":"Indexed","description":"PHP - cannot be used with Function apps.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"PHPLatestVersion":{"type":"String","metadata":{"displayName":"[Deprecated]: - Latest PHP version","description":"Latest supported PHP version for App Services"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","notContains":"PHP"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":"[concat(''PHP|'', - parameters(''PHPLatestVersion''))]"},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":""}]},{"allOf":[{"field":"Microsoft.Web/sites/config/web.linuxFxVersion","equals":""},{"field":"Microsoft.Web/sites/config/web.phpVersion","equals":"[parameters(''PHPLatestVersion'')]"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ab965db2-d2bf-4b64-8b39-c38ec8179461","type":"Microsoft.Authorization/policyDefinitions","name":"ab965db2-d2bf-4b64-8b39-c38ec8179461"}' - headers: - cache-control: - - no-cache - content-length: - - '1650' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''abcc6037-1fc4-47f6-aac5-89706589be24'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Automatic provisioning - of security monitoring agent","policyType":"BuiltIn","mode":"All","description":"Installs - security agent on VMs for advanced security alerts and preventions in Azure - Security Center. Applies only for subscriptions that use Azure Security Center.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"AuditIfNotExists","details":{"type":"Microsoft.Security/complianceResults","name":"securityAgent","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abcc6037-1fc4-47f6-aac5-89706589be24","type":"Microsoft.Authorization/policyDefinitions","name":"abcc6037-1fc4-47f6-aac5-89706589be24"}' - headers: - cache-control: - - no-cache - content-length: - - '971' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Advanced data security should be enabled - on your SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - SQL servers without Advanced Data Security","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb4388-5bf4-4ad7-ba82-2cd2f41ceae9"}' - headers: - cache-control: - - no-cache - content-length: - - '980' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Advanced data security should be enabled - on SQL Managed Instance","policyType":"BuiltIn","mode":"Indexed","description":"Audit - each SQL Managed Instance without advanced data security.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"Default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/state","equals":"Enabled"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9","type":"Microsoft.Authorization/policyDefinitions","name":"abfb7388-5bf4-4ad7-ba99-2cd2f41cebb9"}' - headers: - cache-control: - - no-cache - content-length: - - '971' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ac076320-ddcf-4066-b451-6154267e8ad2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Enable Azure Security Center on your - subscription","policyType":"BuiltIn","mode":"All","description":"Identifies - existing subscriptions that are not monitored by Azure Security Center (ASC).\r\nSubscriptions - not monitored by ASC will be registered to the free pricing tier.\r\nSubscriptions - already monitored by ASC (free or standard), will be considered compliant.\r\nTo - register newly created subscriptions, open the compliance tab, select the - relevant non-compliant assignment and create a remediation task.\r\nRepeat - this step when you have one or more new subscriptions you want to monitor - with Security Center.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/pricings","name":"VirtualMachines","deploymentScope":"subscription","existenceScope":"subscription","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"existenceCondition":{"anyof":[{"field":"microsoft.security/pricings/pricingTier","equals":"standard"},{"field":"microsoft.security/pricings/pricingTier","equals":"free"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","variables":{},"resources":[{"type":"Microsoft.Security/pricings","apiVersion":"2018-06-01","name":"VirtualMachines","properties":{"pricingTier":"free"}}],"outputs":{}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac076320-ddcf-4066-b451-6154267e8ad2","type":"Microsoft.Authorization/policyDefinitions","name":"ac076320-ddcf-4066-b451-6154267e8ad2"}' - headers: - cache-control: - - no-cache - content-length: - - '1850' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ac34a73f-9fa5-4067-9247-a3ecae514468'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure disaster recovery on virtual - machines by enabling replication","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - machines without disaster recovery configurations are vulnerable to outages - and other disruptions. If the virtual machine does not already have disaster - recovery configured, this would initiate the same by enabling replication - using preset configurations to facilitate business continuity. To learn more - about disaster recovery, visit https://aka.ms/asr-doc.","metadata":{"version":"1.2.0","category":"Compute"},"parameters":{"sourceRegion":{"type":"String","metadata":{"displayName":"Source - Region","description":"Region in which the virtual machine is originally deployed","strongType":"location","serviceName":"ASR"}},"targetRegion":{"type":"String","metadata":{"displayName":"Target - Region","description":"Region to be used to deploy the virtual machine in - case of a natural disaster","strongType":"location","serviceName":"ASR"}},"targetResourceGroupId":{"type":"String","metadata":{"displayName":"Target - Resource Group","description":"Resource group to be used to create the virtual - machine in the target region","assignPermissions":true,"strongType":"Microsoft.Resources/resourceGroups","serviceName":"ASR"}},"vaultResourceGroupId":{"type":"String","metadata":{"displayName":"Vault - Resource Group","description":"The resource group containing the recovery - services vault used for disaster recovery configurations","assignPermissions":true,"strongType":"Microsoft.Resources/resourceGroups","serviceName":"ASR"}},"vaultId":{"type":"String","metadata":{"displayName":"Recovery - Services Vault","description":"ID of the recovery services vault to be used - for disaster recovery configurations","strongType":"Microsoft.RecoveryServices/vaults","serviceName":"ASR"}},"recoveryNetworkId":{"type":"String","metadata":{"displayName":"Recovery - Virtual Network","description":"Existing Recovery Virtual Network ID or name - of the Virtual Network to be created in Target Region","strongType":"Microsoft.Network/virtualNetworks","serviceName":"ASR"}},"targetZone":{"type":"String","metadata":{"displayName":"Target - Availability Zone","description":"Availability zone in the designated target - region to be used by virtual machines during disaster","strongType":"zone","serviceName":"ASR"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","equals":"[parameters(''sourceRegion'')]"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.vhd.uri","exists":"false"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.encryptionSettings","exists":"false"},{"anyOf":[{"allOf":[{"field":"location","equals":"[parameters(''targetRegion'')]"},{"field":"Microsoft.Compute/virtualMachines/zones","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/zones[*]","notEquals":"[parameters(''targetZone'')]"}]},{"allOf":[{"field":"location","notEquals":"[parameters(''targetRegion'')]"},{"field":"Microsoft.Compute/virtualMachines/zones","exists":"true"},{"value":"[length(parameters(''targetZone''))]","greater":0}]},{"allOf":[{"field":"location","notEquals":"[parameters(''targetRegion'')]"},{"field":"Microsoft.Compute/virtualMachines/zones","exists":"false"}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Resources/links","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/8e3af657-a8ff-443c-a75c-2fe8c4bcb635"],"existenceCondition":{"allOf":[{"field":"name","like":"ASR-Protect-*"},{"field":"Microsoft.Resources/links/targetId","contains":"/replicationProtectedItems/"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"apiVersion":{"type":"String"},"avSetId":{"type":"String"},"dataDiskIds":{"type":"object"},"osDiskId":{"type":"String"},"ppgId":{"type":"String"},"recoveryNetworkId":{"type":"String"},"recoverySubscriptionId":{"type":"String"},"sourceRegion":{"type":"String"},"sourceResourceGroupName":{"type":"String"},"targetRegion":{"type":"String"},"targetResourceGroupName":{"type":"String"},"targetZone":{"type":"String"},"vaultName":{"type":"String"},"vaultResourceGroupName":{"type":"String"},"vmId":{"type":"String"},"vmZones":{"type":"Object"}},"variables":{"avSetApiVersion":"2019-03-01","deploymentApiVersion":"2017-05-10","vmApiVersion":"2019-07-01","ppgApiVersion":"2019-12-01","portalLinkPrefix":"https://portal.azure.com/aaa@foo.com","schemaLink":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","defaultAvSet":"defaultAvSet-asr","defaultPPG":"defaultPPG-asr","eligibilityResultsDefault":"default","protectedItemSuffix":"-policy","recoveryAvSetPrefix":"RecoveryAvSet-","recoveryPPGPrefix":"RecoveryPPG-","avSetType":"Microsoft.Compute/availabilitySets","deploymentType":"Microsoft.Resources/deployments","networkType":"Microsoft.Network/virtualNetworks","ppgType":"Microsoft.Compute/proximityPlacementGroups","replicationEligibilityResultsType":"Microsoft.RecoveryServices/replicationEligibilityResults","storageType":"Microsoft.Storage/storageAccounts","vaultType":"Microsoft.RecoveryServices/vaults","avSetTemplateName":"[concat(variables(''recoveryAvSetPrefix''), - last(split(parameters(''vmId''), ''/'')))]","avSetTemplateName64":"[if(greater(length(variables(''avSetTemplateName'')), - 64), substring(variables(''avSetTemplateName''), 0, 64), variables(''avSetTemplateName''))]","ppgTemplateName":"[concat(variables(''recoveryPPGPrefix''), - last(split(parameters(''vmId''), ''/'')))]","ppgTemplateName64":"[if(greater(length(variables(''ppgTemplateName'')), - 64), substring(variables(''ppgTemplateName''), 0, 64), variables(''ppgTemplateName''))]","replicationProtectedIntentTemplateName":"[concat(''ASR-'', - parameters(''sourceResourceGroupName''), ''-'', last(split(parameters(''vmId''), - ''/'')))]","replicationProtectedIntentTemplateName64":"[if(greater(length(variables(''replicationProtectedIntentTemplateName'')), - 64), substring(variables(''replicationProtectedIntentTemplateName''), 0, 64), - variables(''replicationProtectedIntentTemplateName''))]","vmDataDiskIds":"[array(parameters(''dataDiskIds'').rawValue)]","vmDiskCount":"[add(length(variables(''vmDataDiskIds'')), - int(1))]","diskIds":"[concat(array(parameters(''osDiskId'')), array(parameters(''dataDiskIds'').rawValue))]","vaultId":"[resourceId(parameters(''vaultResourceGroupName''), - variables(''vaultType''), parameters(''vaultName''))]","eligibilityResultsId":"[extensionResourceId(parameters(''vmId''), - variables(''replicationEligibilityResultsType''), variables(''eligibilityResultsDefault''))]","protectedIntentName":"[concat(parameters(''vaultName''), - ''/'', guid(resourceGroup().id, last(split(parameters(''vmId''), ''/''))), - variables(''protectedItemSuffix''))]","recoveryAvSetName":"[if(empty(parameters(''avSetId'')), - variables(''defaultAvSet''), concat(last(split(parameters(''avSetId''), ''/'')), - ''-asr''))]","recoveryAvSetId":"[if(empty(parameters(''avSetId'')), '''', - resourceId(parameters(''targetResourceGroupName''), variables(''avSetType''), - variables(''recoveryAvSetName'')))]","recoveryAvType":"[if(not(empty(parameters(''avSetId''))), - ''AvailabilitySet'', if(greater(length(parameters(''vmZones'').rawValue), - 0), ''AvailabilityZone'', ''Single''))]","recoveryAvZone":"[if(greater(length(parameters(''vmZones'').rawValue), - 0), parameters(''targetZone''), '''')]","recoveryPPGName":"[if(empty(parameters(''ppgId'')), - variables(''defaultPPG''), concat(last(split(parameters(''ppgId''), ''/'')), - ''-asr''))]","recoveryPPGId":"[if(empty(parameters(''ppgId'')), '''', resourceId(parameters(''targetResourceGroupName''), - variables(''ppgType''), variables(''recoveryPPGName'')))]","targetResourceGroupId":"[concat(''/subscriptions/'', - parameters(''recoverySubscriptionId''), ''/resourceGroups/'', parameters(''targetResourceGroupName''))]"},"resources":[{"condition":"[not(empty(parameters(''ppgId'')))]","apiVersion":"[variables(''deploymentApiVersion'')]","name":"[variables(''ppgTemplateName64'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''targetResourceGroupName'')]","properties":{"mode":"Incremental","template":{"$schema":"[variables(''schemaLink'')]","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"condition":"[not(empty(parameters(''ppgId'')))]","type":"[variables(''ppgType'')]","name":"[variables(''recoveryPPGName'')]","apiVersion":"[variables(''ppgApiVersion'')]","location":"[parameters(''targetRegion'')]","properties":{"proximityPlacementGroupType":"[if(empty(parameters(''ppgId'')), - ''Standard'', reference(parameters(''ppgId''), variables(''ppgApiVersion'')).proximityPlacementGroupType)]"}}]},"parameters":{}}},{"condition":"[not(empty(parameters(''avSetId'')))]","apiVersion":"[variables(''deploymentApiVersion'')]","name":"[variables(''avSetTemplateName64'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''targetResourceGroupName'')]","properties":{"mode":"Incremental","template":{"$schema":"[variables(''schemaLink'')]","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"condition":"[not(empty(parameters(''avSetId'')))]","type":"[variables(''avSetType'')]","sku":{"name":"[if(empty(parameters(''avSetId'')), - ''Aligned'', reference(parameters(''avSetId''), variables(''avSetApiVersion''), - ''Full'').sku.name)]"},"name":"[variables(''recoveryAvSetName'')]","apiVersion":"[variables(''avSetApiVersion'')]","location":"[parameters(''targetRegion'')]","tags":{},"properties":{"platformUpdateDomainCount":"[if(empty(parameters(''avSetId'')), - ''5'', reference(parameters(''avSetId''), variables(''avSetApiVersion'')).platformUpdateDomainCount)]","platformFaultDomainCount":"[if(empty(parameters(''avSetId'')), - ''2'', reference(parameters(''avSetId''), variables(''avSetApiVersion'')).platformFaultDomainCount)]","proximityPlacementGroup":"[if(empty(parameters(''ppgId'')), - json(''null''), json(concat(''{'', ''\"id\"'', '':'', ''\"'', variables(''recoveryPPGId''), - ''\"'', ''}'')))]"}}]},"parameters":{}},"dependsOn":["[variables(''ppgTemplateName64'')]"]},{"apiVersion":"[variables(''deploymentApiVersion'')]","name":"[variables(''replicationProtectedIntentTemplateName64'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''vaultResourceGroupName'')]","properties":{"mode":"Incremental","template":{"$schema":"[variables(''schemaLink'')]","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"type":"Microsoft.RecoveryServices/vaults/replicationProtectionIntents","name":"[variables(''protectedIntentName'')]","apiVersion":"[parameters(''apiVersion'')]","properties":{"providerSpecificDetails":{"instanceType":"A2A","fabricObjectId":"[parameters(''vmId'')]","primaryLocation":"[parameters(''sourceRegion'')]","recoveryLocation":"[parameters(''targetRegion'')]","recoverySubscriptionId":"[parameters(''recoverySubscriptionId'')]","recoveryAvailabilityType":"[variables(''recoveryAvType'')]","recoveryAvailabilityZone":"[variables(''recoveryAvZone'')]","recoveryResourceGroupId":"[variables(''targetResourceGroupId'')]","recoveryAvailabilitySetCustomInput":"[if(empty(parameters(''avSetId'')), - json(''null''), json(concat(''{'', ''\"resourceType\"'', '':'', ''\"Existing\",'', - ''\"recoveryAvailabilitySetId\"'', '':'', ''\"'', variables(''recoveryAvSetId''), - ''\"'', ''}'')))]","recoveryProximityPlacementGroupCustomInput":"[if(empty(parameters(''ppgId'')), - json(''null''), json(concat(''{'', ''\"resourceType\"'', '':'', ''\"Existing\",'', - ''\"recoveryProximityPlacementGroupId\"'', '':'', ''\"'', variables(''recoveryPPGId''), - ''\"'', ''}'')))]","recoveryVirtualNetworkCustomInput":"[if(contains(parameters(''recoveryNetworkId''), - ''/''), json(concat(''{'', ''\"resourceType\"'', '':'', ''\"Existing\",'', - ''\"recoveryVirtualNetworkId\"'', '':'', ''\"'', parameters(''recoveryNetworkId''), - ''\"'', ''}'')), json(concat(''{'', ''\"resourceType\"'', '':'', ''\"New\",'', - ''\"recoveryVirtualNetworkName\"'', '':'', ''\"'', parameters(''recoveryNetworkId''), - ''\"'', ''}'')))]","vmDisks":[],"copy":[{"name":"vmManagedDisks","count":"[variables(''vmDiskCount'')]","input":{"diskId":"[if(equals(copyIndex(''vmManagedDisks''), - int(0)), reference(parameters(''vmId''), variables(''vmApiVersion'')).storageProfile.osDisk.managedDisk.Id, - variables(''vmDataDiskIds'')[sub(copyIndex(''vmManagedDisks''), int(1))])]","recoveryResourceGroupCustomInput":{"resourceType":"Existing","recoveryResourceGroupId":"[variables(''targetResourceGroupId'')]"}}}]}}}],"outputs":{"vmName":{"value":"[last(split(parameters(''vmId''), - ''/''))]","type":"string"},"availabilitySetUrl":{"value":"[if(empty(parameters(''avSetId'')), - '''', concat(variables(''portalLinkPrefix''), variables(''recoveryAvSetId'')))]","type":"string"},"proximityPlacementGroupUrl":{"value":"[if(empty(parameters(''ppgId'')), - '''', concat(variables(''portalLinkPrefix''), variables(''recoveryPPGId'')))]","type":"string"},"replicationEligibilityResults":{"value":"[reference(variables(''eligibilityResultsId''), - parameters(''apiVersion''))]","type":"Object"}}},"parameters":{}},"dependsOn":["[variables(''ppgTemplateName64'')]","[variables(''avSetTemplateName64'')]"]}],"outputs":{}},"parameters":{"apiVersion":{"value":"2018-07-10"},"avSetId":{"value":"[field(''Microsoft.Compute/virtualMachines/availabilitySet.id'')]"},"dataDiskIds":{"value":{"rawValue":"[field(''Microsoft.Compute/virtualMachines/storageProfile.dataDisks[*].managedDisk.id'')]","emptyArray":[]}},"osDiskId":{"value":"[field(''Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id'')]"},"ppgId":{"value":"[field(''Microsoft.Compute/virtualMachines/proximityPlacementGroup.id'')]"},"recoveryNetworkId":{"value":"[parameters(''recoveryNetworkId'')]"},"recoverySubscriptionId":{"value":"[subscription().subscriptionId]"},"sourceRegion":{"value":"[parameters(''sourceRegion'')]"},"sourceResourceGroupName":{"value":"[resourcegroup().Name]"},"targetRegion":{"value":"[parameters(''targetRegion'')]"},"targetResourceGroupName":{"value":"[last(split(parameters(''targetResourceGroupId''), - ''/''))]"},"targetZone":{"value":"[parameters(''targetZone'')]"},"vaultName":{"value":"[last(split(parameters(''vaultId''), - ''/''))]"},"vaultResourceGroupName":{"value":"[last(split(parameters(''vaultResourceGroupId''), - ''/''))]"},"vmId":{"value":"[field(''id'')]"},"vmZones":{"value":{"rawValue":"[field(''Microsoft.Compute/virtualMachines/zones'')]","emptyArray":[]}}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac34a73f-9fa5-4067-9247-a3ecae514468","type":"Microsoft.Authorization/policyDefinitions","name":"ac34a73f-9fa5-4067-9247-a3ecae514468"}' - headers: - cache-control: - - no-cache - content-length: - - '14592' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ac4a19c2-fa67-49b4-8ae5-0b2e78c49457'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Role-Based Access Control (RBAC) should - be used on Kubernetes Services","policyType":"BuiltIn","mode":"All","description":"To - provide granular filtering on the actions that users can perform, use Role-Based - Access Control (RBAC) to manage permissions in Kubernetes Service Clusters - and configure relevant authorization policies.","metadata":{"version":"1.0.2","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/enableRBAC","exists":"false"},{"field":"Microsoft.ContainerService/managedClusters/enableRBAC","equals":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac4a19c2-fa67-49b4-8ae5-0b2e78c49457","type":"Microsoft.Authorization/policyDefinitions","name":"ac4a19c2-fa67-49b4-8ae5-0b2e78c49457"}' - headers: - cache-control: - - no-cache - content-length: - - '1116' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Synapse workspaces to have - auditing enabled","policyType":"BuiltIn","mode":"Indexed","description":"To - ensure the operations performed against your SQL assets are captured, Synapse - workspaces should have auditing enabled. This is sometimes required for compliance - with regulatory standards.","metadata":{"version":"1.1.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"retentionDays":{"type":"Integer","metadata":{"description":"The - value in days of the retention period (0 indicates unlimited retention)","displayName":"Retention - days (optional, 180 days if unspecified)"}},"storageAccountsResourceGroup":{"type":"String","metadata":{"displayName":"Resource - group name for storage accounts","description":"Auditing writes database events - to an audit log in your Azure Storage account (a storage account will be created - in each region where a Synapse workspace is created that will be shared by - all Synapse workspaces in that region). Important - for proper operation of - Auditing do not delete or rename the resource group or the storage accounts.","strongType":"existingResourceGroups","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Synapse/workspaces/auditingSettings/state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"workspaceName":{"type":"string"},"auditRetentionDays":{"type":"int"},"storageAccountsResourceGroup":{"type":"string"},"location":{"type":"string"}},"variables":{"retentionDays":"[parameters(''auditRetentionDays'')]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - parameters(''location''), parameters(''storageAccountsResourceGroup''))]","locationCode":"[substring(parameters(''location''), - 0, 3)]","storageName":"[tolower(concat(''workspaceaudit'', variables(''locationCode''), - variables(''uniqueStorage'')))]","createStorageAccountDeploymentName":"[concat(''workspaceAuditingStorageAccount-'', - uniqueString(variables(''locationCode''), deployment().name))]"},"resources":[{"apiVersion":"2017-05-10","name":"[variables(''createStorageAccountDeploymentName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''storageAccountsResourceGroup'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"storageName":{"value":"[variables(''storageName'')]"}},"template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storageName":{"type":"string"}},"resources":[{"type":"Microsoft.Storage/storageAccounts","apiVersion":"2017-10-01","name":"[parameters(''storageName'')]","location":"[parameters(''location'')]","sku":{"name":"Standard_LRS"},"kind":"BlobStorage","tags":{"createdBy":"Azure - Policy - Configure Synapse workspaces to have auditing enabled"},"properties":{"accessTier":"Hot","supportsHttpsTrafficOnly":true}}],"outputs":{"storageAccountEndPoint":{"type":"string","value":"[reference(parameters(''storageName'')).primaryEndpoints.blob]"}}}}},{"name":"[concat(parameters(''workspaceName''), - ''/Default'')]","type":"Microsoft.Synapse/workspaces/auditingSettings","apiVersion":"2017-03-01-preview","dependsOn":["[resourceId(''Microsoft.Resources/deployments/'', - variables(''createStorageAccountDeploymentName''))]"],"properties":{"state":"Enabled","storageEndpoint":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountEndPoint.value]","storageAccountAccessKey":"[listKeys(resourceId(parameters(''storageAccountsResourceGroup''), - ''Microsoft.Storage/storageAccounts'', variables(''storageName'')), ''2017-06-01'').keys[0].value]","retentionDays":"[variables(''retentionDays'')]","storageAccountSubscriptionId":"[subscription().subscriptionId]","isStorageSecondaryKeyInUse":false}}]},"parameters":{"workspaceName":{"value":"[field(''name'')]"},"auditRetentionDays":{"value":"[parameters(''retentionDays'')]"},"storageAccountsResourceGroup":{"value":"[parameters(''storageAccountsResourceGroup'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee","type":"Microsoft.Authorization/policyDefinitions","name":"ac7891a4-ac7a-4ba0-9ae9-c923e5a225ee"}' - headers: - cache-control: - - no-cache - content-length: - - '5035' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ac7e5fc0-c029-4b12-91d4-a8500ce697f9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - if ''environment'' tag value in allowed values","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation if the ''environment'' tag is set to one of the following - values: production, dev, test, staging","metadata":{"version":"1.0.0-deprecated","category":"Tags","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags[''environment'']","in":["production","dev","test","staging"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ac7e5fc0-c029-4b12-91d4-a8500ce697f9","type":"Microsoft.Authorization/policyDefinitions","name":"ac7e5fc0-c029-4b12-91d4-a8500ce697f9"}' - headers: - cache-control: - - no-cache - content-length: - - '707' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ae5d2f14-d830-42b6-9899-df6cfe9c71a3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Server should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any SQL Server not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.Sql/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ae5d2f14-d830-42b6-9899-df6cfe9c71a3","type":"Microsoft.Authorization/policyDefinitions","name":"ae5d2f14-d830-42b6-9899-df6cfe9c71a3"}' - headers: - cache-control: - - no-cache - content-length: - - '961' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ae89ebca-1c92-4898-ac2c-9f63decb045c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Guest Configuration extension should - be installed on your machines","policyType":"BuiltIn","mode":"Indexed","description":"To - ensure secure configurations of in-guest settings of your machine, install - the Guest Configuration extension. In-guest settings that the extension monitors - include the configuration of the operating system, application configuration - or presence, and environment settings. Once installed, in-guest policies will - be available such as ''Windows Exploit guard should be enabled''. Learn more - at https://aka.ms/gcpol.","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack","microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ae89ebca-1c92-4898-ac2c-9f63decb045c","type":"Microsoft.Authorization/policyDefinitions","name":"ae89ebca-1c92-4898-ac2c-9f63decb045c"}' - headers: - cache-control: - - no-cache - content-length: - - '6448' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''aeb23562-188d-47cb-80b8-551f16ef9fff'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:46:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Email notifications to - admins should be enabled in SQL Managed Instance advanced data security settings","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that ''email notification to admins and subscription owners'' is enabled in - SQL Managed Instance advanced threat protection settings. This setting ensures - that any detections of anomalous activities on SQL Managed Instance are reported - as soon as possible to the admins.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/emailAccountAdmins","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/aeb23562-188d-47cb-80b8-551f16ef9fff","type":"Microsoft.Authorization/policyDefinitions","name":"aeb23562-188d-47cb-80b8-551f16ef9fff"}' - headers: - cache-control: - - no-cache - content-length: - - '1288' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:46:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''af35e2a4-ef96-44e7-a9ae-853dd97032c4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Spring Cloud should use network - injection","policyType":"BuiltIn","mode":"Indexed","description":"Azure Spring - Cloud instances should use virtual network injection for the following purposes: - 1. Isolate Azure Spring Cloud from Internet. 2. Enable Azure Spring Cloud - to interact with systems in either on premises data centers or Azure service - in other virtual networks. 3. Empower customers to control inbound and outbound - network communications for Azure Spring Cloud.","metadata":{"version":"1.0.0","category":"App - Platform"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]},"evaluatedSkuNames":{"type":"Array","metadata":{"displayName":"Azure - Spring Cloud SKU Names","description":"List of Azure Spring Cloud SKUs against - which this policy will be evaluated."},"allowedValues":["Standard"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.AppPlatform/Spring"},{"field":"Microsoft.AppPlatform/Spring/sku.tier","in":"[parameters(''evaluatedSkuNames'')]"},{"field":"Microsoft.AppPlatform/Spring/networkProfile.serviceRuntimeSubnetId","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af35e2a4-ef96-44e7-a9ae-853dd97032c4","type":"Microsoft.Authorization/policyDefinitions","name":"af35e2a4-ef96-44e7-a9ae-853dd97032c4"}' - headers: - cache-control: - - no-cache - content-length: - - '1477' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''af6cd1bd-1635-48cb-bde7-5b15693900b9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Monitor missing Endpoint Protection in - Azure Security Center","policyType":"BuiltIn","mode":"All","description":"Servers - without an installed Endpoint Protection agent will be monitored by Azure - Security Center as recommendations","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"3bcd234d-c9c7-c2a2-89e0-c01f419c1a8a","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af6cd1bd-1635-48cb-bde7-5b15693900b9","type":"Microsoft.Authorization/policyDefinitions","name":"af6cd1bd-1635-48cb-bde7-5b15693900b9"}' - headers: - cache-control: - - no-cache - content-length: - - '1077' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''af8051bf-258b-44e2-a2bf-165330459f9d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Monitor unaudited SQL servers - in Azure Security Center","policyType":"BuiltIn","mode":"All","description":"SQL - servers which don''t have SQL auditing turned on will be monitored by Azure - Security Center as recommendations. This policy is deprecated and replaced - by the following policy: ''Auditing should be enabled on advanced data security - settings on SQL Server''","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.SQL/servers"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"auditing","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/af8051bf-258b-44e2-a2bf-165330459f9d","type":"Microsoft.Authorization/policyDefinitions","name":"af8051bf-258b-44e2-a2bf-165330459f9d"}' - headers: - cache-control: - - no-cache - content-length: - - '1198' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b02aacc0-b073-424e-8298-42b22829ee0a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Activity log should be retained for at - least one year","policyType":"BuiltIn","mode":"All","description":"This policy - audits the activity log if the retention is not set for 365 days or forever - (retention days set to 0).","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/logProfiles","existenceCondition":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/logProfiles/retentionPolicy.enabled","equals":"true"},{"field":"Microsoft.Insights/logProfiles/retentionPolicy.days","equals":"365"}]},{"allOf":[{"field":"Microsoft.Insights/logProfiles/retentionPolicy.enabled","equals":"false"},{"field":"Microsoft.Insights/logProfiles/retentionPolicy.days","equals":"0"}]}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b02aacc0-b073-424e-8298-42b22829ee0a","type":"Microsoft.Authorization/policyDefinitions","name":"b02aacc0-b073-424e-8298-42b22829ee0a"}' - headers: - cache-control: - - no-cache - content-length: - - '1247' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b0ab5b05-1c98-40f7-bb9e-dc568e41b501'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure HDInsight clusters should be injected - into a virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Injecting - Azure HDInsight clusters in a virtual network unlocks advanced HDInsight networking - and security features and provides you with control over your network security - configuration.","metadata":{"version":"1.0.0","category":"HDInsight"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled","Deny"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"count":{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*]","where":{"anyOf":[{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.id","exists":false},{"field":"Microsoft.HDInsight/clusters/computeProfile.roles[*].virtualNetworkProfile.subnet","exists":false}]}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0ab5b05-1c98-40f7-bb9e-dc568e41b501","type":"Microsoft.Authorization/policyDefinitions","name":"b0ab5b05-1c98-40f7-bb9e-dc568e41b501"}' - headers: - cache-control: - - no-cache - content-length: - - '1228' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b0e86710-7fb7-4a6c-a064-32e9b829509e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure private DNS zones - for private endpoints connect to Azure SignalR Service","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure SignalR - Service resource. Learn more at: https://aka.ms/asrs/privatelink.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone Id","description":"Private DNS zone to integrate with private endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"signalr"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink-service-signalr-net","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0e86710-7fb7-4a6c-a064-32e9b829509e","type":"Microsoft.Authorization/policyDefinitions","name":"b0e86710-7fb7-4a6c-a064-32e9b829509e"}' - headers: - cache-control: - - no-cache - content-length: - - '2455' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b0f33259-77d7-4c9e-aac6-3aabcfae693c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Management ports of virtual machines - should be protected with just-in-time network access control","policyType":"BuiltIn","mode":"All","description":"Possible - network Just In Time (JIT) access will be monitored by Azure Security Center - as recommendations","metadata":{"version":"3.0.0","category":"Security Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachines"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"805651bc-6ecd-4c73-9b55-97a19d0582d0","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b0f33259-77d7-4c9e-aac6-3aabcfae693c","type":"Microsoft.Authorization/policyDefinitions","name":"b0f33259-77d7-4c9e-aac6-3aabcfae693c"}' - headers: - cache-control: - - no-cache - content-length: - - '1061' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b18175dd-c599-4c64-83ba-bb018a06d35b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Linux VMs that do not have the passwd file permissions set to 0644","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the passwd file permissions - set to 0644. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b18175dd-c599-4c64-83ba-bb018a06d35b","type":"Microsoft.Authorization/policyDefinitions","name":"b18175dd-c599-4c64-83ba-bb018a06d35b"}' - headers: - cache-control: - - no-cache - content-length: - - '4521' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"SQL Database should avoid using GRS backup - redundancy","policyType":"BuiltIn","mode":"Indexed","description":"Databases - should avoid using the default geo-redundant storage for backups, if data - residency rules require data to stay within a specific region. Note: Azure - Policy is not enforced when creating a database using T-SQL. If not explicitly - specified, database with geo-redundant backup storage is created via T-SQL.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"Microsoft.Sql/servers/databases/edition","notEquals":"DataWarehouse"},{"not":{"anyOf":[{"field":"Microsoft.Sql/servers/databases/storageAccountType","equals":"LRS"},{"field":"Microsoft.Sql/servers/databases/storageAccountType","equals":"ZRS"}]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13","type":"Microsoft.Authorization/policyDefinitions","name":"b219b9cf-f672-4f96-9ab0-f5a3ac5e1c13"}' - headers: - cache-control: - - no-cache - content-length: - - '1265' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b278e460-7cfc-4451-8294-cccc40a940d7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"All authorization rules except RootManageSharedAccessKey - should be removed from Event Hub namespace","policyType":"BuiltIn","mode":"All","description":"Event - Hub clients should not use a namespace level access policy that provides access - to all queues and topics in a namespace. To align with the least privilege - security model, you should create access policies at the entity level for - queues and topics to provide access to only the specific entity","metadata":{"version":"1.0.1","category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces/authorizationRules"},{"field":"name","notEquals":"RootManageSharedAccessKey"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b278e460-7cfc-4451-8294-cccc40a940d7","type":"Microsoft.Authorization/policyDefinitions","name":"b278e460-7cfc-4451-8294-cccc40a940d7"}' - headers: - cache-control: - - no-cache - content-length: - - '1156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b27a0cbd-a167-4dfa-ae64-4337be671140'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Inherit a tag from the subscription","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value from the containing subscription when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.","metadata":{"category":"Tags","version":"1.0.0"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[subscription().tags[parameters(''tagName'')]]"},{"value":"[subscription().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[subscription().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b27a0cbd-a167-4dfa-ae64-4337be671140","type":"Microsoft.Authorization/policyDefinitions","name":"b27a0cbd-a167-4dfa-ae64-4337be671140"}' - headers: - cache-control: - - no-cache - content-length: - - '1220' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b2fc8f91-866d-4434-9089-5ebfe38d6fd8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows web servers that are not using secure communication protocols","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows web servers - that are not using secure communication protocols (TLS 1.1 or TLS 1.2). It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"MinimumTLSVersion":{"type":"String","metadata":{"displayName":"[Deprecated]: - Minimum TLS version","description":"The minimum TLS protocol version that - should be enabled. Windows web servers with lower TLS versions will be marked - as non-compliant."},"allowedValues":["1.1","1.2"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AuditSecureProtocol","existenceCondition":{"anyOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[SecureWebServer]s1;MinimumTLSVersion'', - ''='', parameters(''MinimumTLSVersion'')))]"},{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":""},{"value":"[parameters(''MinimumTLSVersion'')]","equals":"1.1"}]}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AuditSecureProtocol"},"MinimumTLSVersion":{"value":"[parameters(''MinimumTLSVersion'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MinimumTLSVersion":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[SecureWebServer]s1;MinimumTLSVersion","value":"[parameters(''MinimumTLSVersion'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[SecureWebServer]s1;MinimumTLSVersion","value":"[parameters(''MinimumTLSVersion'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b2fc8f91-866d-4434-9089-5ebfe38d6fd8","type":"Microsoft.Authorization/policyDefinitions","name":"b2fc8f91-866d-4434-9089-5ebfe38d6fd8"}' - headers: - cache-control: - - no-cache - content-length: - - '6738' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b35dddd9-daf7-423b-8375-5a5b86806d5a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure File Sync with private - endpoints","policyType":"BuiltIn","mode":"Indexed","description":"A private - endpoint is deployed for the indicated Storage Sync Service resource. This - enables you to address your Storage Sync Service resource from within the - private IP address space of your organization''s network, rather than through - the internet-accessible public endpoint. The existence of one or more private - endpoints by themselves does not disable the public endpoint.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A - subnet with private endpoint network policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StorageSync/storageSyncServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections","existenceCondition":{"field":"Microsoft.StorageSync/storageSyncServices/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["afs"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b35dddd9-daf7-423b-8375-5a5b86806d5a","type":"Microsoft.Authorization/policyDefinitions","name":"b35dddd9-daf7-423b-8375-5a5b86806d5a"}' - headers: - cache-control: - - no-cache - content-length: - - '3598' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b3802d79-dd88-4bce-b81d-780218e48280'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Logon-Logoff''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Logon-Logoff''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b3802d79-dd88-4bce-b81d-780218e48280","type":"Microsoft.Authorization/policyDefinitions","name":"b3802d79-dd88-4bce-b81d-780218e48280"}' - headers: - cache-control: - - no-cache - content-length: - - '3265' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b3884c81-31aa-473d-a9bb-9466fe0ec2a0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - to a Log Analytics workspace to be enabled on Azure Key Vault Managed HSM","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Azure Key Vault Managed HSM to stream to a regional - Log Analytics workspace when any Azure Key Vault Managed HSM which is missing - this diagnostic settings is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Specify the Log Analytics workspace to - send log to. If this workspace is outside of the scope of the assignment you - must manually grant ''Log Analytics Contributor'' permissions (or similar) - to the policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.KeyVault/managedHsms/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b3884c81-31aa-473d-a9bb-9466fe0ec2a0","type":"Microsoft.Authorization/policyDefinitions","name":"b3884c81-31aa-473d-a9bb-9466fe0ec2a0"}' - headers: - cache-control: - - no-cache - content-length: - - '3676' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b4330a05-a843-4bc8-bf9a-cacce50c67f4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Search services should - be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes; when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Search/searchServices"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4330a05-a843-4bc8-bf9a-cacce50c67f4","type":"Microsoft.Authorization/policyDefinitions","name":"b4330a05-a843-4bc8-bf9a-cacce50c67f4"}' - headers: - cache-control: - - no-cache - content-length: - - '1938' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b48334a4-911b-4084-b1ab-3e6a4e50b951'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Sockets state - for an API App","policyType":"BuiltIn","mode":"All","description":"The Web - Sockets protocol is vulnerable to different types of security threats. Use - of Web Sockets within an API app must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b48334a4-911b-4084-b1ab-3e6a4e50b951","type":"Microsoft.Authorization/policyDefinitions","name":"b48334a4-911b-4084-b1ab-3e6a4e50b951"}' - headers: - cache-control: - - no-cache - content-length: - - '1169' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b4a4d1eb-0263-441b-84cb-a44073d8372d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Shutdown''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Shutdown'' for allowing shutdown without logon and clearing the - virtual memory pagefile. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsShutdown","version":"1.*","configurationParameter":{"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":"Shutdown: - Allow system to be shut down without having to log on;ExpectedValue","ShutdownClearVirtualMemoryPagefile":"Shutdown: - Clear virtual memory pagefile;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn":{"type":"String","metadata":{"displayName":"Shutdown: - Allow system to be shut down without having to log on","description":"Specifies - whether a computer can be shut down when a user is not logged on. If this - policy setting is enabled, the shutdown command is available on the Windows - logon screen."}},"ShutdownClearVirtualMemoryPagefile":{"type":"String","metadata":{"displayName":"Shutdown: - Clear virtual memory pagefile","description":"Specifies whether the virtual - memory pagefile is cleared when the system is shut down. When this policy - setting is enabled, the system pagefile is cleared each time that the system - shuts down properly. For systems with large amounts of RAM, this could result - in substantial time needed to complete the shutdown."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsShutdown","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Shutdown: - Allow system to be shut down without having to log on;ExpectedValue'', ''='', - parameters(''ShutdownAllowSystemToBeShutDownWithoutHavingToLogOn''), '','', - ''Shutdown: Clear virtual memory pagefile;ExpectedValue'', ''='', parameters(''ShutdownClearVirtualMemoryPagefile'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4a4d1eb-0263-441b-84cb-a44073d8372d","type":"Microsoft.Authorization/policyDefinitions","name":"b4a4d1eb-0263-441b-84cb-a44073d8372d"}' - headers: - cache-control: - - no-cache - content-length: - - '5261' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b4ac1030-89c5-4697-8e00-28b5ba6a8811'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Stack Edge devices should use double-encryption","policyType":"BuiltIn","mode":"Indexed","description":"To - secure the data at rest on the device, ensure it''s double-encrypted, the - access to data is controlled, and once the device is deactivated, the data - is securely erased off the data disks. Double encryption is the use of two - layers of encryption: BitLocker XTS-AES 256-bit encryption on the data volumes - and built-in encryption of the hard drives. Learn more in the security overview - documentation for the specific Stack Edge device.","metadata":{"version":"1.0.0","category":"Azure - Stack Edge"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy."},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataBoxEdge/DataBoxEdgeDevices"},{"field":"Microsoft.DataboxEdge/DataBoxEdgeDevices/sku.name","notIn":["TEA_1Node","TEA_1Node_UPS","TEA_1Node_Heater","TEA_1Node_UPS_Heater","TEA_4Node_Heater","TEA_4Node_UPS_Heater","TMA","EdgePR_Base","EdgePR_Base_UPS","EdgeMR_Mini"]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4ac1030-89c5-4697-8e00-28b5ba6a8811","type":"Microsoft.Authorization/policyDefinitions","name":"b4ac1030-89c5-4697-8e00-28b5ba6a8811"}' - headers: - cache-control: - - no-cache - content-length: - - '1384' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b4d66858-c922-44e3-9566-5cdb7a7be744'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: A security contact phone - number should be provided for your subscription","policyType":"BuiltIn","mode":"All","description":"Enter - a phone number to receive notifications when Azure Security Center detects - compromised resources - This policy is deprecated because phone numbers are - no longer used in any scenario by Azure Security Center","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/securityContacts","existenceCondition":{"field":"Microsoft.Security/securityContacts/phone","notEquals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b4d66858-c922-44e3-9566-5cdb7a7be744","type":"Microsoft.Authorization/policyDefinitions","name":"b4d66858-c922-44e3-9566-5cdb7a7be744"}' - headers: - cache-control: - - no-cache - content-length: - - '1141' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b52376f7-9612-48a1-81cd-1ffe4b61032c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for PostgreSQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Disable - the public network access property to improve security and ensure your Azure - Database for PostgreSQL can only be accessed from a private endpoint. This - configuration disables access from any public address space outside of Azure - IP range, and denies all logins that match IP or virtual network-based firewall - rules.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b52376f7-9612-48a1-81cd-1ffe4b61032c","type":"Microsoft.Authorization/policyDefinitions","name":"b52376f7-9612-48a1-81cd-1ffe4b61032c"}' - headers: - cache-control: - - no-cache - content-length: - - '1121' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b54ed75b-3e1a-44ac-a333-05ba39b99ff0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Service Fabric clusters should only use - Azure Active Directory for client authentication","policyType":"BuiltIn","mode":"Indexed","description":"Audit - usage of client authentication only via Azure Active Directory in Service - Fabric","metadata":{"version":"1.1.0","category":"Service Fabric"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ServiceFabric/clusters"},{"anyOf":[{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","exists":"false"},{"field":"Microsoft.ServiceFabric/clusters/azureActiveDirectory.tenantId","equals":""}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b54ed75b-3e1a-44ac-a333-05ba39b99ff0","type":"Microsoft.Authorization/policyDefinitions","name":"b54ed75b-3e1a-44ac-a333-05ba39b99ff0"}' - headers: - cache-control: - - no-cache - content-length: - - '1060' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b5f04e03-92a3-4b09-9410-2cc5e5047656'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Advanced Threat Protection for - Cosmos DB Accounts","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables Advanced Threat Protection across Cosmos DB accounts.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/advancedThreatProtectionSettings","name":"current","existenceCondition":{"field":"Microsoft.Security/advancedThreatProtectionSettings/isEnabled","equals":"true"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/fb1c8493-542b-48eb-b624-b4c8fea62acd"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"cosmosDbAccountName":{"type":"string"}},"resources":[{"apiVersion":"2019-01-01","type":"Microsoft.DocumentDB/databaseAccounts/providers/advancedThreatProtectionSettings","name":"[concat(parameters(''cosmosDbAccountName''), - ''/Microsoft.Security/current'')]","properties":{"isEnabled":true}}]},"parameters":{"cosmosDbAccountName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b5f04e03-92a3-4b09-9410-2cc5e5047656","type":"Microsoft.Authorization/policyDefinitions","name":"b5f04e03-92a3-4b09-9410-2cc5e5047656"}' - headers: - cache-control: - - no-cache - content-length: - - '1648' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Diagnostic logs in App Services should - be enabled","policyType":"BuiltIn","mode":"All","description":"Audit enabling - of diagnostic logs on the app. This enables you to recreate activity trails - for investigation purposes if a security incident occurs or your network is - compromised","metadata":{"version":"2.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","notContains":"functionapp"},{"field":"kind","notContains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"allOf":[{"field":"Microsoft.Web/sites/config/detailedErrorLoggingEnabled","equals":"true"},{"field":"Microsoft.Web/sites/config/httpLoggingEnabled","equals":"true"},{"field":"Microsoft.Web/sites/config/requestTracingEnabled","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0","type":"Microsoft.Authorization/policyDefinitions","name":"b607c5de-e7d9-4eee-9e5c-83f1bcee4fa0"}' - headers: - cache-control: - - no-cache - content-length: - - '1273' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b609e813-3156-4079-91fa-a8494c1471c4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure CosmosDB accounts with private - endpoints ","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - CosmosDB account, you can reduce data leakage risks. Learn more about private - links at: https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"privateEndpointSubnetId","description":"A - subnet in the location","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"privateEndpointGroupId":{"type":"String","metadata":{"displayName":"privateEndpointGroupId","description":"A - group Id for the private endpoint"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.DocumentDB/databaseAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"privateEndpointGroupId":{"value":"[parameters(''privateEndpointGroupId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"String"},"serviceId":{"type":"String"},"privateEndpointSubnetId":{"type":"String"},"privateEndpointGroupId":{"type":"String"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"privateEndpointGroupId":{"type":"String"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["[parameters(''privateEndpointGroupId'')]"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"privateEndpointGroupId":{"value":"[parameters(''privateEndpointGroupId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b609e813-3156-4079-91fa-a8494c1471c4","type":"Microsoft.Authorization/policyDefinitions","name":"b609e813-3156-4079-91fa-a8494c1471c4"}' - headers: - cache-control: - - no-cache - content-length: - - '4019' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b698b005-b660-4837-b833-a7aaab26ddba'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Cognitive Search services - with private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to - your Azure Cognitive Search service, you can reduce data leakage risks. Learn - more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"version":"1.0.0","category":"Search"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet ID","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"field":"Microsoft.Search/searchServices/sku.name","notEquals":"free"},{"field":"Microsoft.Search/searchServices/publicNetworkAccess","equals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Search/searchServices/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Search/searchServices/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/7ca78c08-252a-4471-8644-bb5ff32d4ba0"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["searchService"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b698b005-b660-4837-b833-a7aaab26ddba","type":"Microsoft.Authorization/policyDefinitions","name":"b698b005-b660-4837-b833-a7aaab26ddba"}' - headers: - cache-control: - - no-cache - content-length: - - '3787' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b6e2945c-0b7b-40f5-9233-7a5323b5cdc6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Network Watcher should be enabled","policyType":"BuiltIn","mode":"All","description":"Network - Watcher is a regional service that enables you to monitor and diagnose conditions - at a network scenario level in, to, and from Azure. Scenario level monitoring - enables you to diagnose problems at an end to end network level view. Network - diagnostic and visualization tools available with Network Watcher help you - understand, diagnose, and gain insights to your network in Azure.","metadata":{"version":"2.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"listOfLocations":{"type":"Array","metadata":{"displayName":"Locations","description":"Audit - if Network Watcher is not enabled for region(s).","strongType":"location"}},"resourceGroupName":{"type":"String","metadata":{"displayName":"NetworkWatcher - resource group name","description":"Name of the resource group of NetworkWatcher, - such as NetworkWatcherRG. This is the resource group where the Network Watchers - are located."}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/networkWatchers","resourceGroupName":"[parameters(''resourceGroupName'')]","existenceCondition":{"field":"location","in":"[parameters(''listOfLocations'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b6e2945c-0b7b-40f5-9233-7a5323b5cdc6","type":"Microsoft.Authorization/policyDefinitions","name":"b6e2945c-0b7b-40f5-9233-7a5323b5cdc6"}' - headers: - cache-control: - - no-cache - content-length: - - '1682' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b79fa14e-238a-4c2d-b376-442ce508fc84'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure diagnostic settings - for SQL Databases to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for SQL Databases to stream resource logs to a Log - Analytics workspace when any SQL Database which is missing this diagnostic - settings is created or updated.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"diagnosticsSettingNameToUse":{"type":"String","metadata":{"displayName":"Setting - name","description":"Name of the diagnostic settings."}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select the Log Analytics workspace from - dropdown list","strongType":"omsWorkspace","assignPermissions":true}},"QueryStoreRuntimeStatisticsEnabled":{"type":"String","metadata":{"displayName":"QueryStoreRuntimeStatistics - - Enabled","description":"Whether to stream QueryStoreRuntimeStatistics logs - to the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"QueryStoreWaitStatisticsEnabled":{"type":"String","metadata":{"displayName":"QueryStoreWaitStatistics - - Enabled","description":"Whether to stream QueryStoreWaitStatistics logs - to the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"ErrorsEnabled":{"type":"String","metadata":{"displayName":"Errors - - Enabled","description":"Whether to stream Errors logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"DatabaseWaitStatisticsEnabled":{"type":"String","metadata":{"displayName":"DatabaseWaitStatistics - - Enabled","description":"Whether to stream DatabaseWaitStatistics logs to - the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"BlocksEnabled":{"type":"String","metadata":{"displayName":"Blocks - - Enabled","description":"Whether to stream Blocks logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"SQLInsightsEnabled":{"type":"String","metadata":{"displayName":"SQLInsights - - Enabled","description":"Whether to stream SQLInsights logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"SQLSecurityAuditEventsEnabled":{"type":"String","metadata":{"displayName":"SQLSecurityAuditEvents - - Enabled","description":"Whether to stream SQLSecurityAuditEvents logs to - the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"TimeoutsEnabled":{"type":"String","metadata":{"displayName":"Timeouts - - Enabled","description":"Whether to stream Timeouts logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"AutomaticTuningEnabled":{"type":"String","metadata":{"displayName":"AutomaticTuning - - Enabled","description":"Whether to stream AutomaticTuning logs to the Log - Analytics workspace - True or False"},"allowedValues":["True","False"]},"DeadlocksEnabled":{"type":"String","metadata":{"displayName":"Deadlocks - - Enabled","description":"Whether to stream Deadlocks logs to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"Basic":{"type":"String","metadata":{"displayName":"Basic - (metric) - Enabled","description":"Whether to stream Basic metrics to the - Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"InstanceAndAppAdvanced":{"type":"String","metadata":{"displayName":"InstanceAndAppAdvanced - (metric) - Enabled","description":"Whether to stream InstanceAndAppAdvanced - metrics to the Log Analytics workspace - True or False"},"allowedValues":["True","False"]},"WorkloadManagement":{"type":"String","metadata":{"displayName":"WorkloadManagement - (metric) - Enabled","description":"Whether to stream WorkloadManagement metrics - to the Log Analytics workspace - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers/databases"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"True"},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","matchInsensitively":"[parameters(''logAnalytics'')]"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"diagnosticsSettingNameToUse":{"type":"string"},"resourceName":{"type":"string"},"logAnalytics":{"type":"string"},"location":{"type":"string"},"Basic":{"type":"string"},"InstanceAndAppAdvanced":{"type":"string"},"WorkloadManagement":{"type":"string"},"QueryStoreRuntimeStatisticsEnabled":{"type":"string"},"QueryStoreWaitStatisticsEnabled":{"type":"string"},"ErrorsEnabled":{"type":"string"},"DatabaseWaitStatisticsEnabled":{"type":"string"},"BlocksEnabled":{"type":"string"},"SQLInsightsEnabled":{"type":"string"},"SQLSecurityAuditEventsEnabled":{"type":"string"},"TimeoutsEnabled":{"type":"string"},"AutomaticTuningEnabled":{"type":"string"},"DeadlocksEnabled":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Sql/servers/databases/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''diagnosticsSettingNameToUse''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"Basic","enabled":"[parameters(''Basic'')]"},{"category":"InstanceAndAppAdvanced","enabled":"[parameters(''InstanceAndAppAdvanced'')]"},{"category":"WorkloadManagement","enabled":"[parameters(''WorkloadManagement'')]"}],"logs":[{"category":"SQLInsights","enabled":"[parameters(''SQLInsightsEnabled'')]"},{"category":"AutomaticTuning","enabled":"[parameters(''AutomaticTuningEnabled'')]"},{"category":"QueryStoreRuntimeStatistics","enabled":"[parameters(''QueryStoreRuntimeStatisticsEnabled'')]"},{"category":"QueryStoreWaitStatistics","enabled":"[parameters(''QueryStoreWaitStatisticsEnabled'')]"},{"category":"Errors","enabled":"[parameters(''ErrorsEnabled'')]"},{"category":"DatabaseWaitStatistics","enabled":"[parameters(''DatabaseWaitStatisticsEnabled'')]"},{"category":"Timeouts","enabled":"[parameters(''TimeoutsEnabled'')]"},{"category":"Blocks","enabled":"[parameters(''BlocksEnabled'')]"},{"category":"Deadlocks","enabled":"[parameters(''DeadlocksEnabled'')]"}]}}],"outputs":{}},"parameters":{"Basic":{"value":"[parameters(''Basic'')]"},"InstanceAndAppAdvanced":{"value":"[parameters(''InstanceAndAppAdvanced'')]"},"diagnosticsSettingNameToUse":{"value":"[parameters(''diagnosticsSettingNameToUse'')]"},"WorkloadManagement":{"value":"[parameters(''WorkloadManagement'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''fullName'')]"},"QueryStoreRuntimeStatisticsEnabled":{"value":"[parameters(''QueryStoreRuntimeStatisticsEnabled'')]"},"QueryStoreWaitStatisticsEnabled":{"value":"[parameters(''QueryStoreWaitStatisticsEnabled'')]"},"ErrorsEnabled":{"value":"[parameters(''ErrorsEnabled'')]"},"DatabaseWaitStatisticsEnabled":{"value":"[parameters(''DatabaseWaitStatisticsEnabled'')]"},"BlocksEnabled":{"value":"[parameters(''BlocksEnabled'')]"},"SQLInsightsEnabled":{"value":"[parameters(''SQLInsightsEnabled'')]"},"SQLSecurityAuditEventsEnabled":{"value":"[parameters(''SQLSecurityAuditEventsEnabled'')]"},"TimeoutsEnabled":{"value":"[parameters(''TimeoutsEnabled'')]"},"AutomaticTuningEnabled":{"value":"[parameters(''AutomaticTuningEnabled'')]"},"DeadlocksEnabled":{"value":"[parameters(''DeadlocksEnabled'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b79fa14e-238a-4c2d-b376-442ce508fc84","type":"Microsoft.Authorization/policyDefinitions","name":"b79fa14e-238a-4c2d-b376-442ce508fc84"}' - headers: - cache-control: - - no-cache - content-length: - - '8296' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b7ddfbdc-1260-477d-91fd-98bd9be789a6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"API App should only be accessible over - HTTPS","policyType":"BuiltIn","mode":"Indexed","description":"Use of HTTPS - ensures server/service authentication and protects data in transit from network - layer eavesdropping attacks.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"},{"field":"Microsoft.Web/sites/httpsOnly","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b7ddfbdc-1260-477d-91fd-98bd9be789a6","type":"Microsoft.Authorization/policyDefinitions","name":"b7ddfbdc-1260-477d-91fd-98bd9be789a6"}' - headers: - cache-control: - - no-cache - content-length: - - '895' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b821191b-3a12-44bc-9c38-212138a29ff3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs if the Administrators group doesn''t contain only specified - members","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - in which the Administrators group does not contain only the specified members. - It also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"Members":{"type":"String","metadata":{"displayName":"[Deprecated]: - Members","description":"A semicolon-separated list of all the expected members - of the Administrators local group. Ex: Administrator; myUser1; myUser2"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[LocalGroup]AdministratorsGroup;Members'', - ''='', parameters(''Members'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AdministratorsGroupMembers"},"Members":{"value":"[parameters(''Members'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"Members":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;Members","value":"[parameters(''Members'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[LocalGroup]AdministratorsGroup;Members","value":"[parameters(''Members'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b821191b-3a12-44bc-9c38-212138a29ff3","type":"Microsoft.Authorization/policyDefinitions","name":"b821191b-3a12-44bc-9c38-212138a29ff3"}' - headers: - cache-control: - - no-cache - content-length: - - '6477' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b8564268-eb4a-4337-89be-a19db070c59d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Event Hub namespaces should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to Event Hub namespaces, data leakage - risks are reduced. Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event - Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/privateEndpointConnections","existenceCondition":{"field":"Microsoft.EventHub/namespaces/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b8564268-eb4a-4337-89be-a19db070c59d","type":"Microsoft.Authorization/policyDefinitions","name":"b8564268-eb4a-4337-89be-a19db070c59d"}' - headers: - cache-control: - - no-cache - content-length: - - '1349' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b872a447-cc6f-43b9-bccf-45703cd81607'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Accounts''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Accounts''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAccounts","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b872a447-cc6f-43b9-bccf-45703cd81607","type":"Microsoft.Authorization/policyDefinitions","name":"b872a447-cc6f-43b9-bccf-45703cd81607"}' - headers: - cache-control: - - no-cache - content-length: - - '3240' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b889a06c-ec72-4b03-910a-cb169ee18721'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Logic - Apps to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Logic Apps to stream to a regional Log Analytics - workspace when any Logic Apps which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Logic/workflows"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Logic/workflows/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"WorkflowRuntime","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b889a06c-ec72-4b03-910a-cb169ee18721","type":"Microsoft.Authorization/policyDefinitions","name":"b889a06c-ec72-4b03-910a-cb169ee18721"}' - headers: - cache-control: - - no-cache - content-length: - - '3629' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''b954148f-4c11-4c38-8221-be76711e194a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"An activity log alert should exist for - specific Administrative operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Administrative operations with no activity log alerts - configured.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Administrative Operation name for which activity log - alert should be configured"},"allowedValues":["Microsoft.Sql/servers/firewallRules/write","Microsoft.Sql/servers/firewallRules/delete","Microsoft.Network/networkSecurityGroups/write","Microsoft.Network/networkSecurityGroups/delete","Microsoft.ClassicNetwork/networkSecurityGroups/write","Microsoft.ClassicNetwork/networkSecurityGroups/delete","Microsoft.Network/networkSecurityGroups/securityRules/write","Microsoft.Network/networkSecurityGroups/securityRules/delete","Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/write","Microsoft.ClassicNetwork/networkSecurityGroups/securityRules/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Administrative"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a","type":"Microsoft.Authorization/policyDefinitions","name":"b954148f-4c11-4c38-8221-be76711e194a"}' - headers: - cache-control: - - no-cache - content-length: - - '2495' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ba12366f-f9a6-42b8-9d98-157d0b1a837b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Recovery console''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Recovery console''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsRecoveryconsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ba12366f-f9a6-42b8-9d98-157d0b1a837b","type":"Microsoft.Authorization/policyDefinitions","name":"ba12366f-f9a6-42b8-9d98-157d0b1a837b"}' - headers: - cache-control: - - no-cache - content-length: - - '3263' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ba769a63-b8cc-4b2d-abf6-ac33c7204be8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Machine Learning workspaces should - be encrypted with a customer-managed key","policyType":"BuiltIn","mode":"Indexed","description":"Manage - encryption at rest of Azure Machine Learning workspace data with customer-managed - keys. By default, customer data is encrypted with service-managed keys, but - customer-managed keys are commonly required to meet regulatory compliance - standards. Customer-managed keys enable the data to be encrypted with an Azure - Key Vault key created and owned by you. You have full control and responsibility - for the key lifecycle, including rotation and management. Learn more at https://aka.ms/azureml-workspaces-cmk.","metadata":{"version":"1.0.3","category":"Machine - Learning"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.MachineLearningServices/workspaces"},{"not":{"field":"Microsoft.MachineLearningServices/workspaces/encryption.status","equals":"enabled"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ba769a63-b8cc-4b2d-abf6-ac33c7204be8","type":"Microsoft.Authorization/policyDefinitions","name":"ba769a63-b8cc-4b2d-abf6-ac33c7204be8"}' - headers: - cache-control: - - no-cache - content-length: - - '1369' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''baf19753-7502-405f-8745-370519b20483'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure Event Grid topics - to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"topic"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"topic-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/baf19753-7502-405f-8745-370519b20483","type":"Microsoft.Authorization/policyDefinitions","name":"baf19753-7502-405f-8745-370519b20483"}' - headers: - cache-control: - - no-cache - content-length: - - '2339' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bb91dfba-c30d-4263-9add-9c2384e659a6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Non-internet-facing virtual machines - should be protected with network security groups","policyType":"BuiltIn","mode":"All","description":"Protect - your non-internet-facing virtual machines from potential threats by restricting - access with network security groups (NSG). Learn more about controlling traffic - with NSGs at https://aka.ms/nsg-doc","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"a9341235-9389-42f0-a0bf-9bfb57960d44","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bb91dfba-c30d-4263-9add-9c2384e659a6","type":"Microsoft.Authorization/policyDefinitions","name":"bb91dfba-c30d-4263-9add-9c2384e659a6"}' - headers: - cache-control: - - no-cache - content-length: - - '1189' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bbcdd8fa-b600-4ee3-85b8-d184e3339652'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Microsoft Network - Client''","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Microsoft Network Client''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"[Deprecated]: - Microsoft network client: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB client component."}},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"type":"String","metadata":{"displayName":"[Deprecated]: - Microsoft network client: Send unencrypted password to third-party SMB servers","description":"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it."}},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"type":"String","metadata":{"displayName":"[Deprecated]: - Microsoft network server: Amount of idle time required before suspending session","description":"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range."}},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"[Deprecated]: - Microsoft network server: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB server component."}},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"type":"String","metadata":{"displayName":"[Deprecated]: - Microsoft network server: Disconnect clients when logon hours expire","description":"Specifies - whether to disconnect users who are connected to the local computer outside - their user account''s valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - ''Network security: Force logoff when logon hours expire''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Microsoft - network client: Digitally sign communications (always);ExpectedValue'', ''='', - parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways''), '','', - ''Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers''), - '','', ''Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue'', ''='', parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession''), - '','', ''Microsoft network server: Digitally sign communications (always);ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways''), - '','', ''Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient"},"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"type":"string"},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"type":"string"},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"type":"string"},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"type":"string"},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Microsoft - network client: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue","value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},{"name":"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},{"name":"Microsoft - network server: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Microsoft - network client: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue","value":"[parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers'')]"},{"name":"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession'')]"},{"name":"Microsoft - network server: Digitally sign communications (always);ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways'')]"},{"name":"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue","value":"[parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bbcdd8fa-b600-4ee3-85b8-d184e3339652","type":"Microsoft.Authorization/policyDefinitions","name":"bbcdd8fa-b600-4ee3-85b8-d184e3339652"}' - headers: - cache-control: - - no-cache - content-length: - - '11916' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bc0378bb-d7ab-4614-a0f6-5a6e3f02d644'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit API Applications - that are not using latest supported Python Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Python version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestPython","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc0378bb-d7ab-4614-a0f6-5a6e3f02d644","type":"Microsoft.Authorization/policyDefinitions","name":"bc0378bb-d7ab-4614-a0f6-5a6e3f02d644"}' - headers: - cache-control: - - no-cache - content-length: - - '1201' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bc87d811-4a9b-47cc-ae54-0a41abda7768'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Account Logon''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Account Logon''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bc87d811-4a9b-47cc-ae54-0a41abda7768","type":"Microsoft.Authorization/policyDefinitions","name":"bc87d811-4a9b-47cc-ae54-0a41abda7768"}' - headers: - cache-control: - - no-cache - content-length: - - '3268' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bd352bd5-2853-4985-bf0d-73806b4a5744'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"IP Forwarding on your virtual machine - should be disabled","policyType":"BuiltIn","mode":"All","description":"Enabling - IP forwarding on a virtual machine''s NIC allows the machine to receive traffic - addressed to other destinations. IP forwarding is rarely required (e.g., when - using the VM as a network virtual appliance), and therefore, this should be - reviewed by the network security team.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"c3b51c94-588b-426b-a892-24696f9e54cc","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744","type":"Microsoft.Authorization/policyDefinitions","name":"bd352bd5-2853-4985-bf0d-73806b4a5744"}' - headers: - cache-control: - - no-cache - content-length: - - '1237' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bd560fc0-3c69-498a-ae9f-aa8eb7de0e13'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Container registries should have SKUs - that support Private Links","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The private link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to your container registries - instead of the entire service, data leakage risks are reduced. Learn more - at: https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"field":"Microsoft.ContainerRegistry/registries/sku.name","notEquals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bd560fc0-3c69-498a-ae9f-aa8eb7de0e13","type":"Microsoft.Authorization/policyDefinitions","name":"bd560fc0-3c69-498a-ae9f-aa8eb7de0e13"}' - headers: - cache-control: - - no-cache - content-length: - - '1238' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bda18df3-5e41-4709-add9-2554ce68c966'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Advanced Threat Protection - types should be set to ''All'' in SQL Managed Instance advanced data security - settings","policyType":"BuiltIn","mode":"Indexed","description":"It''s recommended - to enable all Advanced Threat Protection types on your SQL Managed Instance. - Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.","metadata":{"version":"1.0.1-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/managedInstances"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/managedInstances/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/managedInstances/securityAlertPolicies/disabledAlerts[*]","equals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bda18df3-5e41-4709-add9-2554ce68c966","type":"Microsoft.Authorization/policyDefinitions","name":"bda18df3-5e41-4709-add9-2554ce68c966"}' - headers: - cache-control: - - no-cache - content-length: - - '1223' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bdc59948-5574-49b3-bb91-76b7c986428d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Defender for DNS should - be enabled","policyType":"BuiltIn","mode":"All","description":"Azure Defender - for DNS provides an additional layer of protection for your cloud resources - by continuously monitoring all DNS queries from your Azure resources. Azure - Defender alerts you about suspicious activity at the DNS layer. Learn more - about the capabilities of Azure Defender for DNS at https://aka.ms/defender-for-dns - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center''s pricing page: https://aka.ms/pricing-security-center - .","metadata":{"version":"1.0.0-preview","category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"Dns","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bdc59948-5574-49b3-bb91-76b7c986428d","type":"Microsoft.Authorization/policyDefinitions","name":"bdc59948-5574-49b3-bb91-76b7c986428d"}' - headers: - cache-control: - - no-cache - content-length: - - '1425' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bde62c94-ccca-4821-a815-92c1d31a76de'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs if the Administrators group contains any of the specified members","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group contains - any of the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToExclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de","type":"Microsoft.Authorization/policyDefinitions","name":"bde62c94-ccca-4821-a815-92c1d31a76de"}' - headers: - cache-control: - - no-cache - content-length: - - '3244' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''be0a7681-bed4-48dc-9ff3-f0171ee170b6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:47:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using latest supported Java Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Java version for the latest security classes. Using older - classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestJava","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be0a7681-bed4-48dc-9ff3-f0171ee170b6","type":"Microsoft.Authorization/policyDefinitions","name":"be0a7681-bed4-48dc-9ff3-f0171ee170b6"}' - headers: - cache-control: - - no-cache - content-length: - - '1281' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:47:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''be7ed5c8-2660-4136-8216-e6f3412ba909'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Web Application Firewall - should be enabled for Azure Front Door Service or Application Gateway","policyType":"BuiltIn","mode":"Indexed","description":"Requires - Web Application Firewall on any Azure Front Door Service or Application Gateway. - A Web Application Firewall provides greater security for your other Azure - resources.","metadata":{"version":"1.0.0-deprecated","category":"Network","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoors"},{"field":"Microsoft.Network/frontdoors/frontendEndpoints[*].webApplicationFirewallPolicyLink.id","exists":"false"}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGateways"},{"field":"Microsoft.Network/applicationGateways/webApplicationFirewallConfiguration","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/be7ed5c8-2660-4136-8216-e6f3412ba909","type":"Microsoft.Authorization/policyDefinitions","name":"be7ed5c8-2660-4136-8216-e6f3412ba909"}' - headers: - cache-control: - - no-cache - content-length: - - '1285' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''beb6ccee-b6b8-4e91-9801-a5fa4260a104'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that have not - restarted within the specified number of days","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the WMI property - LastBootUpTime in class Win32_Operatingsystem is outside the range of days - provided by the policy parameter.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"MachineLastBootUpTime","version":"1.*","configurationParameter":{"NumberOfDays":"[MachineUpTime]MachineLastBootUpTime;NumberOfDays"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"NumberOfDays":{"type":"String","metadata":{"displayName":"Number - of days","description":"The number of days without restart until the machine - is considered non-compliant"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MachineLastBootUpTime","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[MachineUpTime]MachineLastBootUpTime;NumberOfDays'', - ''='', parameters(''NumberOfDays'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/beb6ccee-b6b8-4e91-9801-a5fa4260a104","type":"Microsoft.Authorization/policyDefinitions","name":"beb6ccee-b6b8-4e91-9801-a5fa4260a104"}' - headers: - cache-control: - - no-cache - content-length: - - '4004' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bed48b13-6647-468e-aa2f-1af1d3f4dd40'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows Defender Exploit Guard should - be enabled on your machines","policyType":"BuiltIn","mode":"Indexed","description":"Windows - Defender Exploit Guard uses the Azure Policy Guest Configuration agent. Exploit - Guard has four components that are designed to lock down devices against a - wide variety of attack vectors and block behaviors commonly used in malware - attacks while enabling enterprises to balance their security risk and productivity - requirements (Windows only).","metadata":{"category":"Guest Configuration","version":"1.1.1","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsDefenderExploitGuard","version":"1.*","configurationParameter":{"NotAvailableMachineState":"[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"NotAvailableMachineState":{"type":"String","metadata":{"displayName":"Status - if Windows Defender is not available on machine","description":"Windows Defender - Exploit Guard is only available starting with Windows 10/Windows Server with - update 1709. Setting this value to ''Non-Compliant'' shows machines with older - versions on which Windows Defender Exploit Guard is not available (such as - Windows Server 2012 R2) as non-compliant. Setting this value to ''Compliant'' - shows these machines as compliant."},"allowedValues":["Compliant","Non-Compliant"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDefenderExploitGuard","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsDefenderExploitGuard]WindowsDefenderExploitGuard1;NotAvailableMachineState'', - ''='', parameters(''NotAvailableMachineState'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bed48b13-6647-468e-aa2f-1af1d3f4dd40","type":"Microsoft.Authorization/policyDefinitions","name":"bed48b13-6647-468e-aa2f-1af1d3f4dd40"}' - headers: - cache-control: - - no-cache - content-length: - - '4724' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bef3f64c-5290-43b7-85b0-9b254eef4c47'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Key Vault - to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Key Vault to stream to a regional Log Analytics - workspace when any Key Vault which is missing this diagnostic settings is - created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.KeyVault/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bef3f64c-5290-43b7-85b0-9b254eef4c47","type":"Microsoft.Authorization/policyDefinitions","name":"bef3f64c-5290-43b7-85b0-9b254eef4c47"}' - headers: - cache-control: - - no-cache - content-length: - - '3621' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bf045164-79ba-4215-8f95-f8048dc1780b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Geo-redundant storage should be enabled - for Storage Accounts","policyType":"BuiltIn","mode":"Indexed","description":"Use - geo-redundancy to create highly available applications","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"not":{"field":"Microsoft.Storage/storageAccounts/sku.name","in":["Standard_GRS","Standard_RAGRS","Standard_GZRS","Standard_RAGZRS"]}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf045164-79ba-4215-8f95-f8048dc1780b","type":"Microsoft.Authorization/policyDefinitions","name":"bf045164-79ba-4215-8f95-f8048dc1780b"}' - headers: - cache-control: - - no-cache - content-length: - - '904' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bf16e0bb-31e1-4646-8202-60a235cc7e74'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not have - the password complexity setting enabled","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not have the password complexity setting enabled","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"PasswordMustMeetComplexityRequirements","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74","type":"Microsoft.Authorization/policyDefinitions","name":"bf16e0bb-31e1-4646-8202-60a235cc7e74"}' - headers: - cache-control: - - no-cache - content-length: - - '3684' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''bf684997-3909-404e-929c-d4a38ed23b2e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure IoT Hubs with - private endpoints","policyType":"BuiltIn","mode":"Indexed","description":"A - private endpoint is a private IP address allocated inside a customer-owned - virtual network via which an Azure resource is reachable. This policy deploys - a private endpoint for your IoT hub to allow services inside your virtual - network to reach IoT Hub without requiring traffic to be sent to IoT Hub''s - public endpoint.","metadata":{"version":"1.0.0","category":"Internet of Things"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Devices/IotHubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Devices/IotHubs/PrivateEndpointConnections","existenceCondition":{"field":"Microsoft.Devices/IotHubs/PrivateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["iotHub"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/bf684997-3909-404e-929c-d4a38ed23b2e","type":"Microsoft.Authorization/policyDefinitions","name":"bf684997-3909-404e-929c-d4a38ed23b2e"}' - headers: - cache-control: - - no-cache - content-length: - - '3610' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c04255ee-1b9f-42c1-abaa-bf1553f79930'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Logon-Logoff''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Logon-Logoff''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditGroupMembership":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Group Membership","description":"Specifies whether audit events are - generated when group memberships are enumerated on the client computer."},"allowedValues":["No - Auditing","Success","Failure","Success and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesLogonLogoff","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Group Membership;ExpectedValue'', ''='', parameters(''AuditGroupMembership'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesLogonLogoff"},"AuditGroupMembership":{"value":"[parameters(''AuditGroupMembership'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditGroupMembership":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Group Membership;ExpectedValue","value":"[parameters(''AuditGroupMembership'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Group Membership;ExpectedValue","value":"[parameters(''AuditGroupMembership'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c04255ee-1b9f-42c1-abaa-bf1553f79930","type":"Microsoft.Authorization/policyDefinitions","name":"c04255ee-1b9f-42c1-abaa-bf1553f79930"}' - headers: - cache-control: - - no-cache - content-length: - - '6670' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c050047b-b21b-4822-8a2d-c1e37c3c0c6a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Kubernetes clusters with specified - GitOps configuration using SSH secrets","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - a ''sourceControlConfiguration'' to Kubernetes clusters to assure that the - clusters get their source of truth for workloads and configurations from the - defined git repo. This definition requires a SSH private key secret in Key - Vault. For instructions, visit https://aka.ms/K8sGitOpsPolicy.","metadata":{"version":"1.0.0","category":"Kubernetes"},"parameters":{"configurationResourceName":{"type":"String","metadata":{"displayName":"Configuration - resource name","description":"The name for the sourceControlConfiguration. Learn - more about setting up GitOps configuration: https://aka.ms/AzureArcK8sUsingGitOps."}},"operatorInstanceName":{"type":"String","metadata":{"displayName":"Operator - instance name","description":"Name used in the operator instances. Maximum - of 23 lowercase alphanumeric characters or hyphen. Must start and end with - an alphanumeric character."}},"operatorNamespace":{"type":"String","metadata":{"displayName":"Operator - namespace","description":"Namespace within which the operators will be installed. - Maximum of 23 lowercase alphanumeric characters or hyphen. Must start and - end with an alphanumeric character."}},"operatorScope":{"type":"String","metadata":{"displayName":"Operator - scope","description":"The permission scope for the operator. Possible values - are ''cluster'' (full access) or ''namespace'' (restricted access)."},"allowedValues":["cluster","namespace"]},"operatorType":{"type":"String","metadata":{"displayName":"Operator - type","description":"The type of operator to install. Currently, ''Flux'' - is supported."},"allowedValues":["Flux"]},"operatorParams":{"type":"String","metadata":{"displayName":"Operator - parameters","description":"Parameters to set on the Flux operator, separated - by spaces. For example, --git-readonly --sync-garbage-collection. Learn - more: http://aka.ms/AzureArcK8sFluxOperatorParams."}},"repositoryUrl":{"type":"String","metadata":{"displayName":"Repository - Url","description":"The URL for the source control repository. Learn more - about URL formats: https://aka.ms/GitOpsRepoUrlParameters"}},"enableHelmOperator":{"type":"String","metadata":{"displayName":"Enable - Helm","description":"Indicate whether to enable Helm for this instance of - Flux. Learn more: http://aka.ms/AzureArcK8sGitOpsWithHelm."},"allowedValues":["true","false"]},"chartVersion":{"type":"String","metadata":{"displayName":"Helm - chart version for installing Flux Helm","description":"The version of the - Helm chart for installing Flux Helm. For example, 1.2.0"}},"chartValues":{"type":"String","metadata":{"displayName":"Helm - chart parameters for installing Flux Helm","description":"Parameters for the - Helm chart for installing Flux Helm, separated by spaces. For example, --set - helm.versions=v3"}},"sshKnownHostsContents":{"type":"String","metadata":{"displayName":"Base64-encoded - known hosts content","description":"The base64-encoded known hosts content."}},"keyVaultResourceId":{"type":"String","metadata":{"displayName":"Key - Vault resource id","description":"The resource id for the Key Vault that holds - the SSH or HTTPS secrets. For example: ''/subscriptions//resourceGroups//providers/Microsoft.KeyVault/vaults/''","strongType":"Microsoft.KeyVault/vaults","assignPermissions":"true"}},"sshPrivateKeyKeyVaultSecretName":{"type":"String","metadata":{"displayName":"SSH - private key Key Vault secret","description":"The name of the Key Vault secret - that holds the base64-encoded SSH private key."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","auditIfNotExists","disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Kubernetes/connectedClusters","Microsoft.ContainerService/managedClusters"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.KubernetesConfiguration/sourceControlConfigurations","name":"[parameters(''configurationResourceName'')]","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deploymentScope":"ResourceGroup","existenceCondition":{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/operatorParams","in":["[parameters(''operatorParams'')]","[concat(''--git-readonly - '',parameters(''operatorParams''))]"]},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/repositoryUrl","equals":"[parameters(''repositoryUrl'')]"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/sshKnownHostsContents","equals":"[parameters(''sshKnownHostsContents'')]"},{"anyOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"false"},{"allOf":[{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/enableHelmOperator","equals":"true"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartVersion","equals":"[parameters(''chartVersion'')]"},{"field":"Microsoft.KubernetesConfiguration/sourceControlConfigurations/helmOperatorProperties.chartValues","equals":"[parameters(''chartValues'')]"}]}]}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"configurationResourceName":{"type":"string"},"clusterLocation":{"type":"string"},"clusterName":{"type":"string"},"operatorInstanceName":{"type":"string"},"operatorNamespace":{"type":"string"},"operatorScope":{"type":"string"},"operatorType":{"type":"string"},"operatorParams":{"type":"string"},"repositoryUrl":{"type":"string"},"enableHelmOperator":{"type":"string"},"chartVersion":{"type":"string"},"chartValues":{"type":"string"},"sshKnownHostsContents":{"type":"string"},"sshPrivateKey":{"type":"securestring"},"clusterResourceType":{"type":"string"}},"resources":[{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''connectedclusters''))]","type":"Microsoft.Kubernetes/connectedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"},"sshKnownHostsContents":"[parameters(''sshKnownHostsContents'')]","configurationProtectedSettings":{"sshPrivateKey":"[parameters(''sshPrivateKey'')]"}}},{"condition":"[contains(toLower(parameters(''clusterResourceType'')), - toLower(''managedclusters''))]","type":"Microsoft.ContainerService/managedClusters/providers/sourceControlConfigurations","name":"[concat(parameters(''clusterName''), - ''/Microsoft.KubernetesConfiguration/'', parameters(''configurationResourceName''))]","apiVersion":"2021-03-01","properties":{"operatorInstanceName":"[parameters(''operatorInstanceName'')]","operatorNamespace":"[parameters(''operatorNamespace'')]","operatorScope":"[parameters(''operatorScope'')]","operatorType":"[parameters(''operatorType'')]","operatorParams":"[parameters(''operatorParams'')]","repositoryUrl":"[parameters(''repositoryUrl'')]","enableHelmOperator":"[parameters(''enableHelmOperator'')]","helmOperatorProperties":{"chartVersion":"[parameters(''chartVersion'')]","chartValues":"[parameters(''chartValues'')]"},"sshKnownHostsContents":"[parameters(''sshKnownHostsContents'')]","configurationProtectedSettings":{"sshPrivateKey":"[parameters(''sshPrivateKey'')]"}}}]},"parameters":{"clusterLocation":{"value":"[field(''location'')]"},"clusterName":{"value":"[field(''name'')]"},"configurationResourceName":{"value":"[parameters(''configurationResourceName'')]"},"operatorInstanceName":{"value":"[parameters(''operatorInstanceName'')]"},"operatorNamespace":{"value":"[parameters(''operatorNamespace'')]"},"operatorScope":{"value":"[parameters(''operatorScope'')]"},"operatorType":{"value":"[parameters(''operatorType'')]"},"operatorParams":{"value":"[parameters(''operatorParams'')]"},"repositoryUrl":{"value":"[parameters(''repositoryUrl'')]"},"enableHelmOperator":{"value":"[parameters(''enableHelmOperator'')]"},"chartVersion":{"value":"[parameters(''chartVersion'')]"},"chartValues":{"value":"[parameters(''chartValues'')]"},"sshKnownHostsContents":{"value":"[parameters(''sshKnownHostsContents'')]"},"sshPrivateKey":{"reference":{"keyVault":{"id":"[parameters(''keyVaultResourceId'')]"},"secretName":"[parameters(''sshPrivateKeyKeyVaultSecretName'')]"}},"clusterResourceType":{"value":"[field(''type'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c050047b-b21b-4822-8a2d-c1e37c3c0c6a","type":"Microsoft.Authorization/policyDefinitions","name":"c050047b-b21b-4822-8a2d-c1e37c3c0c6a"}' - headers: - cache-control: - - no-cache - content-length: - - '9287' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c0c3130e-7dda-4187-aed0-ee4a472eaa60'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private endpoint connections - on Azure Automation accounts","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoint connections allow secure communication by enabling private connectivity - to Azure Automation accounts without a need for public IP addresses at the - source or destination. Learn more about private endpoints in Azure Automation - at https://docs.microsoft.com/azure/automation/how-to/private-link-security.","metadata":{"version":"1.0.0","category":"Automation"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Automation/automationAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Automation/automationAccounts/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Automation/automationAccounts/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''Webhook'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["Webhook"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}},{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[concat(variables(''privateEndpointName''),''DSCAndHybridWorker'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["DSCAndHybridWorker"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0c3130e-7dda-4187-aed0-ee4a472eaa60","type":"Microsoft.Authorization/policyDefinitions","name":"c0c3130e-7dda-4187-aed0-ee4a472eaa60"}' - headers: - cache-control: - - no-cache - content-length: - - '4242' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c0e996f8-39cf-4af9-9f45-83fbde810432'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Only approved VM extensions should be - installed","policyType":"BuiltIn","mode":"Indexed","description":"This policy - governs the virtual machine extensions that are not approved.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]},"approvedExtensions":{"type":"Array","metadata":{"description":"The - list of approved extension types that can be installed. Example: AzureDiskEncryption","displayName":"Approved - extensions"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","notIn":"[parameters(''approvedExtensions'')]"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c0e996f8-39cf-4af9-9f45-83fbde810432","type":"Microsoft.Authorization/policyDefinitions","name":"c0e996f8-39cf-4af9-9f45-83fbde810432"}' - headers: - cache-control: - - no-cache - content-length: - - '1119' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c15c281f-ea5c-44cd-90b8-fc3c14d13f0c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy associations for a custom provider","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - an association resource that associates selected resource types to the specified - custom provider. This policy deployment does not support nested resource types.","metadata":{"version":"1.0.0","category":"Custom - Provider"},"parameters":{"targetCustomProviderId":{"type":"String","metadata":{"displayName":"Custom - provider ID","description":"Resource ID of the Custom provider to which resources - need to be associated."}},"resourceTypesToAssociate":{"type":"Array","metadata":{"displayName":"Resource - types to associate","description":"The list of resource types to be associated - to the custom provider.","strongType":"resourceTypes"}},"associationNamePrefix":{"type":"String","metadata":{"displayName":"Association - name prefix","description":"Prefix to be added to the name of the association - resource being created."}}},"policyRule":{"if":{"field":"type","in":"[parameters(''resourceTypesToAssociate'')]"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.CustomProviders/Associations","name":"[concat(parameters(''associationNamePrefix''), - ''-'', uniqueString(parameters(''targetCustomProviderId'')))]","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"associatedResourceName":{"type":"string"},"resourceTypesToAssociate":{"type":"string"},"targetCustomProviderId":{"type":"string"},"associationNamePrefix":{"type":"string"}},"variables":{"resourceType":"[concat(parameters(''resourceTypesToAssociate''), - ''/providers/associations'')]","resourceName":"[concat(parameters(''associatedResourceName''), - ''/microsoft.customproviders/'', parameters(''associationNamePrefix''), ''-'', - uniqueString(parameters(''targetCustomProviderId'')))]"},"resources":[{"type":"Microsoft.Resources/deployments","apiVersion":"2017-05-10","name":"[concat(deployment().Name, - ''-2'')]","properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","resources":[{"type":"[variables(''resourceType'')]","name":"[variables(''resourceName'')]","apiVersion":"2018-09-01-preview","properties":{"targetResourceId":"[parameters(''targetCustomProviderId'')]"}}]}}}]},"parameters":{"resourceTypesToAssociate":{"value":"[field(''type'')]"},"associatedResourceName":{"value":"[field(''name'')]"},"targetCustomProviderId":{"value":"[parameters(''targetCustomProviderId'')]"},"associationNamePrefix":{"value":"[parameters(''associationNamePrefix'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c15c281f-ea5c-44cd-90b8-fc3c14d13f0c","type":"Microsoft.Authorization/policyDefinitions","name":"c15c281f-ea5c-44cd-90b8-fc3c14d13f0c"}' - headers: - cache-control: - - no-cache - content-length: - - '2991' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c1b9cbed-08e3-427d-b9ce-7c535b1e9b94'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - only in Asia data centers","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation in the following locations only: East Asia, Southeast Asia, - West India, South India, Central India, Japan East, Japan West","metadata":{"version":"1.0.0-deprecated","category":"General","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"location","in":["eastasia","southeastasia","westindia","southindia","centralindia","japaneast","japanwest"]}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1b9cbed-08e3-427d-b9ce-7c535b1e9b94","type":"Microsoft.Authorization/policyDefinitions","name":"c1b9cbed-08e3-427d-b9ce-7c535b1e9b94"}' - headers: - cache-control: - - no-cache - content-length: - - '763' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c1e289c0-ffad-475d-a924-adc058765d65'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Account Logon''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Account Logon''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditCredentialValidation":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Credential Validation","description":"Specifies whether audit events - are generated when credentials are submitted for a user account logon request. This - setting is especially useful for monitoring unsuccessful attempts, to find - brute-force attacks, account enumeration, and potential account compromise - events on domain controllers."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesAccountLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Credential Validation;ExpectedValue'', ''='', parameters(''AuditCredentialValidation'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesAccountLogon"},"AuditCredentialValidation":{"value":"[parameters(''AuditCredentialValidation'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditCredentialValidation":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Credential Validation;ExpectedValue","value":"[parameters(''AuditCredentialValidation'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Credential Validation;ExpectedValue","value":"[parameters(''AuditCredentialValidation'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c1e289c0-ffad-475d-a924-adc058765d65","type":"Microsoft.Authorization/policyDefinitions","name":"c1e289c0-ffad-475d-a924-adc058765d65"}' - headers: - cache-control: - - no-cache - content-length: - - '6918' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c21f7060-c148-41cf-a68b-0ab3e14c764c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that are not set to the specified time zone","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that are not set to the specified time zone. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"TimeZone":{"type":"String","metadata":{"displayName":"[Deprecated]: - Time zone","description":"The expected time zone"},"allowedValues":["(UTC-12:00) - International Date Line West","(UTC-11:00) Coordinated Universal Time-11","(UTC-10:00) - Aleutian Islands","(UTC-10:00) Hawaii","(UTC-09:30) Marquesas Islands","(UTC-09:00) - Alaska","(UTC-09:00) Coordinated Universal Time-09","(UTC-08:00) Baja California","(UTC-08:00) - Coordinated Universal Time-08","(UTC-08:00) Pacific Time (US & Canada)","(UTC-07:00) - Arizona","(UTC-07:00) Chihuahua, La Paz, Mazatlan","(UTC-07:00) Mountain Time - (US & Canada)","(UTC-06:00) Central America","(UTC-06:00) Central Time (US - & Canada)","(UTC-06:00) Easter Island","(UTC-06:00) Guadalajara, Mexico City, - Monterrey","(UTC-06:00) Saskatchewan","(UTC-05:00) Bogota, Lima, Quito, Rio - Branco","(UTC-05:00) Chetumal","(UTC-05:00) Eastern Time (US & Canada)","(UTC-05:00) - Haiti","(UTC-05:00) Havana","(UTC-05:00) Indiana (East)","(UTC-05:00) Turks - and Caicos","(UTC-04:00) Asuncion","(UTC-04:00) Atlantic Time (Canada)","(UTC-04:00) - Caracas","(UTC-04:00) Cuiaba","(UTC-04:00) Georgetown, La Paz, Manaus, San - Juan","(UTC-04:00) Santiago","(UTC-03:30) Newfoundland","(UTC-03:00) Araguaina","(UTC-03:00) - Brasilia","(UTC-03:00) Cayenne, Fortaleza","(UTC-03:00) City of Buenos Aires","(UTC-03:00) - Greenland","(UTC-03:00) Montevideo","(UTC-03:00) Punta Arenas","(UTC-03:00) - Saint Pierre and Miquelon","(UTC-03:00) Salvador","(UTC-02:00) Coordinated - Universal Time-02","(UTC-02:00) Mid-Atlantic - Old","(UTC-01:00) Azores","(UTC-01:00) - Cabo Verde Is.","(UTC) Coordinated Universal Time","(UTC+00:00) Dublin, Edinburgh, - Lisbon, London","(UTC+00:00) Monrovia, Reykjavik","(UTC+00:00) Sao Tome","(UTC+01:00) - Casablanca","(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna","(UTC+01:00) - Belgrade, Bratislava, Budapest, Ljubljana, Prague","(UTC+01:00) Brussels, - Copenhagen, Madrid, Paris","(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb","(UTC+01:00) - West Central Africa","(UTC+02:00) Amman","(UTC+02:00) Athens, Bucharest","(UTC+02:00) - Beirut","(UTC+02:00) Cairo","(UTC+02:00) Chisinau","(UTC+02:00) Damascus","(UTC+02:00) - Gaza, Hebron","(UTC+02:00) Harare, Pretoria","(UTC+02:00) Helsinki, Kyiv, - Riga, Sofia, Tallinn, Vilnius","(UTC+02:00) Jerusalem","(UTC+02:00) Kaliningrad","(UTC+02:00) - Khartoum","(UTC+02:00) Tripoli","(UTC+02:00) Windhoek","(UTC+03:00) Baghdad","(UTC+03:00) - Istanbul","(UTC+03:00) Kuwait, Riyadh","(UTC+03:00) Minsk","(UTC+03:00) Moscow, - St. Petersburg","(UTC+03:00) Nairobi","(UTC+03:30) Tehran","(UTC+04:00) Abu - Dhabi, Muscat","(UTC+04:00) Astrakhan, Ulyanovsk","(UTC+04:00) Baku","(UTC+04:00) - Izhevsk, Samara","(UTC+04:00) Port Louis","(UTC+04:00) Saratov","(UTC+04:00) - Tbilisi","(UTC+04:00) Volgograd","(UTC+04:00) Yerevan","(UTC+04:30) Kabul","(UTC+05:00) - Ashgabat, Tashkent","(UTC+05:00) Ekaterinburg","(UTC+05:00) Islamabad, Karachi","(UTC+05:00) - Qyzylorda","(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi","(UTC+05:30) - Sri Jayawardenepura","(UTC+05:45) Kathmandu","(UTC+06:00) Astana","(UTC+06:00) - Dhaka","(UTC+06:00) Omsk","(UTC+06:30) Yangon (Rangoon)","(UTC+07:00) Bangkok, - Hanoi, Jakarta","(UTC+07:00) Barnaul, Gorno-Altaysk","(UTC+07:00) Hovd","(UTC+07:00) - Krasnoyarsk","(UTC+07:00) Novosibirsk","(UTC+07:00) Tomsk","(UTC+08:00) Beijing, - Chongqing, Hong Kong, Urumqi","(UTC+08:00) Irkutsk","(UTC+08:00) Kuala Lumpur, - Singapore","(UTC+08:00) Perth","(UTC+08:00) Taipei","(UTC+08:00) Ulaanbaatar","(UTC+08:45) - Eucla","(UTC+09:00) Chita","(UTC+09:00) Osaka, Sapporo, Tokyo","(UTC+09:00) - Pyongyang","(UTC+09:00) Seoul","(UTC+09:00) Yakutsk","(UTC+09:30) Adelaide","(UTC+09:30) - Darwin","(UTC+10:00) Brisbane","(UTC+10:00) Canberra, Melbourne, Sydney","(UTC+10:00) - Guam, Port Moresby","(UTC+10:00) Hobart","(UTC+10:00) Vladivostok","(UTC+10:30) - Lord Howe Island","(UTC+11:00) Bougainville Island","(UTC+11:00) Chokurdakh","(UTC+11:00) - Magadan","(UTC+11:00) Norfolk Island","(UTC+11:00) Sakhalin","(UTC+11:00) - Solomon Is., New Caledonia","(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky","(UTC+12:00) - Auckland, Wellington","(UTC+12:00) Coordinated Universal Time+12","(UTC+12:00) - Fiji","(UTC+12:00) Petropavlovsk-Kamchatsky - Old","(UTC+12:45) Chatham Islands","(UTC+13:00) - Coordinated Universal Time+13","(UTC+13:00) Nuku''alofa","(UTC+13:00) Samoa","(UTC+14:00) - Kiritimati Island"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsTimeZone","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsTimeZone]WindowsTimeZone1;TimeZone'', - ''='', parameters(''TimeZone'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsTimeZone"},"TimeZone":{"value":"[parameters(''TimeZone'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"TimeZone":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[WindowsTimeZone]WindowsTimeZone1;TimeZone","value":"[parameters(''TimeZone'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c","type":"Microsoft.Authorization/policyDefinitions","name":"c21f7060-c148-41cf-a68b-0ab3e14c764c"}' - headers: - cache-control: - - no-cache - content-length: - - '10521' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c251913d-7d24-4958-af87-478ed3b9ba41'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Flow logs should be configured for every - network security group","policyType":"BuiltIn","mode":"Indexed","description":"Audit - for network security groups to verify if flow logs are configured. Enabling - flow logs allows to log information about IP traffic flowing through network - security group. It can be used for optimizing network flows, monitoring throughput, - verifying compliance, detecting intrusions and more.","metadata":{"version":"1.1.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},{"count":{"field":"Microsoft.Network/networkSecurityGroups/flowLogs[*]"},"equals":0}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c251913d-7d24-4958-af87-478ed3b9ba41","type":"Microsoft.Authorization/policyDefinitions","name":"c251913d-7d24-4958-af87-478ed3b9ba41"}' - headers: - cache-control: - - no-cache - content-length: - - '1099' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c25d9a16-bc35-4e15-a7e5-9db606bf9ed4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Defender for container registries - should be enabled","policyType":"BuiltIn","mode":"All","description":"Azure - Defender for container registries provides vulnerability scanning of any images - pulled within the last 30 days, pushed to your registry, or imported, and - exposes detailed findings per image.","metadata":{"version":"1.0.3","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"ContainerRegistry","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c25d9a16-bc35-4e15-a7e5-9db606bf9ed4","type":"Microsoft.Authorization/policyDefinitions","name":"c25d9a16-bc35-4e15-a7e5-9db606bf9ed4"}' - headers: - cache-control: - - no-cache - content-length: - - '1107' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs on which the specified services are not installed and ''Running''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines on which the specified services are not - installed and ''Running''. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsServiceStatus","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a","type":"Microsoft.Authorization/policyDefinitions","name":"c2dd2a9a-8a20-4a9c-b8d6-f17ccc26939a"}' - headers: - cache-control: - - no-cache - content-length: - - '3219' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c2e7ca55-f62c-49b2-89a4-d41eb661d2f0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that ''.NET Framework'' - version is the latest, if used as a part of the API app","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is not required since Azure App Service automatically updates and maintains - the .NET Framework versions installed on the platform.","metadata":{"version":"1.0.0-deprecated","category":"App - Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.netFrameworkVersion","in":["v3.0","v4.0"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c2e7ca55-f62c-49b2-89a4-d41eb661d2f0","type":"Microsoft.Authorization/policyDefinitions","name":"c2e7ca55-f62c-49b2-89a4-d41eb661d2f0"}' - headers: - cache-control: - - no-cache - content-length: - - '1131' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c349d81b-9985-44ae-a8da-ff98d108ede8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Data Box jobs should enable double - encryption for data at rest on the device","policyType":"BuiltIn","mode":"Indexed","description":"Enable - a second layer of software-based encryption for data at rest on the device. - The device is already protected via Advanced Encryption Standard 256-bit encryption - for data at rest. This option adds a second layer of data encryption.","metadata":{"version":"1.0.0","category":"Data - Box"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - desired effect of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"supportedSKUs":{"type":"Array","metadata":{"displayName":"Supported - SKUs","description":"The list of SKUs that support software-based double encryption"},"allowedValues":["DataBox","DataBoxHeavy"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataBox/jobs"},{"field":"Microsoft.Databox/jobs/sku.name","in":"[parameters(''supportedSKUs'')]"},{"field":"Microsoft.DataBox/jobs/details.preferences.encryptionPreferences.doubleEncryption","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c349d81b-9985-44ae-a8da-ff98d108ede8","type":"Microsoft.Authorization/policyDefinitions","name":"c349d81b-9985-44ae-a8da-ff98d108ede8"}' - headers: - cache-control: - - no-cache - content-length: - - '1348' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c39ba22d-4428-4149-b981-70acb31fc383'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Key Vault Managed HSM should have - purge protection enabled","policyType":"BuiltIn","mode":"Indexed","description":"Malicious - deletion of an Azure Key Vault Managed HSM can lead to permanent data loss. - A malicious insider in your organization can potentially delete and purge - Azure Key Vault Managed HSM. Purge protection protects you from insider attacks - by enforcing a mandatory retention period for soft deleted Azure Key Vault - Managed HSM. No one inside your organization or Microsoft will be able to - purge your Azure Key Vault Managed HSM during the soft delete retention period.","metadata":{"version":"1.0.0","category":"Key - Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/managedHsms"},{"anyOf":[{"field":"Microsoft.KeyVault/managedHsms/enableSoftDelete","notEquals":"true"},{"field":"Microsoft.KeyVault/managedHsms/enablePurgeProtection","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c39ba22d-4428-4149-b981-70acb31fc383","type":"Microsoft.Authorization/policyDefinitions","name":"c39ba22d-4428-4149-b981-70acb31fc383"}' - headers: - cache-control: - - no-cache - content-length: - - '1363' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c3d20c29-b36d-48fe-808b-99a87530ad99'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Defender for Resource - Manager should be enabled","policyType":"BuiltIn","mode":"All","description":"Azure - Defender for Resource Manager automatically monitors the resource management - operations in your organization. Azure Defender detects threats and alerts - you about suspicious activity. Learn more about the capabilities of Azure - Defender for Resource Manager at https://aka.ms/defender-for-resource-manager - . Enabling this Azure Defender plan results in charges. Learn about the pricing - details per region on Security Center''s pricing page: https://aka.ms/pricing-security-center - .","metadata":{"version":"1.0.0-preview","category":"Security Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/pricings","name":"Arm","existenceScope":"subscription","existenceCondition":{"field":"Microsoft.Security/pricings/pricingTier","equals":"Standard"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c3d20c29-b36d-48fe-808b-99a87530ad99","type":"Microsoft.Authorization/policyDefinitions","name":"c3d20c29-b36d-48fe-808b-99a87530ad99"}' - headers: - cache-control: - - no-cache - content-length: - - '1422' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c3f317a7-a95c-4547-b7e7-11017ebdf2fe'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"System updates on virtual machine scale - sets should be installed","policyType":"BuiltIn","mode":"Indexed","description":"Audit - whether there are any missing system security updates and critical updates - that should be installed to ensure that your Windows and Linux virtual machine - scale sets are secure.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"bd20bd91-aaf1-7f14-b6e4-866de2f43146","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c3f317a7-a95c-4547-b7e7-11017ebdf2fe","type":"Microsoft.Authorization/policyDefinitions","name":"c3f317a7-a95c-4547-b7e7-11017ebdf2fe"}' - headers: - cache-control: - - no-cache - content-length: - - '1118' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c40c9087-1981-4e73-9f53-39743eda9d05'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Linux VMs that have accounts without passwords","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that have accounts without passwords. For - more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c40c9087-1981-4e73-9f53-39743eda9d05","type":"Microsoft.Authorization/policyDefinitions","name":"c40c9087-1981-4e73-9f53-39743eda9d05"}' - headers: - cache-control: - - no-cache - content-length: - - '4481' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c43e4a30-77cb-48ab-a4dd-93f175c63b57'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Microsoft Antimalware for Azure should - be configured to automatically update protection signatures","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows virtual machine not configured with automatic update - of Microsoft Antimalware protection signatures.","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","equals":"Windows"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"IaaSAntimalware"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Security"},{"field":"Microsoft.Compute/virtualMachines/extensions/autoUpgradeMinorVersion","equals":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c43e4a30-77cb-48ab-a4dd-93f175c63b57","type":"Microsoft.Authorization/policyDefinitions","name":"c43e4a30-77cb-48ab-a4dd-93f175c63b57"}' - headers: - cache-control: - - no-cache - content-length: - - '1372' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c4857be7-912a-4c75-87e6-e30292bcdf78'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Container Registry should - use a virtual network service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Container Registry not configured to use a virtual network - service endpoint.","metadata":{"version":"1.0.0-preview","category":"Network","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"anyOf":[{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","notEquals":"Deny"},{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.virtualNetworkRules[*].action","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4857be7-912a-4c75-87e6-e30292bcdf78","type":"Microsoft.Authorization/policyDefinitions","name":"c4857be7-912a-4c75-87e6-e30292bcdf78"}' - headers: - cache-control: - - no-cache - content-length: - - '1087' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c4d441f8-f9d9-4a9e-9cef-e82117cb3eef'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed identity should be used in your - API App","policyType":"BuiltIn","mode":"Indexed","description":"Use a managed - identity for enhanced authentication security","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"anyOf":[{"field":"Microsoft.Web/sites/config/managedServiceIdentityId","exists":"true"},{"field":"Microsoft.Web/sites/config/xmanagedServiceIdentityId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4d441f8-f9d9-4a9e-9cef-e82117cb3eef","type":"Microsoft.Authorization/policyDefinitions","name":"c4d441f8-f9d9-4a9e-9cef-e82117cb3eef"}' - headers: - cache-control: - - no-cache - content-length: - - '1043' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c4ebc54a-46e1-481a-bee2-d4411e95d828'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authentication should be enabled on your - API app","policyType":"BuiltIn","mode":"Indexed","description":"Azure App - Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the API app, or authenticate those that have tokens before they - reach the API app","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c4ebc54a-46e1-481a-bee2-d4411e95d828","type":"Microsoft.Authorization/policyDefinitions","name":"c4ebc54a-46e1-481a-bee2-d4411e95d828"}' - headers: - cache-control: - - no-cache - content-length: - - '1065' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c5447c04-a4d7-4ba8-a263-c9ee321a6858'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"An activity log alert should exist for - specific Policy operations","policyType":"BuiltIn","mode":"All","description":"This - policy audits specific Policy operations with no activity log alerts configured.","metadata":{"version":"3.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"operationName":{"type":"String","metadata":{"displayName":"Operation - Name","description":"Policy Operation name for which activity log alert should - exist"},"allowedValues":["Microsoft.Authorization/policyAssignments/write","Microsoft.Authorization/policyAssignments/delete"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/ActivityLogAlerts","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/enabled","equals":"true"},{"count":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"Administrative"}]},{"allOf":[{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"},{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].equals","equals":"[parameters(''operationName'')]"}]}]}},"equals":2},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"category"}},{"not":{"field":"Microsoft.Insights/ActivityLogAlerts/condition.allOf[*].field","equals":"operationName"}}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5447c04-a4d7-4ba8-a263-c9ee321a6858","type":"Microsoft.Authorization/policyDefinitions","name":"c5447c04-a4d7-4ba8-a263-c9ee321a6858"}' - headers: - cache-control: - - no-cache - content-length: - - '2003' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c5b85cba-6e6f-4de4-95e1-f0233cd712ac'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that have the - specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is found in any of the following registry paths: HKLM:SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall, - HKLM:SOFTWARE\\Wow6432node\\Microsoft\\Windows\\CurrentVersion\\Uninstall, - HKCU:Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"NotInstalledApplicationForWindows","version":"1.*","configurationParameter":{"ApplicationName":"[InstalledApplication]NotInstalledApplicationResource1;Name"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names (supports wildcards)","description":"A semicolon-separated list of the - names of the applications that should not be installed. e.g. ''Microsoft SQL - Server 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL Server - 2014*'' (to match any application starting with ''Microsoft SQL Server 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplicationForWindows","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]NotInstalledApplicationResource1;Name'', - ''='', parameters(''ApplicationName'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5b85cba-6e6f-4de4-95e1-f0233cd712ac","type":"Microsoft.Authorization/policyDefinitions","name":"c5b85cba-6e6f-4de4-95e1-f0233cd712ac"}' - headers: - cache-control: - - no-cache - content-length: - - '4393' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c5fbc59e-fb6f-494f-81e2-d99a671bdaa8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that contain certificates expiring within the specified - number of days","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that contain certificates expiring within the specified number of days. It - also creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"CertificateStorePath":{"type":"String","metadata":{"displayName":"[Deprecated]: - Certificate store path","description":"The path to the certificate store containing - the certificates to check the expiration dates of. Default value is ''Cert:'' - which is the root certificate store path, so all certificates on the machine - will be checked. Other example paths: ''Cert:\\LocalMachine'', ''Cert:\\LocalMachine\\TrustedPublisher'', - ''Cert:\\CurrentUser''"}},"ExpirationLimitInDays":{"type":"String","metadata":{"displayName":"[Deprecated]: - Expiration limit in days","description":"An integer indicating the number - of days within which to check for certificates that are expiring. For example, - if this value is 30, any certificate expiring within the next 30 days will - cause this policy to be non-compliant."}},"CertificateThumbprintsToInclude":{"type":"String","metadata":{"displayName":"[Deprecated]: - Certificate thumbprints to include","description":"A semicolon-separated list - of certificate thumbprints to check under the specified path. If a value is - not specified, all certificates under the certificate store path will be checked. - If a value is specified, no certificates other than those with the thumbprints - specified will be checked. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}},"CertificateThumbprintsToExclude":{"type":"String","metadata":{"displayName":"[Deprecated]: - Certificate thumbprints to exclude","description":"A semicolon-separated list - of certificate thumbprints to ignore. e.g. THUMBPRINT1;THUMBPRINT2;THUMBPRINT3"}},"IncludeExpiredCertificates":{"type":"String","metadata":{"displayName":"[Deprecated]: - Include expired certificates","description":"Must be ''true'' or ''false''. - True indicates that any found certificates that have already expired will - also make this policy non-compliant. False indicates that certificates that - have expired will be be ignored."},"allowedValues":["true","false"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"CertificateExpiration","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[CertificateStore]CertificateStore1;CertificateStorePath'', - ''='', parameters(''CertificateStorePath''), '','', ''[CertificateStore]CertificateStore1;ExpirationLimitInDays'', - ''='', parameters(''ExpirationLimitInDays''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude'', - ''='', parameters(''CertificateThumbprintsToInclude''), '','', ''[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude'', - ''='', parameters(''CertificateThumbprintsToExclude''), '','', ''[CertificateStore]CertificateStore1;IncludeExpiredCertificates'', - ''='', parameters(''IncludeExpiredCertificates'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"CertificateExpiration"},"CertificateStorePath":{"value":"[parameters(''CertificateStorePath'')]"},"ExpirationLimitInDays":{"value":"[parameters(''ExpirationLimitInDays'')]"},"CertificateThumbprintsToInclude":{"value":"[parameters(''CertificateThumbprintsToInclude'')]"},"CertificateThumbprintsToExclude":{"value":"[parameters(''CertificateThumbprintsToExclude'')]"},"IncludeExpiredCertificates":{"value":"[parameters(''IncludeExpiredCertificates'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"CertificateStorePath":{"type":"string"},"ExpirationLimitInDays":{"type":"string"},"CertificateThumbprintsToInclude":{"type":"string"},"CertificateThumbprintsToExclude":{"type":"string"},"IncludeExpiredCertificates":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateStorePath","value":"[parameters(''CertificateStorePath'')]"},{"name":"[CertificateStore]CertificateStore1;ExpirationLimitInDays","value":"[parameters(''ExpirationLimitInDays'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprintsToInclude'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude","value":"[parameters(''CertificateThumbprintsToExclude'')]"},{"name":"[CertificateStore]CertificateStore1;IncludeExpiredCertificates","value":"[parameters(''IncludeExpiredCertificates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[CertificateStore]CertificateStore1;CertificateStorePath","value":"[parameters(''CertificateStorePath'')]"},{"name":"[CertificateStore]CertificateStore1;ExpirationLimitInDays","value":"[parameters(''ExpirationLimitInDays'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToInclude","value":"[parameters(''CertificateThumbprintsToInclude'')]"},{"name":"[CertificateStore]CertificateStore1;CertificateThumbprintsToExclude","value":"[parameters(''CertificateThumbprintsToExclude'')]"},{"name":"[CertificateStore]CertificateStore1;IncludeExpiredCertificates","value":"[parameters(''IncludeExpiredCertificates'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c5fbc59e-fb6f-494f-81e2-d99a671bdaa8","type":"Microsoft.Authorization/policyDefinitions","name":"c5fbc59e-fb6f-494f-81e2-d99a671bdaa8"}' - headers: - cache-control: - - no-cache - content-length: - - '10333' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c633f6a2-7f8b-4d9e-9456-02f0f04f5505'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that are not set - to the specified time zone","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the value of the - property StandardName in WMI class Win32_TimeZone does not match the selected - time zone for the policy parameter.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsTimeZone","version":"1.*","configurationParameter":{"TimeZone":"[WindowsTimeZone]WindowsTimeZone1;TimeZone"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"TimeZone":{"type":"String","metadata":{"displayName":"Time - zone","description":"The expected time zone"},"allowedValues":["(UTC-12:00) - International Date Line West","(UTC-11:00) Coordinated Universal Time-11","(UTC-10:00) - Aleutian Islands","(UTC-10:00) Hawaii","(UTC-09:30) Marquesas Islands","(UTC-09:00) - Alaska","(UTC-09:00) Coordinated Universal Time-09","(UTC-08:00) Baja California","(UTC-08:00) - Coordinated Universal Time-08","(UTC-08:00) Pacific Time (US & Canada)","(UTC-07:00) - Arizona","(UTC-07:00) Chihuahua, La Paz, Mazatlan","(UTC-07:00) Mountain Time - (US & Canada)","(UTC-06:00) Central America","(UTC-06:00) Central Time (US - & Canada)","(UTC-06:00) Easter Island","(UTC-06:00) Guadalajara, Mexico City, - Monterrey","(UTC-06:00) Saskatchewan","(UTC-05:00) Bogota, Lima, Quito, Rio - Branco","(UTC-05:00) Chetumal","(UTC-05:00) Eastern Time (US & Canada)","(UTC-05:00) - Haiti","(UTC-05:00) Havana","(UTC-05:00) Indiana (East)","(UTC-05:00) Turks - and Caicos","(UTC-04:00) Asuncion","(UTC-04:00) Atlantic Time (Canada)","(UTC-04:00) - Caracas","(UTC-04:00) Cuiaba","(UTC-04:00) Georgetown, La Paz, Manaus, San - Juan","(UTC-04:00) Santiago","(UTC-03:30) Newfoundland","(UTC-03:00) Araguaina","(UTC-03:00) - Brasilia","(UTC-03:00) Cayenne, Fortaleza","(UTC-03:00) City of Buenos Aires","(UTC-03:00) - Greenland","(UTC-03:00) Montevideo","(UTC-03:00) Punta Arenas","(UTC-03:00) - Saint Pierre and Miquelon","(UTC-03:00) Salvador","(UTC-02:00) Coordinated - Universal Time-02","(UTC-02:00) Mid-Atlantic - Old","(UTC-01:00) Azores","(UTC-01:00) - Cabo Verde Is.","(UTC) Coordinated Universal Time","(UTC+00:00) Dublin, Edinburgh, - Lisbon, London","(UTC+00:00) Monrovia, Reykjavik","(UTC+00:00) Sao Tome","(UTC+01:00) - Casablanca","(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna","(UTC+01:00) - Belgrade, Bratislava, Budapest, Ljubljana, Prague","(UTC+01:00) Brussels, - Copenhagen, Madrid, Paris","(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb","(UTC+01:00) - West Central Africa","(UTC+02:00) Amman","(UTC+02:00) Athens, Bucharest","(UTC+02:00) - Beirut","(UTC+02:00) Cairo","(UTC+02:00) Chisinau","(UTC+02:00) Damascus","(UTC+02:00) - Gaza, Hebron","(UTC+02:00) Harare, Pretoria","(UTC+02:00) Helsinki, Kyiv, - Riga, Sofia, Tallinn, Vilnius","(UTC+02:00) Jerusalem","(UTC+02:00) Kaliningrad","(UTC+02:00) - Khartoum","(UTC+02:00) Tripoli","(UTC+02:00) Windhoek","(UTC+03:00) Baghdad","(UTC+03:00) - Istanbul","(UTC+03:00) Kuwait, Riyadh","(UTC+03:00) Minsk","(UTC+03:00) Moscow, - St. Petersburg","(UTC+03:00) Nairobi","(UTC+03:30) Tehran","(UTC+04:00) Abu - Dhabi, Muscat","(UTC+04:00) Astrakhan, Ulyanovsk","(UTC+04:00) Baku","(UTC+04:00) - Izhevsk, Samara","(UTC+04:00) Port Louis","(UTC+04:00) Saratov","(UTC+04:00) - Tbilisi","(UTC+04:00) Volgograd","(UTC+04:00) Yerevan","(UTC+04:30) Kabul","(UTC+05:00) - Ashgabat, Tashkent","(UTC+05:00) Ekaterinburg","(UTC+05:00) Islamabad, Karachi","(UTC+05:00) - Qyzylorda","(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi","(UTC+05:30) - Sri Jayawardenepura","(UTC+05:45) Kathmandu","(UTC+06:00) Astana","(UTC+06:00) - Dhaka","(UTC+06:00) Omsk","(UTC+06:30) Yangon (Rangoon)","(UTC+07:00) Bangkok, - Hanoi, Jakarta","(UTC+07:00) Barnaul, Gorno-Altaysk","(UTC+07:00) Hovd","(UTC+07:00) - Krasnoyarsk","(UTC+07:00) Novosibirsk","(UTC+07:00) Tomsk","(UTC+08:00) Beijing, - Chongqing, Hong Kong, Urumqi","(UTC+08:00) Irkutsk","(UTC+08:00) Kuala Lumpur, - Singapore","(UTC+08:00) Perth","(UTC+08:00) Taipei","(UTC+08:00) Ulaanbaatar","(UTC+08:45) - Eucla","(UTC+09:00) Chita","(UTC+09:00) Osaka, Sapporo, Tokyo","(UTC+09:00) - Pyongyang","(UTC+09:00) Seoul","(UTC+09:00) Yakutsk","(UTC+09:30) Adelaide","(UTC+09:30) - Darwin","(UTC+10:00) Brisbane","(UTC+10:00) Canberra, Melbourne, Sydney","(UTC+10:00) - Guam, Port Moresby","(UTC+10:00) Hobart","(UTC+10:00) Vladivostok","(UTC+10:30) - Lord Howe Island","(UTC+11:00) Bougainville Island","(UTC+11:00) Chokurdakh","(UTC+11:00) - Magadan","(UTC+11:00) Norfolk Island","(UTC+11:00) Sakhalin","(UTC+11:00) - Solomon Is., New Caledonia","(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky","(UTC+12:00) - Auckland, Wellington","(UTC+12:00) Coordinated Universal Time+12","(UTC+12:00) - Fiji","(UTC+12:00) Petropavlovsk-Kamchatsky - Old","(UTC+12:45) Chatham Islands","(UTC+13:00) - Coordinated Universal Time+13","(UTC+13:00) Nuku''alofa","(UTC+13:00) Samoa","(UTC+14:00) - Kiritimati Island"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsTimeZone","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsTimeZone]WindowsTimeZone1;TimeZone'', - ''='', parameters(''TimeZone'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505","type":"Microsoft.Authorization/policyDefinitions","name":"c633f6a2-7f8b-4d9e-9456-02f0f04f5505"}' - headers: - cache-control: - - no-cache - content-length: - - '8100' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c648fbbb-591c-4acd-b465-ce9b176ca173'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not have - the specified Windows PowerShell execution policy","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Windows PowerShell - command Get-ExecutionPolicy returns a value other than what was selected in - the policy parameter.","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsPowerShellExecutionPolicy","version":"1.*","configurationParameter":{"ExecutionPolicy":"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ExecutionPolicy":{"type":"String","metadata":{"displayName":"PowerShell - Execution Policy","description":"The expected PowerShell execution policy."},"allowedValues":["AllSigned","Bypass","Default","RemoteSigned","Restricted","Undefined","Unrestricted"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellExecutionPolicy","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy'', - ''='', parameters(''ExecutionPolicy'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173","type":"Microsoft.Authorization/policyDefinitions","name":"c648fbbb-591c-4acd-b465-ce9b176ca173"}' - headers: - cache-control: - - no-cache - content-length: - - '4336' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c717fb0c-d118-4c43-ab3d-ece30ac81fb3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Recovery - Services Vault to Log Analytics workspace for resource specific categories.","policyType":"BuiltIn","mode":"Indexed","description":"Deploy - Diagnostic Settings for Recovery Services Vault to stream to Log Analytics - workspace for Resource specific categories. If any of the Resource specific - categories are not enabled, a new diagnostic setting is created.","metadata":{"version":"1.0.2","category":"Backup"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"tagName":{"type":"String","metadata":{"displayName":"Exclusion - Tag Name","description":"Name of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Value parameter."}},"tagValue":{"type":"String","metadata":{"displayName":"Exclusion - Tag Value","description":"Value of the tag to use for excluding vaults from - this policy. This should be used along with the Exclusion Tag Name parameter."}}},"policyRule":{"if":{"allof":[{"field":"type","equals":"Microsoft.RecoveryServices/vaults"},{"not":{"field":"[concat(''tags['',parameters(''tagName''), - '']'')]","equals":"[parameters(''tagValue'')]"}}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"allof":[{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"allof":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].Category","in":["CoreAzureBackup","AddonAzureBackupJobs","AddonAzureBackupAlerts","AddonAzureBackupPolicy","AddonAzureBackupStorage","AddonAzureBackupProtectedInstance"]},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].Enabled","equals":"True"}]}},"Equals":6},{"field":"Microsoft.Insights/diagnosticSettings/workspaceId","notEquals":""},{"field":"Microsoft.Insights/diagnosticSettings/logAnalyticsDestinationType","equals":"Dedicated"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vaultName":{"type":"string"},"logAnalytics":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.RecoveryServices/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","logAnalyticsDestinationType":"Dedicated","metrics":[],"logs":[{"category":"CoreAzureBackup","enabled":"true"},{"category":"AddonAzureBackupAlerts","enabled":"true"},{"category":"AddonAzureBackupJobs","enabled":"true"},{"category":"AddonAzureBackupPolicy","enabled":"true"},{"category":"AddonAzureBackupProtectedInstance","enabled":"true"},{"category":"AddonAzureBackupStorage","enabled":"true"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(parameters(''logAnalytics''), - ''configured for resource logs for '', '': '', parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]"}}},"parameters":{"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"vaultName":{"value":"[field(''name'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c717fb0c-d118-4c43-ab3d-ece30ac81fb3","type":"Microsoft.Authorization/policyDefinitions","name":"c717fb0c-d118-4c43-ab3d-ece30ac81fb3"}' - headers: - cache-control: - - no-cache - content-length: - - '4124' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authentication should be enabled on your - Function app","policyType":"BuiltIn","mode":"Indexed","description":"Azure - App Service Authentication is a feature that can prevent anonymous HTTP requests - from reaching the Function app, or authenticate those that have tokens before - they reach the Function app","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","equals":"functionapp"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/siteAuthEnabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8","type":"Microsoft.Authorization/policyDefinitions","name":"c75248c1-ea1d-4a9c-8fc9-29a6aabd5da8"}' - headers: - cache-control: - - no-cache - content-length: - - '1089' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c8343d2f-fdc9-4a97-b76f-fc71d1163bfc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Email notifications to - admins should be enabled in SQL server advanced data security settings","policyType":"BuiltIn","mode":"Indexed","description":"Audit - that ''email notification to admins and subscription owners'' is enabled in - the SQL server advanced threat protection settings. This ensures that any - detections of anomalous activities on SQL server are reported as soon as possible - to the admins.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/emailAccountAdmins","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c8343d2f-fdc9-4a97-b76f-fc71d1163bfc","type":"Microsoft.Authorization/policyDefinitions","name":"c8343d2f-fdc9-4a97-b76f-fc71d1163bfc"}' - headers: - cache-control: - - no-cache - content-length: - - '1227' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c84e5349-db6d-4769-805e-e14037dab9b5'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Batch - Account to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Batch Account to stream to a regional Log Analytics - workspace when any Batch Account which is missing this diagnostic settings - is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Batch/batchAccounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Batch/batchAccounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ServiceLog","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c84e5349-db6d-4769-805e-e14037dab9b5","type":"Microsoft.Authorization/policyDefinitions","name":"c84e5349-db6d-4769-805e-e14037dab9b5"}' - headers: - cache-control: - - no-cache - content-length: - - '3641' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c85538c1-b527-4ce4-bdb4-1dabcb3fd90d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: API App should only be - accessible over HTTPS","policyType":"BuiltIn","mode":"All","description":"Use - of HTTPS ensures server/service authentication and protects data in transit - from network layer eavesdropping attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"api"},{"field":"kind","equals":"apiApp"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"OnlyHttpsForApiApp","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c85538c1-b527-4ce4-bdb4-1dabcb3fd90d","type":"Microsoft.Authorization/policyDefinitions","name":"c85538c1-b527-4ce4-bdb4-1dabcb3fd90d"}' - headers: - cache-control: - - no-cache - content-length: - - '1154' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c8abcef9-fc26-482f-b8db-5fa60ee4586d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Interactive Logon''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Interactive Logon''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsInteractiveLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c8abcef9-fc26-482f-b8db-5fa60ee4586d","type":"Microsoft.Authorization/policyDefinitions","name":"c8abcef9-fc26-482f-b8db-5fa60ee4586d"}' - headers: - cache-control: - - no-cache - content-length: - - '3266' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c9299215-ae47-4f50-9c54-8a392f68a052'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for MySQL flexible servers","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - the public network access property improves security by ensuring your Azure - Database for MySQL flexible servers can only be accessed from a private endpoint. - This configuration strictly disables access from any public address space - outside of Azure IP range and denies all logins that match IP or virtual network-based - firewall rules.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/flexibleServers"},{"field":"Microsoft.DBforMySQL/flexibleServers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9299215-ae47-4f50-9c54-8a392f68a052","type":"Microsoft.Authorization/policyDefinitions","name":"c9299215-ae47-4f50-9c54-8a392f68a052"}' - headers: - cache-control: - - no-cache - content-length: - - '1159' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c95c74d9-38fe-4f0d-af86-0c7d626a315c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Data Lake Analytics - should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised","metadata":{"version":"4.0.1","category":"Data Lake"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c95c74d9-38fe-4f0d-af86-0c7d626a315c","type":"Microsoft.Authorization/policyDefinitions","name":"c95c74d9-38fe-4f0d-af86-0c7d626a315c"}' - headers: - cache-control: - - no-cache - content-length: - - '1950' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c961dac9-5916-42e8-8fb1-703148323994'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''User Rights Assignment''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''User Rights Assignment''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_UserRightsAssignment","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c961dac9-5916-42e8-8fb1-703148323994","type":"Microsoft.Authorization/policyDefinitions","name":"c961dac9-5916-42e8-8fb1-703148323994"}' - headers: - cache-control: - - no-cache - content-length: - - '3227' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c96f3246-4382-4264-bf6b-af0b35e23c3c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs with a pending reboot","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with a pending reboot. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPendingReboot","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPendingReboot"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c96f3246-4382-4264-bf6b-af0b35e23c3c","type":"Microsoft.Authorization/policyDefinitions","name":"c96f3246-4382-4264-bf6b-af0b35e23c3c"}' - headers: - cache-control: - - no-cache - content-length: - - '5625' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:48:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure IoT Hubs to - use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private DNS provides a reliable, secure DNS service to manage and resolve - domain names in a virtual network without the need to add a custom DNS solution. - You can use private DNS zones to override the DNS resolution by using your - own custom domain names for a private endpoint. This policy deploys a private - DNS Zone for IoT Hub private endpoints.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"iotHub"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink.azure-devices.net","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02","type":"Microsoft.Authorization/policyDefinitions","name":"c99ce9c1-ced7-4c3e-aca0-10e69ce0cb02"}' - headers: - cache-control: - - no-cache - content-length: - - '2669' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:48:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c9c29499-c1d1-4195-99bd-2ec9e3a9dc89'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Network - Security Groups","policyType":"BuiltIn","mode":"Indexed","description":"This - policy automatically deploys diagnostic settings to network security groups. - A storage account with name ''{storagePrefixParameter}{NSGLocation}'' will - be automatically created.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"storagePrefix":{"type":"String","metadata":{"displayName":"Storage - Account Prefix for Regional Storage Account","description":"This prefix will - be combined with the network security group location to form the created storage - account name."}},"rgName":{"type":"String","metadata":{"displayName":"Resource - Group Name for Storage Account (must exist)","description":"The resource group - that the storage account will be created in. This resource group must already - exist.","strongType":"ExistingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/networkSecurityGroups"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"setbypolicy","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"},"nsgName":{"type":"string"},"rgName":{"type":"string"}},"variables":{"storageDeployName":"[concat(''policyStorage_'', - uniqueString(parameters(''location''), parameters(''nsgName'')))]"},"resources":[{"type":"Microsoft.Network/networkSecurityGroups/providers/diagnosticSettings","name":"[concat(parameters(''nsgName''),''/Microsoft.Insights/setbypolicy'')]","apiVersion":"2017-05-01-preview","location":"[parameters(''location'')]","dependsOn":["[variables(''storageDeployName'')]"],"properties":{"storageAccountId":"[reference(variables(''storageDeployName'')).outputs.storageAccountId.value]","logs":[{"category":"NetworkSecurityGroupEvent","enabled":true,"retentionPolicy":{"enabled":false,"days":0}},{"category":"NetworkSecurityGroupRuleCounter","enabled":true,"retentionPolicy":{"enabled":false,"days":0}}]}},{"apiVersion":"2017-05-10","name":"[variables(''storageDeployName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''rgName'')]","properties":{"mode":"incremental","parameters":{"location":{"value":"[parameters(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storagePrefix":{"type":"string"}},"resources":[{"apiVersion":"2017-06-01","type":"Microsoft.Storage/storageAccounts","name":"[concat(parameters(''storageprefix''), - parameters(''location''))]","sku":{"name":"Standard_LRS","tier":"Standard"},"kind":"Storage","location":"[parameters(''location'')]","tags":{"created-by":"policy"},"scale":null,"properties":{"networkAcls":{"bypass":"AzureServices","defaultAction":"Allow","ipRules":[],"virtualNetworkRules":[]},"supportsHttpsTrafficOnly":true}}],"outputs":{"storageAccountId":{"type":"string","value":"[resourceId(parameters(''rgName''), - ''Microsoft.Storage/storageAccounts'',concat(parameters(''storagePrefix''), - parameters(''location'')))]"}}}}}]},"parameters":{"location":{"value":"[field(''location'')]"},"storagePrefix":{"value":"[parameters(''storagePrefix'')]"},"rgName":{"value":"[parameters(''rgName'')]"},"nsgName":{"value":"[field(''name'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9c29499-c1d1-4195-99bd-2ec9e3a9dc89","type":"Microsoft.Authorization/policyDefinitions","name":"c9c29499-c1d1-4195-99bd-2ec9e3a9dc89"}' - headers: - cache-control: - - no-cache - content-length: - - '3924' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''c9d007d0-c057-4772-b18c-01e546713bcd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage accounts should allow access - from trusted Microsoft services","policyType":"BuiltIn","mode":"Indexed","description":"Some - Microsoft services that interact with storage accounts operate from networks - that can''t be granted access through network rules. To help this type of - service work as intended, allow the set of trusted Microsoft services to bypass - the network rules. These services will then use strong authentication to access - the storage account.","metadata":{"version":"1.0.0","category":"Storage"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Storage/storageAccounts"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.bypass","exists":"true"},{"field":"Microsoft.Storage/storageAccounts/networkAcls.bypass","notContains":"AzureServices"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/c9d007d0-c057-4772-b18c-01e546713bcd","type":"Microsoft.Authorization/policyDefinitions","name":"c9d007d0-c057-4772-b18c-01e546713bcd"}' - headers: - cache-control: - - no-cache - content-length: - - '1268' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ca610c1d-041c-4332-9d88-7ed3094967c7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"App Configuration should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The private link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to your app configuration instances - instead of the entire service, you''ll also be protected against data leakage - risks. Learn more at: https://aka.ms/appconfig/private-endpoint.","metadata":{"version":"1.0.2","category":"App - Configuration"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.AppConfiguration/configurationStores"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections","existenceCondition":{"field":"Microsoft.AppConfiguration/configurationStores/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca610c1d-041c-4332-9d88-7ed3094967c7","type":"Microsoft.Authorization/policyDefinitions","name":"ca610c1d-041c-4332-9d88-7ed3094967c7"}' - headers: - cache-control: - - no-cache - content-length: - - '1433' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ca817e41-e85a-4783-bc7f-dc532d36235e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy - Configure Windows - Azure Monitor agent to enable Azure Monitor assignments on Windows virtual - machines","policyType":"BuiltIn","mode":"Indexed","description":"Configure - Windows Azure Monitor agent to Windows virtual machines hosted in Azure that - are supported by Azure Monitor. Azure Monitor agent collects events from the - virtual machine that can be used to provide recommendations. Target virtual - machines must be in a supported location.","metadata":{"category":"Monitoring","version":"1.0.0-preview","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"location","in":["australiacentral","australiaeast","australiasoutheast","centralindia","centralus","eastasia","eastus2euap","eastus","eastus2","germanywestcentral","japaneast","northcentralus","northeurope","southcentralus","southeastasia","uksouth","westcentralus","westeurope","westus","westus2"]},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/9980e02c-c2be-4d73-94e8-173b1dc7cf3c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzureMonitorWindowsAgent","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.Azure.Monitor"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"AzureMonitorWindowsAgent"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"type":"Microsoft.Compute/virtualMachines/extensions","name":"[concat(parameters(''vmName''), - ''/AzureMonitorWindowsAgent'')]","apiVersion":"2019-07-01","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.Azure.Monitor","type":"AzureMonitorWindowsAgent","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca817e41-e85a-4783-bc7f-dc532d36235e","type":"Microsoft.Authorization/policyDefinitions","name":"ca817e41-e85a-4783-bc7f-dc532d36235e"}' - headers: - cache-control: - - no-cache - content-length: - - '5015' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ca91455f-eace-4f96-be59-e6e2c35b4816'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed disks should be double encrypted - with both platform-managed and customer-managed keys","policyType":"BuiltIn","mode":"Indexed","description":"High - security sensitive customers who are concerned of the risk associated with - any particular encryption algorithm, implementation, or key being compromised - can opt for additional layer of encryption using a different encryption algorithm/mode - at the infrastructure layer using platform managed encryption keys. The disk - encryption sets are required to use double encryption. Learn more at https://aka.ms/disks-doubleEncryption.","metadata":{"category":"Compute","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/diskEncryptionSets"},{"field":"Microsoft.Compute/diskEncryptionSets/encryptionType","notEquals":"EncryptionAtRestWithPlatformAndCustomerKeys"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ca91455f-eace-4f96-be59-e6e2c35b4816","type":"Microsoft.Authorization/policyDefinitions","name":"ca91455f-eace-4f96-be59-e6e2c35b4816"}' - headers: - cache-control: - - no-cache - content-length: - - '1304' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''caf2d518-f029-4f6b-833b-d7081702f253'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Microsoft Network Server''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Microsoft Network Server'' for disabling SMB v1 server. This policy - requires that the Guest Configuration prerequisites have been deployed to - the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkServer","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/caf2d518-f029-4f6b-833b-d7081702f253","type":"Microsoft.Authorization/policyDefinitions","name":"caf2d518-f029-4f6b-833b-d7081702f253"}' - headers: - cache-control: - - no-cache - content-length: - - '3816' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cb510bfd-1cba-4d9f-a230-cb0976f4bb71'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Remote debugging should be turned off - for Web Applications","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on a web application. Remote - debugging should be turned off.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","existenceCondition":{"field":"Microsoft.Web/sites/config/web.remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cb510bfd-1cba-4d9f-a230-cb0976f4bb71","type":"Microsoft.Authorization/policyDefinitions","name":"cb510bfd-1cba-4d9f-a230-cb0976f4bb71"}' - headers: - cache-control: - - no-cache - content-length: - - '1005' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cc7cda28-f867-4311-8497-a526129a8d19'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs if the Administrators group doesn''t contain only specified members","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines in which the Administrators group does not - contain only the specified members. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembers","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc7cda28-f867-4311-8497-a526129a8d19","type":"Microsoft.Authorization/policyDefinitions","name":"cc7cda28-f867-4311-8497-a526129a8d19"}' - headers: - cache-control: - - no-cache - content-length: - - '3242' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Sensitive data in your SQL - databases should be classified","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Security Center monitors the data discovery and classification scan results - for your SQL databases and provides recommendations to classify the sensitive - data in your databases for better monitoring and security","metadata":{"version":"3.0.0-preview","category":"Security - Center","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Sql/servers/databases","Microsoft.Sql/managedInstances/databases"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"b0df6f56-862d-4730-8597-38c0fd4ebd59","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349","type":"Microsoft.Authorization/policyDefinitions","name":"cc9835f2-9f6b-4cc8-ab4a-f8ef615eb349"}' - headers: - cache-control: - - no-cache - content-length: - - '1222' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cccc23c7-8427-4f53-ad12-b6a63eb452b3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allowed virtual machine size SKUs","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to specify a set of virtual machine size SKUs that your - organization can deploy.","metadata":{"version":"1.0.1","category":"Compute"},"parameters":{"listOfAllowedSKUs":{"type":"Array","metadata":{"description":"The - list of size SKUs that can be specified for virtual machines.","displayName":"Allowed - Size SKUs","strongType":"VMSKUs"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"not":{"field":"Microsoft.Compute/virtualMachines/sku.name","in":"[parameters(''listOfAllowedSKUs'')]"}}]},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cccc23c7-8427-4f53-ad12-b6a63eb452b3","type":"Microsoft.Authorization/policyDefinitions","name":"cccc23c7-8427-4f53-ad12-b6a63eb452b3"}' - headers: - cache-control: - - no-cache - content-length: - - '899' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cd3aa116-8754-49c9-a813-ad46512ece54'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Inherit a tag from the resource group","policyType":"BuiltIn","mode":"Indexed","description":"Adds - or replaces the specified tag and value from the parent resource group when - any resource is created or updated. Existing resources can be remediated by - triggering a remediation task.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[resourceGroup().tags[parameters(''tagName'')]]"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd3aa116-8754-49c9-a813-ad46512ece54","type":"Microsoft.Authorization/policyDefinitions","name":"cd3aa116-8754-49c9-a813-ad46512ece54"}' - headers: - cache-control: - - no-cache - content-length: - - '1223' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cd8dc879-a2ae-43c3-8211-1877c5755064'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Allow resource creation - if ''department'' tag set","policyType":"BuiltIn","mode":"Indexed","description":"Allows - resource creation only if the ''department'' tag is set","metadata":{"version":"1.0.0-deprecated","category":"Tags","deprecated":true},"parameters":{},"policyRule":{"if":{"not":{"field":"tags","containsKey":"department"}},"then":{"effect":"Deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cd8dc879-a2ae-43c3-8211-1877c5755064","type":"Microsoft.Authorization/policyDefinitions","name":"cd8dc879-a2ae-43c3-8211-1877c5755064"}' - headers: - cache-control: - - no-cache - content-length: - - '596' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cdbf72d9-ac9c-4026-8a3a-491a5ac59293'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that allow re-use of the previous 24 passwords","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that allow re-use of the previous 24 passwords. - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"EnforcePasswordHistory","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdbf72d9-ac9c-4026-8a3a-491a5ac59293","type":"Microsoft.Authorization/policyDefinitions","name":"cdbf72d9-ac9c-4026-8a3a-491a5ac59293"}' - headers: - cache-control: - - no-cache - content-length: - - '3187' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cdfcce10-4578-4ecd-9703-530938e4abcb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy export to Event Hub for Azure - Security Center data","policyType":"BuiltIn","mode":"All","description":"Enable - export to Event Hub of Azure Security Center data. This policy deploys an - export to Event Hub configuration with your conditions and target Event Hub - on the assigned scope. To deploy this policy on newly created subscriptions, - open the Compliance tab, select the relevant non-compliant assignment and - create a remediation task.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the export to Event - Hub configuration is created. If you enter a name for a resource group that - doesn''t exist, it''ll be created in the subscription. Note that each resource - group can only have one export to Event Hub configured."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - export to Event Hub configuration are created.","strongType":"location"}},"exportedDataTypes":{"type":"Array","metadata":{"displayName":"Exported - data types","description":"The data types to be exported. To export a snapshot - (preview) of the data once a week, choose the data types which contains ''snapshot'', - other data types will be sent in real-time streaming."},"allowedValues":["Security - recommendations","Security alerts","Overall secure score","Secure score controls","Regulatory - compliance","Overall secure score - snapshot","Secure score controls - snapshot","Regulatory - compliance - snapshot"]},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include - security findings","description":"Security findings are results from vulnerability - assessment solutions, and can be thought of as ''sub'' recommendations grouped - into a ''parent'' recommendation."},"allowedValues":[true,false]},"secureScoreControlsNames":{"type":"Array","metadata":{"displayName":"Secure - Score Controls IDs","description":"Applicable only for export of secure score - controls. To export all secure score controls, leave this empty. To export - specific secure score controls, enter a list of secure score controls IDs - separated by semicolons ('';''). Secure score controls IDs are available through - the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory - compliance standards names","description":"Applicable only for export of regulatory - compliance. To export all regulatory compliance, leave this empty. To export - specific regulatory compliance standards, enter a list of these standards - names separated by semicolons ('';''). Regulatory compliance standards names - are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"eventHubDetails":{"type":"String","metadata":{"displayName":"Event - Hub details","description":"The Event Hub details of where the data should - be exported to: Subscription, Event Hub Namespace, Event Hub, and Authorizations - rules with ''Send'' claim.","strongType":"Microsoft.EventHub/namespaces/eventhubs/authorizationrules","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"exportToEventHub","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security - recommendations"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Alerts"},{"value":"[current(''dataType'')]","equals":"Security - alerts"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScores"},{"value":"[current(''dataType'')]","equals":"Overall - secure score"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoreControls"},{"value":"[current(''dataType'')]","equals":"Secure - score controls"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"RegulatoryComplianceAssessment"},{"value":"[current(''dataType'')]","equals":"Regulatory - compliance"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoresSnapshot"},{"value":"[current(''dataType'')]","equals":"Overall - secure score - snapshot"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoreControlsSnapshot"},{"value":"[current(''dataType'')]","equals":"Secure - score controls - snapshot"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"RegulatoryComplianceAssessmentSnapshot"},{"value":"[current(''dataType'')]","equals":"Regulatory - compliance - snapshot"}]}]}},"equals":1}},"equals":"[length(parameters(''exportedDataTypes''))]"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"exportedDataTypes":{"type":"array"},"isSecurityFindingsEnabled":{"type":"bool"},"recommendationNames":{"type":"array"},"secureScoreControlsNames":{"type":"array"},"regulatoryComplianceStandardsNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"alertSeverities":{"type":"array"},"eventHubDetails":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","subAssessmentRuleExpectedValue":"/assessments/{0}/","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","secureScoreControlsNamesLength":"[length(parameters(''secureScoreControlsNames''))]","secureScoreControlsLengthIfEmpty":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), 1, variables(''secureScoreControlsNamesLength''))]","regulatoryComplianceStandardsNamesLength":"[length(parameters(''regulatoryComplianceStandardsNames''))]","regulatoryComplianceStandardsNamesLengthIfEmpty":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), 1, variables(''regulatoryComplianceStandardsNamesLength''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","totalRuleCombinationsForOneRecommendationName":"[variables(''recommendationSeveritiesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationSeverity":1,"exportedDataTypesLength":"[length(parameters(''exportedDataTypes''))]","exportedDataTypesLengthIfEmpty":"[if(equals(variables(''exportedDataTypesLength''), - 0), 1, variables(''exportedDataTypesLength''))]","SeperatedEventHubDetails":"[split(parameters(''eventHubDetails''),''/'')]","dataTypeMap":{"Security - recommendations":"Assessments","Security alerts":"Alerts","Overall secure - score":"SecureScores","Secure score controls":"SecureScoreControls","Regulatory - compliance":"RegulatoryComplianceAssessment","Overall secure score - snapshot":"SecureScoresSnapshot","Secure - score controls - snapshot":"SecureScoreControlsSnapshot","Regulatory compliance - - snapshot":"RegulatoryComplianceAssessmentSnapshot"},"alertSeverityMap":{"High":"high","Medium":"medium","Low":"low"},"ruleSetsForAssessmentsObj":{"copy":[{"name":"ruleSetsForAssessmentsArr","count":"[mul(variables(''recommendationNamesLengthIfEmpty''),variables(''recommendationSeveritiesLengthIfEmpty''))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''),0),''type'',''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''),0),''Microsoft.Security/assessments'',parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationName'')),variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationSeverity'')),variables(''recommendationSeveritiesLength''))]]","operator":"Equals"}]}}]},"customRuleSetsForSubAssessmentsObj":{"copy":[{"name":"ruleSetsForSubAssessmentsArr","count":"[variables(''recommendationNamesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"id","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''), - 0), json(''null''), replace(variables(''subAssessmentRuleExpectedValue''),''{0}'', - parameters(''recommendationNames'')[copyIndex(''ruleSetsForSubAssessmentsArr'')]))]","operator":"Contains"}]}}]},"ruleSetsForAlertsObj":{"copy":[{"name":"ruleSetsForAlertsArr","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''alertSeverityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSetsForAlertsArr''),variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]},"customRuleSetsForSecureScoreControlsObj":{"copy":[{"name":"ruleSetsForSecureScoreControlsArr","count":"[variables(''secureScoreControlsLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"name","propertyType":"string","expectedValue":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), json(''null''), parameters(''secureScoreControlsNames'')[copyIndex(''ruleSetsForSecureScoreControlsArr'')])]","operator":"Equals"}]}}]},"customRuleSetsForRegulatoryComplianceObj":{"copy":[{"name":"ruleSetsForRegulatoryCompliancArr","count":"[variables(''regulatoryComplianceStandardsNamesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"id","propertyType":"string","expectedValue":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), json(''null''), parameters(''regulatoryComplianceStandardsNames'')[copyIndex(''ruleSetsForRegulatoryCompliancArr'')])]","operator":"Contains"}]}}]},"ruleSetsForSecureScoreControlsObj":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), json(''null''), variables(''customRuleSetsForSecureScoreControlsObj'').ruleSetsForSecureScoreControlsArr)]","ruleSetsForSecureRegulatoryComplianceObj":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), json(''null''), variables(''customRuleSetsForRegulatoryComplianceObj'').ruleSetsForRegulatoryCompliancArr)]","ruleSetsForSubAssessmentsObj":"[if(equals(variables(''recommendationNamesLength''), - 0), json(''null''), variables(''customRuleSetsForSubAssessmentsObj'').ruleSetsForSubAssessmentsArr)]","subAssessmentSource":[{"eventSource":"SubAssessments","ruleSets":"[variables(''ruleSetsForSubAssessmentsObj'')]"}],"ruleSetsMap":{"Security - recommendations":"[variables(''ruleSetsForAssessmentsObj'').ruleSetsForAssessmentsArr]","Security - alerts":"[variables(''ruleSetsForAlertsObj'').ruleSetsForAlertsArr]","Overall - secure score":null,"Secure score controls":"[variables(''ruleSetsForSecureScoreControlsObj'')]","Regulatory - compliance":"[variables(''ruleSetsForSecureRegulatoryComplianceObj'')]","Overall - secure score - snapshot":null,"Secure score controls - snapshot":"[variables(''ruleSetsForSecureScoreControlsObj'')]","Regulatory - compliance - snapshot":"[variables(''ruleSetsForSecureRegulatoryComplianceObj'')]"},"sourcesWithoutSubAssessments":{"copy":[{"name":"sources","count":"[variables(''exportedDataTypesLengthIfEmpty'')]","input":{"eventSource":"[variables(''dataTypeMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]","ruleSets":"[variables(''ruleSetsMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]"}}]},"sourcesWithSubAssessments":"[concat(variables(''subAssessmentSource''),variables(''sourcesWithoutSubAssessments'').sources)]","sources":"[if(equals(parameters(''isSecurityFindingsEnabled''),bool(''true'')),variables(''sourcesWithSubAssessments''),variables(''sourcesWithoutSubAssessments'').sources)]"},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"exportToEventHub","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Export - Azure Security Center data to Event Hub via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":"[variables(''sources'')]","actions":[{"actionType":"EventHub","eventHubResourceId":"[concat(''/'', - variables(''SeperatedEventHubDetails'')[1], ''/'', variables(''SeperatedEventHubDetails'')[2], - ''/'', variables(''SeperatedEventHubDetails'')[3], ''/'', variables(''SeperatedEventHubDetails'')[4], - ''/'', variables(''SeperatedEventHubDetails'')[5], ''/'', variables(''SeperatedEventHubDetails'')[6], - ''/'', variables(''SeperatedEventHubDetails'')[7], ''/'', variables(''SeperatedEventHubDetails'')[8], - ''/'', variables(''SeperatedEventHubDetails'')[9], ''/'', variables(''SeperatedEventHubDetails'')[10])]","connectionString":"[listkeys(parameters(''eventHubDetails''),''2017-04-01'').primaryConnectionString]"}]}}]}}}]},"parameters":{"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"exportedDataTypes":{"value":"[parameters(''exportedDataTypes'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"isSecurityFindingsEnabled":{"value":"[parameters(''isSecurityFindingsEnabled'')]"},"secureScoreControlsNames":{"value":"[parameters(''secureScoreControlsNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"regulatoryComplianceStandardsNames":{"value":"[parameters(''regulatoryComplianceStandardsNames'')]"},"eventHubDetails":{"value":"[parameters(''eventHubDetails'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cdfcce10-4578-4ecd-9703-530938e4abcb","type":"Microsoft.Authorization/policyDefinitions","name":"cdfcce10-4578-4ecd-9703-530938e4abcb"}' - headers: - cache-control: - - no-cache - content-length: - - '17304' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ce2370f6-0ac5-4d85-8ab4-10721cc640b0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - Privilege Use''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - Privilege Use''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPrivilegeUse","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesPrivilegeUse"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ce2370f6-0ac5-4d85-8ab4-10721cc640b0","type":"Microsoft.Authorization/policyDefinitions","name":"ce2370f6-0ac5-4d85-8ab4-10721cc640b0"}' - headers: - cache-control: - - no-cache - content-length: - - '5783' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''cf820ca0-f99e-4f3e-84fb-66e913812d21'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Key Vault should be - enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Key Vault"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.KeyVault/vaults"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/cf820ca0-f99e-4f3e-84fb-66e913812d21","type":"Microsoft.Authorization/policyDefinitions","name":"cf820ca0-f99e-4f3e-84fb-66e913812d21"}' - headers: - cache-control: - - no-cache - content-length: - - '1928' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d0793b48-0edc-4296-a390-4c75d1bdfd71'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Container registries should not allow - unrestricted network access","policyType":"BuiltIn","mode":"Indexed","description":"Azure - container registries by default accept connections over the internet from - hosts on any network. To protect your registries from potential threats, allow - access from only specific public IP addresses or address ranges. If your registry - doesn''t have an IP/firewall rule or a configured virtual network, it will - appear in the unhealthy resources. Learn more about Container Registry network - rules here: https://aka.ms/acr/portal/public-network and here https://aka.ms/acr/vnet.","metadata":{"version":"1.1.0","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"anyof":[{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","exists":"false"},{"field":"Microsoft.ContainerRegistry/registries/networkRuleSet.defaultAction","equals":"Allow"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d0793b48-0edc-4296-a390-4c75d1bdfd71","type":"Microsoft.Authorization/policyDefinitions","name":"d0793b48-0edc-4296-a390-4c75d1bdfd71"}' - headers: - cache-control: - - no-cache - content-length: - - '1424' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d157c373-a6c4-483d-aaad-570756956268'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Add or replace a tag on resource groups","policyType":"BuiltIn","mode":"All","description":"Adds - or replaces the specified tag and value when any resource group is created - or updated. Existing resource groups can be remediated by triggering a remediation - task.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}},"tagValue":{"type":"String","metadata":{"displayName":"Tag - Value","description":"Value of the tag, such as ''production''"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","notEquals":"[parameters(''tagValue'')]"}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"addOrReplace","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[parameters(''tagValue'')]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d157c373-a6c4-483d-aaad-570756956268","type":"Microsoft.Authorization/policyDefinitions","name":"d157c373-a6c4-483d-aaad-570756956268"}' - headers: - cache-control: - - no-cache - content-length: - - '1287' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d158790f-bfb0-486c-8631-2dc6b4e8e6af'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Enforce SSL connection should be enabled - for PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Database for PostgreSQL supports connecting your Azure Database for PostgreSQL - server to client applications using Secure Sockets Layer (SSL). Enforcing - SSL connections between your database server and your client applications - helps protect against ''man in the middle'' attacks by encrypting the data - stream between the server and your application. This configuration enforces - that SSL is always enabled for accessing your database server.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},{"field":"Microsoft.DBforPostgreSQL/servers/sslEnforcement","exists":"true"},{"field":"Microsoft.DBforPostgreSQL/servers/sslEnforcement","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d158790f-bfb0-486c-8631-2dc6b4e8e6af","type":"Microsoft.Authorization/policyDefinitions","name":"d158790f-bfb0-486c-8631-2dc6b4e8e6af"}' - headers: - cache-control: - - no-cache - content-length: - - '1322' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d1cb47db-b7a1-4c46-814e-aad1c0e84f3c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Function Apps that - are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a Function app from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"functionapp"},{"field":"kind","equals":"functionapp,linux"},{"field":"kind","equals":"functionapp,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d1cb47db-b7a1-4c46-814e-aad1c0e84f3c","type":"Microsoft.Authorization/policyDefinitions","name":"d1cb47db-b7a1-4c46-814e-aad1c0e84f3c"}' - headers: - cache-control: - - no-cache - content-length: - - '1229' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d26f7642-7545-4e18-9b75-8c9bbdee3a9a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual machines'' Guest Configuration - extension should be deployed with system-assigned managed identity","policyType":"BuiltIn","mode":"Indexed","description":"The - Guest Configuration extension requires a system assigned managed identity. - Azure virtual machines in the scope of this policy will be non-compliant when - they have the Guest Configuration extension installed but do not have a system - assigned managed identity. Learn more at https://aka.ms/gcpol","metadata":{"version":"1.0.1","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines","name":"[first(split(field(''fullName''), - ''/''))]","existenceCondition":{"field":"identity.type","contains":"SystemAssigned"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d26f7642-7545-4e18-9b75-8c9bbdee3a9a","type":"Microsoft.Authorization/policyDefinitions","name":"d26f7642-7545-4e18-9b75-8c9bbdee3a9a"}' - headers: - cache-control: - - no-cache - content-length: - - '1366' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d389df0a-e0d7-4607-833c-75a6fdac2c2d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy - Configure Azure Event Grid domains - to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. Learn - more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["deployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"domain"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"domain-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d389df0a-e0d7-4607-833c-75a6fdac2c2d","type":"Microsoft.Authorization/policyDefinitions","name":"d389df0a-e0d7-4607-833c-75a6fdac2c2d"}' - headers: - cache-control: - - no-cache - content-length: - - '2342' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d38b4c26-9d2e-47d7-aefe-18d859a8706a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs on which the DSC configuration is not compliant","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows VMs on which - the Desired State Configuration (DSC) configuration is not compliant. This - policy is only applicable to machines with WMF 4 and above. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsDscConfiguration","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsDscConfiguration"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d38b4c26-9d2e-47d7-aefe-18d859a8706a","type":"Microsoft.Authorization/policyDefinitions","name":"d38b4c26-9d2e-47d7-aefe-18d859a8706a"}' - headers: - cache-control: - - no-cache - content-length: - - '5765' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d38fc420-0735-4ef3-ac11-c806f651a570'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Long-term geo-redundant backup should - be enabled for Azure SQL Databases","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Azure SQL Database with long-term geo-redundant backup not - enabled.","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers/databases"},{"field":"name","notEquals":"master"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies","name":"default","existenceCondition":{"anyOf":[{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/weeklyRetention","notEquals":"PT0S"},{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/monthlyRetention","notEquals":"PT0S"},{"field":"Microsoft.Sql/servers/databases/backupLongTermRetentionPolicies/yearlyRetention","notEquals":"PT0S"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d38fc420-0735-4ef3-ac11-c806f651a570","type":"Microsoft.Authorization/policyDefinitions","name":"d38fc420-0735-4ef3-ac11-c806f651a570"}' - headers: - cache-control: - - no-cache - content-length: - - '1324' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d3b823c9-e0fc-4453-9fb2-8213b7338523'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Linux machines that don''t have - the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the Chef InSpec - resource indicates that one or more of the packages provided by the parameter - are not installed.","metadata":{"category":"Guest Configuration","version":"3.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"installed_application_linux","version":"1.*","configurationParameter":{"ApplicationName":"[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ApplicationName":{"type":"String","metadata":{"displayName":"Application - names","description":"A semicolon-separated list of the names of the applications - that should be installed. e.g. ''python; powershell''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[ChefInSpec]InstalledApplicationLinuxResource1;AttributesYmlContent'', - ''='', parameters(''ApplicationName'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d3b823c9-e0fc-4453-9fb2-8213b7338523","type":"Microsoft.Authorization/policyDefinitions","name":"d3b823c9-e0fc-4453-9fb2-8213b7338523"}' - headers: - cache-control: - - no-cache - content-length: - - '5391' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d416745a-506c-48b6-8ab1-83cb814bcaa3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual machines should be connected - to an approved virtual network","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any virtual machine connected to a virtual network that is not - approved.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]},"virtualNetworkId":{"type":"String","metadata":{"displayName":"Virtual - network Id","description":"Resource Id of the virtual network. Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroupName/providers/Microsoft.Network/virtualNetworks/Name"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkInterfaces"},{"not":{"field":"Microsoft.Network/networkInterfaces/ipconfigurations[*].subnet.id","like":"[concat(parameters(''virtualNetworkId''),''/*'')]"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d416745a-506c-48b6-8ab1-83cb814bcaa3","type":"Microsoft.Authorization/policyDefinitions","name":"d416745a-506c-48b6-8ab1-83cb814bcaa3"}' - headers: - cache-control: - - no-cache - content-length: - - '1256' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d461a302-a187-421a-89ac-84acdb4edc04'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Managed disks should use a specific set - of disk encryption sets for the customer-managed key encryption","policyType":"BuiltIn","mode":"Indexed","description":"Requiring - a specific set of disk encryption sets to be used with managed disks give - you control over the keys used for encryption at rest. You are able to select - the allowed encrypted sets and all others are rejected when attached to a - disk. Learn more at https://aka.ms/disks-cmk.","metadata":{"category":"Compute","version":"2.0.0"},"parameters":{"allowedEncryptionSets":{"type":"Array","metadata":{"displayName":"Allowed - disk encryption set","description":"The list of allowed disk encryption sets - for managed disks.","strongType":"Microsoft.Compute/diskEncryptionSets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/disks"},{"field":"Microsoft.Compute/disks/managedBy","exists":"False"},{"field":"Microsoft.Compute/disks/encryption.diskEncryptionSetId","notIn":"[parameters(''allowedEncryptionSets'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.diskEncryptionSet.id","notIn":"[parameters(''allowedEncryptionSets'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.osDisk.managedDisk.diskEncryptionSet.id","notIn":"[parameters(''allowedEncryptionSets'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"count":{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*]"},"greater":0},{"not":{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.storageProfile.dataDisks[*].managedDisk.diskEncryptionSet.id","in":"[parameters(''allowedEncryptionSets'')]"}}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/galleries/images/versions"},{"not":{"field":"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.osDiskImage.diskEncryptionSetId","in":"[parameters(''allowedEncryptionSets'')]"}}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/galleries/images/versions"},{"value":"[length(field(''Microsoft.Compute/galleries/images/versions/storageProfile.dataDiskImages[*]''))]","greater":0},{"not":{"field":"Microsoft.Compute/galleries/images/versions/publishingProfile.targetRegions[*].encryption.dataDiskImages[*].diskEncryptionSetId","in":"[parameters(''allowedEncryptionSets'')]"}}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/images"},{"field":"Microsoft.Compute/images/storageProfile.osDisk.diskEncryptionSet.id","notIn":"[parameters(''allowedEncryptionSets'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/images"},{"value":"[length(field(''Microsoft.Compute/images/storageProfile.dataDisks[*]''))]","greater":0},{"field":"Microsoft.Compute/images/storageProfile.dataDisks[*].diskEncryptionSet.id","notIn":"[parameters(''allowedEncryptionSets'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d461a302-a187-421a-89ac-84acdb4edc04","type":"Microsoft.Authorization/policyDefinitions","name":"d461a302-a187-421a-89ac-84acdb4edc04"}' - headers: - cache-control: - - no-cache - content-length: - - '3485' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d472d2c9-d6a3-4500-9f5f-b15f123005aa'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Interactive Logon''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Interactive Logon'' for displaying last user name and requiring - ctrl-alt-del. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsInteractiveLogon","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsInteractiveLogon","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d472d2c9-d6a3-4500-9f5f-b15f123005aa","type":"Microsoft.Authorization/policyDefinitions","name":"d472d2c9-d6a3-4500-9f5f-b15f123005aa"}' - headers: - cache-control: - - no-cache - content-length: - - '3819' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d550e854-df1a-4de9-bf44-cd894b39a95e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor Logs for Application Insights - should be linked to a Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Link - the Application Insights component to a Log Analytics workspace for logs encryption. - Customer-managed keys are commonly required to meet regulatory compliance - and for more control over the access to your data in Azure Monitor. Linking - your component to a Log Analytics workspace that''s enabled with a customer-managed - key, ensures that your Application Insights logs meet this compliance requirement, - see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/components"},{"anyOf":[{"field":"Microsoft.Insights/components/WorkspaceResourceId","equals":""},{"field":"Microsoft.Insights/components/WorkspaceResourceId","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d550e854-df1a-4de9-bf44-cd894b39a95e","type":"Microsoft.Authorization/policyDefinitions","name":"d550e854-df1a-4de9-bf44-cd894b39a95e"}' - headers: - cache-control: - - no-cache - content-length: - - '1430' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Data Lake - Analytics to Log Analytics workspace","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Analytics to stream to a regional Log - Analytics workspace when any Data Lake Analytics which is missing this diagnostic - settings is created or updated.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"logAnalytics":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"Select Log Analytics workspace from dropdown - list. If this workspace is outside of the scope of the assignment you must - manually grant ''Log Analytics Contributor'' permissions (or similar) to the - policy assignment''s principal ID.","strongType":"omsWorkspace","assignPermissions":true}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Log Analytics - workspace - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Log Analytics workspace - - True or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DataLakeAnalytics/accounts"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/749f88d5-cbae-40b8-bcfc-e573ddc772fa","/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"logAnalytics":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeAnalytics/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"workspaceId":"[parameters(''logAnalytics'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"logAnalytics":{"value":"[parameters(''logAnalytics'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03","type":"Microsoft.Authorization/policyDefinitions","name":"d56a5a7c-72d7-42bc-8ceb-3baf4c0eae03"}' - headers: - cache-control: - - no-cache - content-length: - - '3732' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d62cfe2b-3ab0-4d41-980d-76803b58ca65'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log Analytics agent health issues should - be resolved on your machines","policyType":"BuiltIn","mode":"All","description":"Security - Center uses the Log Analytics agent, formerly known as the Microsoft Monitoring - Agent (MMA). To make sure your virtual machines are successfully monitored, - you need to make sure the agent is installed on the virtual machines and properly - collects security events to the configured workspace.","metadata":{"version":"1.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"8e2b96ff-3de2-289b-b5c1-3b9921a3441e","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d62cfe2b-3ab0-4d41-980d-76803b58ca65","type":"Microsoft.Authorization/policyDefinitions","name":"d62cfe2b-3ab0-4d41-980d-76803b58ca65"}' - headers: - cache-control: - - no-cache - content-length: - - '1270' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d63edb4a-c612-454d-b47d-191a724fcbf0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Event Hub should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Event Hub not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/virtualNetworkRules","existenceCondition":{"field":"Microsoft.EventHub/namespaces/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d63edb4a-c612-454d-b47d-191a724fcbf0","type":"Microsoft.Authorization/policyDefinitions","name":"d63edb4a-c612-454d-b47d-191a724fcbf0"}' - headers: - cache-control: - - no-cache - content-length: - - '983' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Log Analytics agent should - be installed on your Windows Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Windows Azure Arc machines if the Log Analytics agent is not - installed.","metadata":{"version":"1.0.0-preview","category":"Monitoring","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.HybridCompute/machines/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"MicrosoftMonitoringAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e","type":"Microsoft.Authorization/policyDefinitions","name":"d69b1763-b96d-40b8-a2d9-ca31e9fd0d3e"}' - headers: - cache-control: - - no-cache - content-length: - - '1341' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d6c69680-54f0-4349-af10-94dd05f4225e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Microsoft Network Client''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Microsoft Network Client'' for Microsoft network client/server and - SMB v1. This policy requires that the Guest Configuration prerequisites have - been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","version":"1.*","configurationParameter":{"MicrosoftNetworkClientDigitallySignCommunicationsAlways":"Microsoft - network client: Digitally sign communications (always);ExpectedValue","MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":"Microsoft - network client: Send unencrypted password to third-party SMB servers;ExpectedValue","MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":"Microsoft - network server: Amount of idle time required before suspending session;ExpectedValue","MicrosoftNetworkServerDigitallySignCommunicationsAlways":"Microsoft - network server: Digitally sign communications (always);ExpectedValue","MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":"Microsoft - network server: Disconnect clients when logon hours expire;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"MicrosoftNetworkClientDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"Microsoft - network client: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB client component."}},"MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers":{"type":"String","metadata":{"displayName":"Microsoft - network client: Send unencrypted password to third-party SMB servers","description":"Specifies - whether the SMB redirector will send plaintext passwords during authentication - to third-party SMB servers that do not support password encryption. It is - recommended that you disable this policy setting unless there is a strong - business case to enable it."}},"MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession":{"type":"String","metadata":{"displayName":"Microsoft - network server: Amount of idle time required before suspending session","description":"Specifies - the amount of continuous idle time that must pass in an SMB session before - the session is suspended because of inactivity. The format of the value is - two integers separated by a comma, denoting an inclusive range."}},"MicrosoftNetworkServerDigitallySignCommunicationsAlways":{"type":"String","metadata":{"displayName":"Microsoft - network server: Digitally sign communications (always)","description":"Specifies - whether packet signing is required by the SMB server component."}},"MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire":{"type":"String","metadata":{"displayName":"Microsoft - network server: Disconnect clients when logon hours expire","description":"Specifies - whether to disconnect users who are connected to the local computer outside - their user account''s valid logon hours. This setting affects the Server Message - Block (SMB) component. If you enable this policy setting you should also enable - ''Network security: Force logoff when logon hours expire''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Microsoft - network client: Digitally sign communications (always);ExpectedValue'', ''='', - parameters(''MicrosoftNetworkClientDigitallySignCommunicationsAlways''), '','', - ''Microsoft network client: Send unencrypted password to third-party SMB servers;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkClientSendUnencryptedPasswordToThirdpartySMBServers''), - '','', ''Microsoft network server: Amount of idle time required before suspending - session;ExpectedValue'', ''='', parameters(''MicrosoftNetworkServerAmountOfIdleTimeRequiredBeforeSuspendingSession''), - '','', ''Microsoft network server: Digitally sign communications (always);ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDigitallySignCommunicationsAlways''), - '','', ''Microsoft network server: Disconnect clients when logon hours expire;ExpectedValue'', - ''='', parameters(''MicrosoftNetworkServerDisconnectClientsWhenLogonHoursExpire'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d6c69680-54f0-4349-af10-94dd05f4225e","type":"Microsoft.Authorization/policyDefinitions","name":"d6c69680-54f0-4349-af10-94dd05f4225e"}' - headers: - cache-control: - - no-cache - content-length: - - '7554' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d7ccd0ca-8d78-42af-a43d-6b7f928accbc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows Server VMs on which Windows Serial Console is not enabled","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows Server virtual machines on which Windows Serial Console is - not enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsSerialConsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d7ccd0ca-8d78-42af-a43d-6b7f928accbc","type":"Microsoft.Authorization/policyDefinitions","name":"d7ccd0ca-8d78-42af-a43d-6b7f928accbc"}' - headers: - cache-control: - - no-cache - content-length: - - '3199' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d82101f3-f3ce-4fc5-8708-4c09f4009546'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"IoT Hub device provisioning service instances - should disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that IoT Hub device provisioning - service instance isn''t exposed on the public internet. Creating private endpoints - can limit exposure of the IoT Hub device provisioning instances. Learn more - at: https://aka.ms/iotdpsvnet.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/provisioningServices"},{"field":"Microsoft.Devices/provisioningServices/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d82101f3-f3ce-4fc5-8708-4c09f4009546","type":"Microsoft.Authorization/policyDefinitions","name":"d82101f3-f3ce-4fc5-8708-4c09f4009546"}' - headers: - cache-control: - - no-cache - content-length: - - '1132' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d85c6833-7d33-4cf5-a915-aaa2de84405f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Container registries with private - endpoints","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to your - premium container registry resources, you can reduce data leakage risks. Learn - more at: https://aka.ms/privateendpoints and https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - endpoint subnet id","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"field":"Microsoft.ContainerRegistry/registries/sku.name","equals":"Premium"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.ContainerRegistry/registries/privateEndpointConnections","existenceCondition":{"field":"Microsoft.ContainerRegistry/registries/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["registry"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d85c6833-7d33-4cf5-a915-aaa2de84405f","type":"Microsoft.Authorization/policyDefinitions","name":"d85c6833-7d33-4cf5-a915-aaa2de84405f"}' - headers: - cache-control: - - no-cache - content-length: - - '3645' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d9844e8a-1437-4aeb-a32c-0c992f056095'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for MySQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Disable - the public network access property to improve security and ensure your Azure - Database for MySQL can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d9844e8a-1437-4aeb-a32c-0c992f056095","type":"Microsoft.Authorization/policyDefinitions","name":"d9844e8a-1437-4aeb-a32c-0c992f056095"}' - headers: - cache-control: - - no-cache - content-length: - - '1110' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''d9da03a1-f3c3-412a-9709-947156872263'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure HDInsight clusters should use encryption - in transit to encrypt communication between Azure HDInsight cluster nodes","policyType":"BuiltIn","mode":"Indexed","description":"Data - can be tampered with during transmission between Azure HDInsight cluster nodes. - Enabling encryption in transit addresses problems of misuse and tampering - during this transmission.","metadata":{"version":"1.0.0","category":"HDInsight"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HDInsight/clusters"},{"anyOf":[{"field":"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled","exists":false},{"field":"Microsoft.HDInsight/clusters/encryptionInTransitProperties.isEncryptionInTransitEnabled","equals":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/d9da03a1-f3c3-412a-9709-947156872263","type":"Microsoft.Authorization/policyDefinitions","name":"d9da03a1-f3c3-412a-9709-947156872263"}' - headers: - cache-control: - - no-cache - content-length: - - '1200' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''da0f98fe-a24b-4ad5-af69-bd0400233661'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that do not store - passwords using reversible encryption","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Windows machines - that do not store passwords using reversible encryption","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"StorePasswordsUsingReversibleEncryption","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"StorePasswordsUsingReversibleEncryption","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661","type":"Microsoft.Authorization/policyDefinitions","name":"da0f98fe-a24b-4ad5-af69-bd0400233661"}' - headers: - cache-control: - - no-cache - content-length: - - '3684' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''da69ba51-aaf1-41e5-8651-607cd0b37088'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure CosmosDB accounts to disable - public network access ","policyType":"BuiltIn","mode":"Indexed","description":"Disable - public network access for your CosmosDB resource so that it''s not accessible - over the public internet. This can reduce data leakage risks. Learn more at: - https://docs.microsoft.com/azure/cosmos-db/how-to-configure-private-endpoints#blocking-public-network-access-during-account-creation.","metadata":{"version":"1.0.0","category":"Cosmos - DB"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Modify","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c","/providers/Microsoft.Authorization/roleDefinitions/5bd9cd88-fe45-4216-938b-f97437e15450"],"conflictEffect":"audit","operations":[{"condition":"[greaterOrEquals(requestContext().apiVersion, - ''2021-01-15'')]","operation":"addOrReplace","field":"Microsoft.DocumentDB/databaseAccounts/publicNetworkAccess","value":"Disabled"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/da69ba51-aaf1-41e5-8651-607cd0b37088","type":"Microsoft.Authorization/policyDefinitions","name":"da69ba51-aaf1-41e5-8651-607cd0b37088"}' - headers: - cache-control: - - no-cache - content-length: - - '1551' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''db51110f-0865-4a6e-b274-e2e07a5b2cd7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:49:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Batch - Account to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Batch Account to stream to a regional Event Hub - when any Batch Account which is missing this diagnostic settings is created - or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Batch - Accounts in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Batch/batchAccounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.Batch/batchAccounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ServiceLog","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/db51110f-0865-4a6e-b274-e2e07a5b2cd7","type":"Microsoft.Authorization/policyDefinitions","name":"db51110f-0865-4a6e-b274-e2e07a5b2cd7"}' - headers: - cache-control: - - no-cache - content-length: - - '4014' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:49:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''dc595cb1-1cde-45f6-8faf-f88874e1c0e1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Logic Apps should be deployed into Integration - Service Environment","policyType":"BuiltIn","mode":"Indexed","description":"Deploying - Logic Apps into Integration Service Environment in a virtual network unlocks - advanced Logic Apps networking and security features and provides you with - greater control over your network configuration. Learn more at: https://aka.ms/integration-service-environment. - Deploying into Integration Service Environment also allows encryption with - customer-managed keys which provides enhanced data protection by allowing - you to manage your encryption keys. This is often to meet compliance requirements.","metadata":{"version":"1.0.0","category":"Logic - Apps"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Logic/workflows"},{"field":"Microsoft.Logic/workflows/integrationServiceEnvironment","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dc595cb1-1cde-45f6-8faf-f88874e1c0e1","type":"Microsoft.Authorization/policyDefinitions","name":"dc595cb1-1cde-45f6-8faf-f88874e1c0e1"}' - headers: - cache-control: - - no-cache - content-length: - - '1308' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''dcbc65aa-59f3-4239-8978-3bb869d82604'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Web apps should use an Azure file share - for its content directory","policyType":"BuiltIn","mode":"Indexed","description":"The - content directory of a web app should be located on an Azure file share. The - storage account information for the file share must be provided before any - publishing activity. To learn more about using Azure Files for hosting app - service content refer to https://go.microsoft.com/fwlink/?linkid=2151594.","metadata":{"version":"1.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"},{"field":"Microsoft.Web/sites/storageAccountRequired","equals":"true"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dcbc65aa-59f3-4239-8978-3bb869d82604","type":"Microsoft.Authorization/policyDefinitions","name":"dcbc65aa-59f3-4239-8978-3bb869d82604"}' - headers: - cache-control: - - no-cache - content-length: - - '1111' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''dd2ea520-6b06-45c3-806e-ea297c23e06a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using custom domains","policyType":"BuiltIn","mode":"All","description":"Use - of custom domains protects a web application from common attacks such as phishing - and other DNS-related attacks.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UsedCustomDomains","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd2ea520-6b06-45c3-806e-ea297c23e06a","type":"Microsoft.Authorization/policyDefinitions","name":"dd2ea520-6b06-45c3-806e-ea297c23e06a"}' - headers: - cache-control: - - no-cache - content-length: - - '1246' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''dd4680ed-0559-4a6a-ad10-081d14cbb484'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''System Audit Policies - Policy Change''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''System Audit Policies - Policy Change''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesPolicyChange","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dd4680ed-0559-4a6a-ad10-081d14cbb484","type":"Microsoft.Authorization/policyDefinitions","name":"dd4680ed-0559-4a6a-ad10-081d14cbb484"}' - headers: - cache-control: - - no-cache - content-length: - - '3268' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ddb53c61-9db4-41d4-a953-2abff5b66c12'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Settings - Account Policies''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Settings - Account Policies''. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecuritySettingsAccountPolicies","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ddb53c61-9db4-41d4-a953-2abff5b66c12","type":"Microsoft.Authorization/policyDefinitions","name":"ddb53c61-9db4-41d4-a953-2abff5b66c12"}' - headers: - cache-control: - - no-cache - content-length: - - '3266' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Recovery console''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Recovery console''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"type":"String","metadata":{"displayName":"[Deprecated]: - Recovery console: Allow floppy copy and access to all drives and all folders","description":"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsRecoveryconsole","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue'', - ''='', parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsRecoveryconsole"},"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue","value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue","value":"[parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b","type":"Microsoft.Authorization/policyDefinitions","name":"ddc0a4d5-5e08-43d5-9fd9-b586d8d7116b"}' - headers: - cache-control: - - no-cache - content-length: - - '7138' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''deacecc0-9f84-44d2-bb82-46f32d766d43'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Deploy Dependency agent to - hybrid Linux Azure Arc machines","policyType":"BuiltIn","mode":"Indexed","description":"This - policy deploys the Dependency agent to Linux Azure Arc machines if the agent - isn''t installed.","metadata":{"version":"1.1.0-preview","category":"Monitoring","preview":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.HybridCompute/machines/extensions","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293"],"existenceCondition":{"allOf":[{"field":"Microsoft.HybridCompute/machines/extensions/type","equals":"DependencyAgentLinux"},{"field":"Microsoft.HybridCompute/machines/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"},{"field":"Microsoft.HybridCompute/machines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"variables":{"vmExtensionName":"DependencyAgentLinux","vmExtensionPublisher":"Microsoft.Azure.Monitoring.DependencyAgent","vmExtensionType":"DependencyAgentLinux"},"resources":[{"name":"[concat(parameters(''vmName''), - ''/'', variables(''vmExtensionName''))]","type":"Microsoft.HybridCompute/machines/extensions","location":"[parameters(''location'')]","apiVersion":"2019-12-12","properties":{"publisher":"[variables(''vmExtensionPublisher'')]","type":"[variables(''vmExtensionType'')]","settings":{}}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - DA extension for VM'', '': '', parameters(''vmName''))]"}}},"parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/deacecc0-9f84-44d2-bb82-46f32d766d43","type":"Microsoft.Authorization/policyDefinitions","name":"deacecc0-9f84-44d2-bb82-46f32d766d43"}' - headers: - cache-control: - - no-cache - content-length: - - '2197' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''deeddb44-9f94-4903-9fa0-081d524406e3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Recovery Services vaults - should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to Azure Recovery Services - vaults, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/AB-PrivateEndpoints.","metadata":{"version":"1.0.0-preview","preview":true,"category":"Backup"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.RecoveryServices/vaults"},{"count":{"field":"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*]","where":{"allOf":[{"field":"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"},{"field":"Microsoft.RecoveryServices/vaults/privateEndpointConnections[*].provisioningState","equals":"Succeeded"}]}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/deeddb44-9f94-4903-9fa0-081d524406e3","type":"Microsoft.Authorization/policyDefinitions","name":"deeddb44-9f94-4903-9fa0-081d524406e3"}' - headers: - cache-control: - - no-cache - content-length: - - '1532' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''df39c015-56a4-45de-b4a3-efe77bed320d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"IoT Hub device provisioning service instances - should use private link","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Private Link lets you connect your virtual network to Azure services without - a public IP address at the source or destination. The Private Link platform - handles the connectivity between the consumer and services over the Azure - backbone network. By mapping private endpoints to the IoT Hub device provisioning - service, data leakage risks are reduced. Learn more about private links at: - https://aka.ms/iotdpsvnet.","metadata":{"version":"1.0.0","category":"Internet - of Things"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Devices/provisioningServices"},{"count":{"field":"Microsoft.Devices/provisioningServices/privateEndpointConnections[*]","where":{"field":"Microsoft.Devices/provisioningServices/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/df39c015-56a4-45de-b4a3-efe77bed320d","type":"Microsoft.Authorization/policyDefinitions","name":"df39c015-56a4-45de-b4a3-efe77bed320d"}' - headers: - cache-control: - - no-cache - content-length: - - '1402' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''dfbd9a64-6114-48de-a47d-90574dc2e489'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"MariaDB server should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"Virtual - network based firewall rules are used to enable traffic from a specific subnet - to Azure Database for MariaDB while ensuring the traffic stays within the - Azure boundary. This policy provides a way to audit if the Azure Database - for MariaDB has virtual network service endpoint being used.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforMariaDB/servers/virtualNetworkRules","existenceCondition":{"field":"Microsoft.DBforMariaDB/servers/virtualNetworkRules/virtualNetworkSubnetId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/dfbd9a64-6114-48de-a47d-90574dc2e489","type":"Microsoft.Authorization/policyDefinitions","name":"dfbd9a64-6114-48de-a47d-90574dc2e489"}' - headers: - cache-control: - - no-cache - content-length: - - '1192' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e016b22b-e0eb-436d-8fd7-160c4eaed6e2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Cache for Redis to use - private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone can be linked to your virtual network to resolve to Azure - Cache for Redis. Learn more at: https://aka.ms/privatednszone.","metadata":{"version":"1.0.0","category":"Cache"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone Id","strongType":"Microsoft.Network/privateDnsZones","description":"The - resource id of the private DNS zone"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"redisCache"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"privatelink-redis-cache-windows-net","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e016b22b-e0eb-436d-8fd7-160c4eaed6e2","type":"Microsoft.Authorization/policyDefinitions","name":"e016b22b-e0eb-436d-8fd7-160c4eaed6e2"}' - headers: - cache-control: - - no-cache - content-length: - - '2409' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e04e5000-cd89-451d-bb21-a14d24ff9c73'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Auditing on Synapse workspace should - be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Auditing - on your Synapse workspace should be enabled to track database activities across - all databases on the dedicated SQL pools and save them in an audit log.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"setting":{"type":"String","metadata":{"displayName":"Desired - Auditing setting"},"allowedValues":["enabled","disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Synapse/workspaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Synapse/workspaces/auditingSettings","name":"default","existenceCondition":{"field":"Microsoft.Synapse/workspaces/auditingSettings/state","equals":"[parameters(''setting'')]"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e04e5000-cd89-451d-bb21-a14d24ff9c73","type":"Microsoft.Authorization/policyDefinitions","name":"e04e5000-cd89-451d-bb21-a14d24ff9c73"}' - headers: - cache-control: - - no-cache - content-length: - - '1176' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e068b215-0026-4354-b347-8fb2766f73a2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''User Rights Assignment''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''User - Rights Assignment'' for allowing log on locally, RDP, access from the network, - and many other user activities. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_UserRightsAssignment","version":"1.*","configurationParameter":{"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":"Access - this computer from the network;ExpectedValue","UsersOrGroupsThatMayLogOnLocally":"Allow - log on locally;ExpectedValue","UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":"Allow - log on through Remote Desktop Services;ExpectedValue","UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":"Deny - access to this computer from the network;ExpectedValue","UsersOrGroupsThatMayManageAuditingAndSecurityLog":"Manage - auditing and security log;ExpectedValue","UsersOrGroupsThatMayBackUpFilesAndDirectories":"Back - up files and directories;ExpectedValue","UsersOrGroupsThatMayChangeTheSystemTime":"Change - the system time;ExpectedValue","UsersOrGroupsThatMayChangeTheTimeZone":"Change - the time zone;ExpectedValue","UsersOrGroupsThatMayCreateATokenObject":"Create - a token object;ExpectedValue","UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":"Deny - log on as a batch job;ExpectedValue","UsersAndGroupsThatAreDeniedLoggingOnAsAService":"Deny - log on as a service;ExpectedValue","UsersAndGroupsThatAreDeniedLocalLogon":"Deny - log on locally;ExpectedValue","UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":"Deny - log on through Remote Desktop Services;ExpectedValue","UserAndGroupsThatMayForceShutdownFromARemoteSystem":"Force - shutdown from a remote system;ExpectedValue","UsersAndGroupsThatMayRestoreFilesAndDirectories":"Restore - files and directories;ExpectedValue","UsersAndGroupsThatMayShutDownTheSystem":"Shut - down the system;ExpectedValue","UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":"Take - ownership of files or other objects;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"UsersOrGroupsThatMayAccessThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"Users - or groups that may access this computer from the network","description":"Specifies - which remote users on the network are permitted to connect to the computer. - This does not include Remote Desktop Connection."}},"UsersOrGroupsThatMayLogOnLocally":{"type":"String","metadata":{"displayName":"Users - or groups that may log on locally","description":"Specifies which users or - groups can interactively log on to the computer. Users who attempt to log - on via Remote Desktop Connection or IIS also require this user right."}},"UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"Users - or groups that may log on through Remote Desktop Services","description":"Specifies - which users or groups are permitted to log on as a Terminal Services client, - Remote Desktop, or for Remote Assistance."}},"UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork":{"type":"String","metadata":{"displayName":"Users - and groups that are denied access to this computer from the network","description":"Specifies - which users or groups are explicitly prohibited from connecting to the computer - across the network."}},"UsersOrGroupsThatMayManageAuditingAndSecurityLog":{"type":"String","metadata":{"displayName":"Users - or groups that may manage auditing and security log","description":"Specifies - users and groups permitted to change the auditing options for files and directories - and clear the Security log."}},"UsersOrGroupsThatMayBackUpFilesAndDirectories":{"type":"String","metadata":{"displayName":"Users - or groups that may back up files and directories","description":"Specifies - users and groups allowed to circumvent file and directory permissions to back - up the system."}},"UsersOrGroupsThatMayChangeTheSystemTime":{"type":"String","metadata":{"displayName":"Users - or groups that may change the system time","description":"Specifies which - users and groups are permitted to change the time and date on the internal - clock of the computer."}},"UsersOrGroupsThatMayChangeTheTimeZone":{"type":"String","metadata":{"displayName":"Users - or groups that may change the time zone","description":"Specifies which users - and groups are permitted to change the time zone of the computer."}},"UsersOrGroupsThatMayCreateATokenObject":{"type":"String","metadata":{"displayName":"Users - or groups that may create a token object","description":"Specifies which users - and groups are permitted to create an access token, which may provide elevated - rights to access sensitive data."}},"UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob":{"type":"String","metadata":{"displayName":"Users - and groups that are denied logging on as a batch job","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - as a batch job (i.e. scheduled task)."}},"UsersAndGroupsThatAreDeniedLoggingOnAsAService":{"type":"String","metadata":{"displayName":"Users - and groups that are denied logging on as a service","description":"Specifies - which service accounts are explicitly not permitted to register a process - as a service."}},"UsersAndGroupsThatAreDeniedLocalLogon":{"type":"String","metadata":{"displayName":"Users - and groups that are denied local logon","description":"Specifies which users - and groups are explicitly not permitted to log on to the computer."}},"UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices":{"type":"String","metadata":{"displayName":"Users - and groups that are denied log on through Remote Desktop Services","description":"Specifies - which users and groups are explicitly not permitted to log on to the computer - via Terminal Services/Remote Desktop Client."}},"UserAndGroupsThatMayForceShutdownFromARemoteSystem":{"type":"String","metadata":{"displayName":"User - and groups that may force shutdown from a remote system","description":"Specifies - which users and groups are permitted to shut down the computer from a remote - location on the network."}},"UsersAndGroupsThatMayRestoreFilesAndDirectories":{"type":"String","metadata":{"displayName":"Users - and groups that may restore files and directories","description":"Specifies - which users and groups are permitted to bypass file, directory, registry, - and other persistent object permissions when restoring backed up files and - directories."}},"UsersAndGroupsThatMayShutDownTheSystem":{"type":"String","metadata":{"displayName":"Users - and groups that may shut down the system","description":"Specifies which users - and groups who are logged on locally to the computers in your environment - are permitted to shut down the operating system with the Shut Down command."}},"UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects":{"type":"String","metadata":{"displayName":"Users - or groups that may take ownership of files or other objects","description":"Specifies - which users and groups are permitted to take ownership of files, folders, - registry keys, processes, or threads. This user right bypasses any permissions - that are in place to protect objects to give ownership to the specified user."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_UserRightsAssignment","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Access - this computer from the network;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayAccessThisComputerFromTheNetwork''), - '','', ''Allow log on locally;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayLogOnLocally''), - '','', ''Allow log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayLogOnThroughRemoteDesktopServices''), '','', - ''Deny access to this computer from the network;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedAccessToThisComputerFromTheNetwork''), - '','', ''Manage auditing and security log;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayManageAuditingAndSecurityLog''), - '','', ''Back up files and directories;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayBackUpFilesAndDirectories''), - '','', ''Change the system time;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheSystemTime''), - '','', ''Change the time zone;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayChangeTheTimeZone''), - '','', ''Create a token object;ExpectedValue'', ''='', parameters(''UsersOrGroupsThatMayCreateATokenObject''), - '','', ''Deny log on as a batch job;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsABatchJob''), - '','', ''Deny log on as a service;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLoggingOnAsAService''), - '','', ''Deny log on locally;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatAreDeniedLocalLogon''), - '','', ''Deny log on through Remote Desktop Services;ExpectedValue'', ''='', - parameters(''UsersAndGroupsThatAreDeniedLogOnThroughRemoteDesktopServices''), - '','', ''Force shutdown from a remote system;ExpectedValue'', ''='', parameters(''UserAndGroupsThatMayForceShutdownFromARemoteSystem''), - '','', ''Restore files and directories;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayRestoreFilesAndDirectories''), - '','', ''Shut down the system;ExpectedValue'', ''='', parameters(''UsersAndGroupsThatMayShutDownTheSystem''), - '','', ''Take ownership of files or other objects;ExpectedValue'', ''='', - parameters(''UsersOrGroupsThatMayTakeOwnershipOfFilesOrOtherObjects'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e068b215-0026-4354-b347-8fb2766f73a2","type":"Microsoft.Authorization/policyDefinitions","name":"e068b215-0026-4354-b347-8fb2766f73a2"}' - headers: - cache-control: - - no-cache - content-length: - - '12728' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cosmos DB should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Cosmos DB not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DocumentDB/databaseAccounts"},{"field":"Microsoft.DocumentDB/databaseAccounts/virtualNetworkRules[*].id","exists":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9","type":"Microsoft.Authorization/policyDefinitions","name":"e0a2b1a3-f7f9-4569-807f-2a9edebdf4d9"}' - headers: - cache-control: - - no-cache - content-length: - - '892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e0a7e899-2ce2-4253-8a13-d808fdeb75af'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Administrative Templates - MSS (Legacy)''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Administrative - Templates - MSS (Legacy)'' for automatic logon, screen saver, network behavior, - safe DLL, and event log. This policy requires that the Guest Configuration - prerequisites have been deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol.","metadata":{"category":"Guest Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0a7e899-2ce2-4253-8a13-d808fdeb75af","type":"Microsoft.Authorization/policyDefinitions","name":"e0a7e899-2ce2-4253-8a13-d808fdeb75af"}' - headers: - cache-control: - - no-cache - content-length: - - '3845' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e0efc13a-122a-47c5-b817-2ccfe5d12615'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that do not have the specified Windows PowerShell execution - policy","policyType":"BuiltIn","mode":"Indexed","description":"This policy - creates a Guest Configuration assignment to audit Windows virtual machines - where Windows PowerShell is not configured to use the specified PowerShell - execution policy. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ExecutionPolicy":{"type":"String","metadata":{"displayName":"[Deprecated]: - PowerShell Execution Policy","description":"The expected PowerShell execution - policy."},"allowedValues":["AllSigned","Bypass","Default","RemoteSigned","Restricted","Undefined","Unrestricted"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellExecutionPolicy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy'', - ''='', parameters(''ExecutionPolicy'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"WindowsPowerShellExecutionPolicy"},"ExecutionPolicy":{"value":"[parameters(''ExecutionPolicy'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ExecutionPolicy":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy","value":"[parameters(''ExecutionPolicy'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[PowerShellExecutionPolicy]PowerShellExecutionPolicy1;ExecutionPolicy","value":"[parameters(''ExecutionPolicy'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e0efc13a-122a-47c5-b817-2ccfe5d12615","type":"Microsoft.Authorization/policyDefinitions","name":"e0efc13a-122a-47c5-b817-2ccfe5d12615"}' - headers: - cache-control: - - no-cache - content-length: - - '6689' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities in security configuration - on your machines should be remediated","policyType":"BuiltIn","mode":"All","description":"Servers - which do not satisfy the configured baseline will be monitored by Azure Security - Center as recommendations","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"181ac480-f7c4-544b-9865-11b8ffe87f47","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15","type":"Microsoft.Authorization/policyDefinitions","name":"e1e5fd5d-3e4c-4ce1-8661-7d1873ae6b15"}' - headers: - cache-control: - - no-cache - content-length: - - '1094' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e2c1c086-2d84-4019-bff3-c44ccd95113c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Ensure that ''HTTP Version'' is the latest, - if used to run the Function app","policyType":"BuiltIn","mode":"Indexed","description":"Periodically, - newer versions are released for HTTP either due to security flaws or to include - additional functionality. Using the latest HTTP version for web apps to take - advantage of security fixes, if any, and/or new functionalities of the newer - version. Currently, this policy only applies to Linux web apps.","metadata":{"version":"2.0.0","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"kind","contains":"linux"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.http20Enabled","equals":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2c1c086-2d84-4019-bff3-c44ccd95113c","type":"Microsoft.Authorization/policyDefinitions","name":"e2c1c086-2d84-4019-bff3-c44ccd95113c"}' - headers: - cache-control: - - no-cache - content-length: - - '1265' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e2dd799a-a932-4e9d-ac17-d473bc3c6c10'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Dependency agent should be enabled in - virtual machine scale sets for listed virtual machine images","policyType":"BuiltIn","mode":"Indexed","description":"Reports - virtual machine scale sets as non-compliant if the virtual machine image is - not in the list defined and the agent is not installed. The list of OS images - is updated over time as support is updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"listOfImageIdToInclude_windows":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Windows OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"listOfImageIdToInclude_linux":{"type":"Array","metadata":{"displayName":"Optional: - List of virtual machine images that have supported Linux OS to add to scope","description":"Example - value: ''/subscriptions//resourceGroups/YourResourceGroup/providers/Microsoft.Compute/images/ContosoStdImage''"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"not":{"anyOf":[{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_windows'')]"},{"field":"Microsoft.Compute/imageId","in":"[parameters(''listOfImageIdToInclude_linux'')]"},{"anyOf":[{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServer"},{"field":"Microsoft.Compute/imageSKU","in":["2008-R2-SP1","2008-R2-SP1-smalldisk","2012-Datacenter","2012-Datacenter-smalldisk","2012-R2-Datacenter","2012-R2-Datacenter-smalldisk","2016-Datacenter","2016-Datacenter-Server-Core","2016-Datacenter-Server-Core-smalldisk","2016-Datacenter-smalldisk","2016-Datacenter-with-Containers","2016-Datacenter-with-RDSH","2019-Datacenter","2019-Datacenter-Core","2019-Datacenter-Core-smalldisk","2019-Datacenter-Core-with-Containers","2019-Datacenter-Core-with-Containers-smalldisk","2019-Datacenter-smalldisk","2019-Datacenter-with-Containers","2019-Datacenter-with-Containers-smalldisk","2019-Datacenter-zhcn"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerSemiAnnual"},{"field":"Microsoft.Compute/imageSKU","in":["Datacenter-Core-1709-smalldisk","Datacenter-Core-1709-with-Containers-smalldisk","Datacenter-Core-1803-with-Containers-smalldisk"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServerHPCPack"},{"field":"Microsoft.Compute/imageOffer","equals":"WindowsServerHPCPack"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"anyOf":[{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2016-BYOL"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2"},{"field":"Microsoft.Compute/imageOffer","like":"*-WS2012R2-BYOL"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftRServer"},{"field":"Microsoft.Compute/imageOffer","equals":"MLServer-WS2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftVisualStudio"},{"field":"Microsoft.Compute/imageOffer","in":["VisualStudio","Windows"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-U8"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftDynamicsAX"},{"field":"Microsoft.Compute/imageOffer","equals":"Dynamics"},{"field":"Microsoft.Compute/imageSKU","equals":"Pre-Req-AX7-Onebox-V4"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","equals":"windows-data-science-vm"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsDesktop"},{"field":"Microsoft.Compute/imageOffer","equals":"Windows-10"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-SAP-HANA"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"SUSE"},{"field":"Microsoft.Compute/imageOffer","in":["SLES","SLES-HPC","SLES-HPC-Priority","SLES-SAP","SLES-SAP-BYOS","SLES-Priority","SLES-BYOS","SLES-SAPCAL","SLES-Standard"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["12-SP2","12-SP3","12-SP4"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","in":["14.04.0-LTS","14.04.1-LTS","14.04.5-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["16.04-LTS","16.04.0-LTS"]},{"field":"Microsoft.Compute/imageSKU","in":["18.04-LTS"]}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","in":["Centos","Centos-LVM","CentOS-SRIOV"]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","like":"6.*"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","like":"7*"}]}]}}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.Azure.Monitoring.DependencyAgent"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e2dd799a-a932-4e9d-ac17-d473bc3c6c10","type":"Microsoft.Authorization/policyDefinitions","name":"e2dd799a-a932-4e9d-ac17-d473bc3c6c10"}' - headers: - cache-control: - - no-cache - content-length: - - '6224' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e345b6c3-24bd-4c93-9bbb-7e5e49a17b78'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure VPN gateways should not use ''basic'' - SKU","policyType":"BuiltIn","mode":"All","description":"This policy ensures - that VPN gateways do not use ''basic'' SKU.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworkGateways"},{"field":"Microsoft.Network/virtualNetworkGateways/gatewayType","equals":"Vpn"},{"field":"Microsoft.Network/virtualNetworkGateways/sku.tier","equals":"Basic"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e345b6c3-24bd-4c93-9bbb-7e5e49a17b78","type":"Microsoft.Authorization/policyDefinitions","name":"e345b6c3-24bd-4c93-9bbb-7e5e49a17b78"}' - headers: - cache-control: - - no-cache - content-length: - - '918' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e3576e28-8b17-4677-84c3-db2990658d64'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"MFA should be enabled on accounts with - read permissions on your subscription","policyType":"BuiltIn","mode":"All","description":"Multi-Factor - Authentication (MFA) should be enabled for all subscription accounts with - read privileges to prevent a breach of accounts or resources.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"151e82c5-5341-a74b-1eb0-bc38d2c84bb5","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3576e28-8b17-4677-84c3-db2990658d64","type":"Microsoft.Authorization/policyDefinitions","name":"e3576e28-8b17-4677-84c3-db2990658d64"}' - headers: - cache-control: - - no-cache - content-length: - - '1084' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e372f825-a257-4fb8-9175-797a8a8627d6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"RDP access from the Internet should be - blocked","policyType":"BuiltIn","mode":"All","description":"This policy audits - any network security rule that allows RDP access from Internet","metadata":{"version":"2.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/networkSecurityGroups/securityRules"},{"allOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/access","equals":"Allow"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/direction","equals":"Inbound"},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange","equals":"3389"},{"value":"[if(and(not(empty(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''))), - contains(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''),''-'')), - and(lessOrEquals(int(first(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),3389),greaterOrEquals(int(last(split(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRange''), - ''-''))),3389)), ''false'')]","equals":"true"},{"count":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","where":{"value":"[if(and(not(empty(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')))), - contains(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')),''-'')), - and(lessOrEquals(int(first(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),3389),greaterOrEquals(int(last(split(first(field(''Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]'')), - ''-''))),3389)) , ''false'')]","equals":"true"}},"greater":0},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/destinationPortRanges[*]","notEquals":"3389"}}]},{"anyOf":[{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"*"},{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefix","equals":"Internet"},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"*"}},{"not":{"field":"Microsoft.Network/networkSecurityGroups/securityRules/sourceAddressPrefixes[*]","notEquals":"Internet"}}]}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e372f825-a257-4fb8-9175-797a8a8627d6","type":"Microsoft.Authorization/policyDefinitions","name":"e372f825-a257-4fb8-9175-797a8a8627d6"}' - headers: - cache-control: - - no-cache - content-length: - - '3068' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e3a77a94-cf41-4ee8-b45c-98be28841c03'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Shutdown''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Shutdown''. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsShutdown","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3a77a94-cf41-4ee8-b45c-98be28841c03","type":"Microsoft.Authorization/policyDefinitions","name":"e3a77a94-cf41-4ee8-b45c-98be28841c03"}' - headers: - cache-control: - - no-cache - content-length: - - '3240' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e3d95ab7-f47a-49d8-a347-784177b6c94c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:36 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Settings - Account Policies''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Settings - - Account Policies''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"EnforcePasswordHistory":{"type":"String","metadata":{"displayName":"[Deprecated]: - Enforce password history","description":"Specifies limits on password reuse - - how many times a new password must be created for a user account before - the password can be repeated."}},"MaximumPasswordAge":{"type":"String","metadata":{"displayName":"[Deprecated]: - Maximum password age","description":"Specifies the maximum number of days - that may elapse before a user account password must be changed. The format - of the value is two integers separated by a comma, denoting an inclusive range."}},"MinimumPasswordAge":{"type":"String","metadata":{"displayName":"[Deprecated]: - Minimum password age","description":"Specifies the minimum number of days - that must elapse before a user account password can be changed."}},"MinimumPasswordLength":{"type":"String","metadata":{"displayName":"[Deprecated]: - Minimum password length","description":"Specifies the minimum number of characters - that a user account password may contain."}},"PasswordMustMeetComplexityRequirements":{"type":"String","metadata":{"displayName":"[Deprecated]: - Password must meet complexity requirements","description":"Specifies whether - a user account password must be complex. If required, a complex password must - not contain part of user''s account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecuritySettingsAccountPolicies","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enforce - password history;ExpectedValue'', ''='', parameters(''EnforcePasswordHistory''), - '','', ''Maximum password age;ExpectedValue'', ''='', parameters(''MaximumPasswordAge''), - '','', ''Minimum password age;ExpectedValue'', ''='', parameters(''MinimumPasswordAge''), - '','', ''Minimum password length;ExpectedValue'', ''='', parameters(''MinimumPasswordLength''), - '','', ''Password must meet complexity requirements;ExpectedValue'', ''='', - parameters(''PasswordMustMeetComplexityRequirements'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecuritySettingsAccountPolicies"},"EnforcePasswordHistory":{"value":"[parameters(''EnforcePasswordHistory'')]"},"MaximumPasswordAge":{"value":"[parameters(''MaximumPasswordAge'')]"},"MinimumPasswordAge":{"value":"[parameters(''MinimumPasswordAge'')]"},"MinimumPasswordLength":{"value":"[parameters(''MinimumPasswordLength'')]"},"PasswordMustMeetComplexityRequirements":{"value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"EnforcePasswordHistory":{"type":"string"},"MaximumPasswordAge":{"type":"string"},"MinimumPasswordAge":{"type":"string"},"MinimumPasswordLength":{"type":"string"},"PasswordMustMeetComplexityRequirements":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enforce - password history;ExpectedValue","value":"[parameters(''EnforcePasswordHistory'')]"},{"name":"Maximum - password age;ExpectedValue","value":"[parameters(''MaximumPasswordAge'')]"},{"name":"Minimum - password age;ExpectedValue","value":"[parameters(''MinimumPasswordAge'')]"},{"name":"Minimum - password length;ExpectedValue","value":"[parameters(''MinimumPasswordLength'')]"},{"name":"Password - must meet complexity requirements;ExpectedValue","value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Enforce - password history;ExpectedValue","value":"[parameters(''EnforcePasswordHistory'')]"},{"name":"Maximum - password age;ExpectedValue","value":"[parameters(''MaximumPasswordAge'')]"},{"name":"Minimum - password age;ExpectedValue","value":"[parameters(''MinimumPasswordAge'')]"},{"name":"Minimum - password length;ExpectedValue","value":"[parameters(''MinimumPasswordLength'')]"},{"name":"Password - must meet complexity requirements;ExpectedValue","value":"[parameters(''PasswordMustMeetComplexityRequirements'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e3d95ab7-f47a-49d8-a347-784177b6c94c","type":"Microsoft.Authorization/policyDefinitions","name":"e3d95ab7-f47a-49d8-a347-784177b6c94c"}' - headers: - cache-control: - - no-cache - content-length: - - '9511' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e425e402-a050-45e5-b010-bd3f934589fc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - User Account Control''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - User Account Control''. It also creates a system-assigned managed identity - and deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"type":"String","metadata":{"displayName":"[Deprecated]: - UAC: Admin Approval Mode for the Built-in Administrator account","description":"Specifies - the behavior of Admin Approval Mode for the built-in Administrator account."}},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"[Deprecated]: - UAC: Behavior of the elevation prompt for administrators in Admin Approval - Mode","description":"Specifies the behavior of the elevation prompt for administrators."}},"UACDetectApplicationInstallationsAndPromptForElevation":{"type":"String","metadata":{"displayName":"[Deprecated]: - UAC: Detect application installations and prompt for elevation","description":"Specifies - the behavior of application installation detection for the computer."}},"UACRunAllAdministratorsInAdminApprovalMode":{"type":"String","metadata":{"displayName":"[Deprecated]: - UAC: Run all administrators in Admin Approval Mode","description":"Specifies - the behavior of all User Account Control (UAC) policy settings for the computer."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsUserAccountControl","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue'', - ''='', parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount''), - '','', ''User Account Control: Behavior of the elevation prompt for administrators - in Admin Approval Mode;ExpectedValue'', ''='', parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode''), - '','', ''User Account Control: Detect application installations and prompt - for elevation;ExpectedValue'', ''='', parameters(''UACDetectApplicationInstallationsAndPromptForElevation''), - '','', ''User Account Control: Run all administrators in Admin Approval Mode;ExpectedValue'', - ''='', parameters(''UACRunAllAdministratorsInAdminApprovalMode'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsUserAccountControl"},"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},"UACDetectApplicationInstallationsAndPromptForElevation":{"value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},"UACRunAllAdministratorsInAdminApprovalMode":{"value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"UACAdminApprovalModeForTheBuiltinAdministratorAccount":{"type":"string"},"UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode":{"type":"string"},"UACDetectApplicationInstallationsAndPromptForElevation":{"type":"string"},"UACRunAllAdministratorsInAdminApprovalMode":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue","value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},{"name":"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue","value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},{"name":"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue","value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},{"name":"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue","value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"User - Account Control: Admin Approval Mode for the Built-in Administrator account;ExpectedValue","value":"[parameters(''UACAdminApprovalModeForTheBuiltinAdministratorAccount'')]"},{"name":"User - Account Control: Behavior of the elevation prompt for administrators in Admin - Approval Mode;ExpectedValue","value":"[parameters(''UACBehaviorOfTheElevationPromptForAdministratorsInAdminApprovalMode'')]"},{"name":"User - Account Control: Detect application installations and prompt for elevation;ExpectedValue","value":"[parameters(''UACDetectApplicationInstallationsAndPromptForElevation'')]"},{"name":"User - Account Control: Run all administrators in Admin Approval Mode;ExpectedValue","value":"[parameters(''UACRunAllAdministratorsInAdminApprovalMode'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e425e402-a050-45e5-b010-bd3f934589fc","type":"Microsoft.Authorization/policyDefinitions","name":"e425e402-a050-45e5-b010-bd3f934589fc"}' - headers: - cache-control: - - no-cache - content-length: - - '10180' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e56962a6-4747-49cd-b67b-bf8b01975c4c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allowed locations","policyType":"BuiltIn","mode":"Indexed","description":"This - policy enables you to restrict the locations your organization can specify - when deploying resources. Use to enforce your geo-compliance requirements. - Excludes resource groups, Microsoft.AzureActiveDirectory/b2cDirectories, and - resources that use the ''global'' region.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that can be specified when deploying resources.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"},{"field":"location","notEquals":"global"},{"field":"type","notEquals":"Microsoft.AzureActiveDirectory/b2cDirectories"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e56962a6-4747-49cd-b67b-bf8b01975c4c","type":"Microsoft.Authorization/policyDefinitions","name":"e56962a6-4747-49cd-b67b-bf8b01975c4c"}' - headers: - cache-control: - - no-cache - content-length: - - '1084' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e5b81f87-9185-4224-bf00-9f505e9f89f3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Accounts''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Accounts''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AccountsGuestAccountStatus":{"type":"String","metadata":{"displayName":"[Deprecated]: - Accounts: Guest account status","description":"Specifies whether the local - Guest account is disabled."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAccounts","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Accounts: - Guest account status;ExpectedValue'', ''='', parameters(''AccountsGuestAccountStatus'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsAccounts"},"AccountsGuestAccountStatus":{"value":"[parameters(''AccountsGuestAccountStatus'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AccountsGuestAccountStatus":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Accounts: - Guest account status;ExpectedValue","value":"[parameters(''AccountsGuestAccountStatus'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Accounts: - Guest account status;ExpectedValue","value":"[parameters(''AccountsGuestAccountStatus'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e5b81f87-9185-4224-bf00-9f505e9f89f3","type":"Microsoft.Authorization/policyDefinitions","name":"e5b81f87-9185-4224-bf00-9f505e9f89f3"}' - headers: - cache-control: - - no-cache - content-length: - - '6586' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e67687e8-08d5-4e7f-8226-5b4753bba008'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Applications - that are not using latest supported Node.js Framework","policyType":"BuiltIn","mode":"All","description":"Use - the latest supported Node.js version for the latest security classes. Using - older classes and types can make your application vulnerable.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"UseLatestNodeJS","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e67687e8-08d5-4e7f-8226-5b4753bba008","type":"Microsoft.Authorization/policyDefinitions","name":"e67687e8-08d5-4e7f-8226-5b4753bba008"}' - headers: - cache-control: - - no-cache - content-length: - - '1222' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e6955644-301c-44b5-a4c4-528577de6861'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Linux machines that do not have - the passwd file permissions set to 0644","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - do not have the passwd file permissions set to 0644","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"PasswordPolicy_msid121","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861","type":"Microsoft.Authorization/policyDefinitions","name":"e6955644-301c-44b5-a4c4-528577de6861"}' - headers: - cache-control: - - no-cache - content-length: - - '4966' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e6ebf138-3d71-4935-a13b-9c7fdddd94df'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines on which the specified - services are not installed and ''Running''","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if result of the Windows - PowerShell command Get-Service do not include the service name with matching - status as specified by the policy parameter.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WindowsServiceStatus","version":"1.*","configurationParameter":{"ServiceName":"[WindowsServiceStatus]WindowsServiceStatus1;ServiceName"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"ServiceName":{"type":"String","metadata":{"displayName":"Service - names (supports wildcards)","description":"A semicolon-separated list of the - names of the services that should be installed and ''Running''. e.g. ''WinRm;Wi*''"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsServiceStatus","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[WindowsServiceStatus]WindowsServiceStatus1;ServiceName'', - ''='', parameters(''ServiceName'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df","type":"Microsoft.Authorization/policyDefinitions","name":"e6ebf138-3d71-4935-a13b-9c7fdddd94df"}' - headers: - cache-control: - - no-cache - content-length: - - '4085' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e71308d3-144b-4262-b144-efdc3cc90517'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Subnets should be associated with a Network - Security Group","policyType":"BuiltIn","mode":"All","description":"Protect - your subnet from potential threats by restricting access to it with a Network - Security Group (NSG). NSGs contain a list of Access Control List (ACL) rules - that allow or deny network traffic to your subnet.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks/subnets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"eade5b56-eefd-444f-95c8-23f29e5d93cb","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e71308d3-144b-4262-b144-efdc3cc90517","type":"Microsoft.Authorization/policyDefinitions","name":"e71308d3-144b-4262-b144-efdc3cc90517"}' - headers: - cache-control: - - no-cache - content-length: - - '1139' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e756b945-1b1b-480b-8de8-9a0859d5f7ad'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Advanced Threat Protection - types should be set to ''All'' in SQL server Advanced Data Security settings","policyType":"BuiltIn","mode":"Indexed","description":"It - is recommended to enable all Advanced Threat Protection types on your SQL - servers. Enabling all types protects against SQL injection, database vulnerabilities, - and any other anomalous activities.","metadata":{"version":"1.0.0-deprecated","category":"SQL","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/securityAlertPolicies","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/securityAlertPolicies/disabledAlerts[*]","equals":""}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e756b945-1b1b-480b-8de8-9a0859d5f7ad","type":"Microsoft.Authorization/policyDefinitions","name":"e756b945-1b1b-480b-8de8-9a0859d5f7ad"}' - headers: - cache-control: - - no-cache - content-length: - - '1178' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e765b5de-1225-4ba3-bd56-1ac6695af988'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Allowed locations for resource groups","policyType":"BuiltIn","mode":"All","description":"This - policy enables you to restrict the locations your organization can create - resource groups in. Use to enforce your geo-compliance requirements.","metadata":{"version":"1.0.0","category":"General"},"parameters":{"listOfAllowedLocations":{"type":"Array","metadata":{"description":"The - list of locations that resource groups can be created in.","strongType":"location","displayName":"Allowed - locations"}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Resources/subscriptions/resourceGroups"},{"field":"location","notIn":"[parameters(''listOfAllowedLocations'')]"}]},"then":{"effect":"deny"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e765b5de-1225-4ba3-bd56-1ac6695af988","type":"Microsoft.Authorization/policyDefinitions","name":"e765b5de-1225-4ba3-bd56-1ac6695af988"}' - headers: - cache-control: - - no-cache - content-length: - - '926' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e797f851-8be7-4c40-bb56-2e3395215b0e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Web Sockets state - for a Web Application","policyType":"BuiltIn","mode":"All","description":"The - Web Sockets protocol is vulnerable to different types of security threats. - Use of Web Sockets within a web application must be carefully reviewed.","metadata":{"version":"1.0.0-deprecated","category":"Security - Center","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allof":[{"field":"type","equals":"microsoft.Web/sites"},{"anyof":[{"field":"kind","equals":"app"},{"field":"kind","equals":"WebApp"},{"field":"kind","equals":"app,linux"},{"field":"kind","equals":"app,linux,container"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/complianceResults","name":"DisableWebSockets","existenceCondition":{"field":"Microsoft.Security/complianceResults/resourceStatus","in":["OffByPolicy","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e797f851-8be7-4c40-bb56-2e3395215b0e","type":"Microsoft.Authorization/policyDefinitions","name":"e797f851-8be7-4c40-bb56-2e3395215b0e"}' - headers: - cache-control: - - no-cache - content-length: - - '1269' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:52 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e802a67a-daf5-4436-9ea6-f6d821dd0c5d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Enforce SSL connection should be enabled - for MySQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Database for MySQL supports connecting your Azure Database for MySQL server - to client applications using Secure Sockets Layer (SSL). Enforcing SSL connections - between your database server and your client applications helps protect against - ''man in the middle'' attacks by encrypting the data stream between the server - and your application. This configuration enforces that SSL is always enabled - for accessing your database server.","metadata":{"version":"1.0.1","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMySQL/servers"},{"field":"Microsoft.DBforMySQL/servers/sslEnforcement","exists":"true"},{"field":"Microsoft.DBforMySQL/servers/sslEnforcement","notEquals":"Enabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e802a67a-daf5-4436-9ea6-f6d821dd0c5d","type":"Microsoft.Authorization/policyDefinitions","name":"e802a67a-daf5-4436-9ea6-f6d821dd0c5d"}' - headers: - cache-control: - - no-cache - content-length: - - '1292' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e8cbc669-f12d-49eb-93e7-9273119e9933'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities in container security - configurations should be remediated","policyType":"BuiltIn","mode":"All","description":"Audit - vulnerabilities in security configuration on machines with Docker installed - and display as recommendations in Azure Security Center.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines","Microsoft.Compute/virtualMachineScaleSets"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"0677209d-e675-2c6f-e91a-54cef2878663","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8cbc669-f12d-49eb-93e7-9273119e9933","type":"Microsoft.Authorization/policyDefinitions","name":"e8cbc669-f12d-49eb-93e7-9273119e9933"}' - headers: - cache-control: - - no-cache - content-length: - - '1156' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e8d096bc-85de-4c5f-8cfb-857bd1b9d62d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Data Lake - Storage Gen1 to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Data Lake Storage Gen1 to stream to a regional - Event Hub when any Data Lake Storage Gen1 which is missing this diagnostic - settings is created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Data - Lake Storage in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataLakeStore/accounts"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.DataLakeStore/accounts/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Audit","enabled":"[parameters(''logsEnabled'')]"},{"category":"Requests","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8d096bc-85de-4c5f-8cfb-857bd1b9d62d","type":"Microsoft.Authorization/policyDefinitions","name":"e8d096bc-85de-4c5f-8cfb-857bd1b9d62d"}' - headers: - cache-control: - - no-cache - content-length: - - '4109' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:56 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e8eef0a8-67cf-4eb4-9386-14b0e78733d4'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Container registries should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The private link platform handles - the connectivity between the consumer and services over the Azure backbone - network.By mapping private endpoints to your container registries instead - of the entire service, you''ll also be protected against data leakage risks. - Learn more at: https://aka.ms/acr/private-link.","metadata":{"version":"1.0.1","category":"Container - Registry"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerRegistry/registries"},{"count":{"field":"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*]","where":{"field":"Microsoft.ContainerRegistry/registries/privateEndpointConnections[*].privateLinkServiceConnectionState.status","equals":"Approved"}},"less":1}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e8eef0a8-67cf-4eb4-9386-14b0e78733d4","type":"Microsoft.Authorization/policyDefinitions","name":"e8eef0a8-67cf-4eb4-9386-14b0e78733d4"}' - headers: - cache-control: - - no-cache - content-length: - - '1399' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e9585a95-5b8c-4d03-b193-dc7eb5ac4c32'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Container registries to use - private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Container - Registry. Learn more at: https://aka.ms/privatednszone and https://aka.ms/acr/private-link.","metadata":{"version":"1.0.0","category":"Container - Registry"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone id","description":"A private DNS zone id to connect to the private - endpoint. It should be linked to the private endpoint''s associated VNET.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"registry"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"containerRegistry-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e9585a95-5b8c-4d03-b193-dc7eb5ac4c32","type":"Microsoft.Authorization/policyDefinitions","name":"e9585a95-5b8c-4d03-b193-dc7eb5ac4c32"}' - headers: - cache-control: - - no-cache - content-length: - - '2527' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:50:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''e9c8d085-d9cc-4b17-9cdc-059f1f01f19e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:50:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Remote debugging should be turned off - for API Apps","policyType":"BuiltIn","mode":"Indexed","description":"Remote - debugging requires inbound ports to be opened on API apps. Remote debugging - should be turned off.","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"*api"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/remoteDebuggingEnabled","equals":"false"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/e9c8d085-d9cc-4b17-9cdc-059f1f01f19e","type":"Microsoft.Authorization/policyDefinitions","name":"e9c8d085-d9cc-4b17-9cdc-059f1f01f19e"}' - headers: - cache-control: - - no-cache - content-length: - - '997' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ea0dfaed-95fb-448c-934e-d6e713ce393d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Monitor Logs clusters should be - created with infrastructure-encryption enabled (double encryption)","policyType":"BuiltIn","mode":"Indexed","description":"To - ensure secure data encryption is enabled at the service level and the infrastructure - level with two different encryption algorithms and two different keys, use - an Azure Monitor dedicated cluster. This option is enabled by default when - supported at the region, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys#customer-managed-key-overview.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/clusters"},{"not":{"field":"Microsoft.OperationalInsights/clusters/isDoubleEncryptionEnabled","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea0dfaed-95fb-448c-934e-d6e713ce393d","type":"Microsoft.Authorization/policyDefinitions","name":"ea0dfaed-95fb-448c-934e-d6e713ce393d"}' - headers: - cache-control: - - no-cache - content-length: - - '1277' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:01 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ea3f2387-9b95-492a-a190-fcdc54f7b070'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Inherit a tag from the resource group - if missing","policyType":"BuiltIn","mode":"Indexed","description":"Adds the - specified tag with its value from the parent resource group when any resource - missing this tag is created or updated. Existing resources can be remediated - by triggering a remediation task. If the tag exists with a different value - it will not be changed.","metadata":{"version":"1.0.0","category":"Tags"},"parameters":{"tagName":{"type":"String","metadata":{"displayName":"Tag - Name","description":"Name of the tag, such as ''environment''"}}},"policyRule":{"if":{"allOf":[{"field":"[concat(''tags['', - parameters(''tagName''), '']'')]","exists":"false"},{"value":"[resourceGroup().tags[parameters(''tagName'')]]","notEquals":""}]},"then":{"effect":"modify","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"operations":[{"operation":"add","field":"[concat(''tags['', - parameters(''tagName''), '']'')]","value":"[resourceGroup().tags[parameters(''tagName'')]]"}]}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea3f2387-9b95-492a-a190-fcdc54f7b070","type":"Microsoft.Authorization/policyDefinitions","name":"ea3f2387-9b95-492a-a190-fcdc54f7b070"}' - headers: - cache-control: - - no-cache - content-length: - - '1257' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ea4d6841-2173-4317-9747-ff522a45120f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Key Vault should use a virtual network - service endpoint","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Key Vault not configured to use a virtual network service - endpoint.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"field":"Microsoft.KeyVault/vaults/networkAcls.defaultAction","notEquals":"Deny"},{"field":"Microsoft.KeyVault/vaults/networkAcls.virtualNetworkRules[*].id","exists":"false"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea4d6841-2173-4317-9747-ff522a45120f","type":"Microsoft.Authorization/policyDefinitions","name":"ea4d6841-2173-4317-9747-ff522a45120f"}' - headers: - cache-control: - - no-cache - content-length: - - '975' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:04 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ea53dbee-c6c9-4f0e-9f9e-de0039b78023'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Linux machines that allow remote - connections from accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - allow remote connections from accounts without passwords","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"PasswordPolicy_msid110","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023","type":"Microsoft.Authorization/policyDefinitions","name":"ea53dbee-c6c9-4f0e-9f9e-de0039b78023"}' - headers: - cache-control: - - no-cache - content-length: - - '4976' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''eaebaea7-8013-4ceb-9d14-7eb32271373c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Function apps should have ''Client Certificates - (Incoming client certificates)'' enabled","policyType":"BuiltIn","mode":"Indexed","description":"Client - certificates allow for the app to request a certificate for incoming requests. - Only clients with valid certificates will be able to reach the app.","metadata":{"version":"1.0.1","category":"App - Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"},{"field":"Microsoft.Web/sites/clientCertEnabled","equals":"false"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eaebaea7-8013-4ceb-9d14-7eb32271373c","type":"Microsoft.Authorization/policyDefinitions","name":"eaebaea7-8013-4ceb-9d14-7eb32271373c"}' - headers: - cache-control: - - no-cache - content-length: - - '985' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log checkpoints should be enabled for - PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_checkpoints - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_checkpoints","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e43d"}' - headers: - cache-control: - - no-cache - content-length: - - '1016' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''eb6f77b9-bd53-4e35-a23d-7f65d5f0e442'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log connections should be enabled for - PostgreSQL database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_connections - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_connections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e442","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e442"}' - headers: - cache-control: - - no-cache - content-length: - - '1016' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:10 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''eb6f77b9-bd53-4e35-a23d-7f65d5f0e446'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Disconnections should be logged for PostgreSQL - database servers.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_disconnections - enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_disconnections","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e446","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e446"}' - headers: - cache-control: - - no-cache - content-length: - - '1013' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Log duration should be enabled for PostgreSQL - database servers","policyType":"BuiltIn","mode":"Indexed","description":"This - policy helps audit any PostgreSQL databases in your environment without log_duration - setting enabled.","metadata":{"version":"1.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.DBforPostgreSQL/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.DBforPostgreSQL/servers/configurations","name":"log_duration","existenceCondition":{"field":"Microsoft.DBforPostgreSQL/servers/configurations/value","equals":"ON"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3","type":"Microsoft.Authorization/policyDefinitions","name":"eb6f77b9-bd53-4e35-a23d-7f65d5f0e8f3"}' - headers: - cache-control: - - no-cache - content-length: - - '1007' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ebb62a0c-3560-49e1-89ed-27e074e9f8ad'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:14 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deprecated accounts with owner permissions - should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"Deprecated - accounts with owner permissions should be removed from your subscription. Deprecated - accounts are accounts that have been blocked from signing in.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"e52064aa-6853-e252-a11e-dffc675689c2","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ebb62a0c-3560-49e1-89ed-27e074e9f8ad","type":"Microsoft.Authorization/policyDefinitions","name":"ebb62a0c-3560-49e1-89ed-27e074e9f8ad"}' - headers: - cache-control: - - no-cache - content-length: - - '1101' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ebb67efd-3c46-49b0-adfe-5599eb944998'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Windows machines that don''t have - the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if the application - name is not found in any of the following registry paths: HKLM:SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall, - HKLM:SOFTWARE\\Wow6432node\\Microsoft\\Windows\\CurrentVersion\\Uninstall, - HKCU:Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall.","metadata":{"category":"Guest - Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"WhitelistedApplication","version":"1.*","configurationParameter":{"installedApplication":"[InstalledApplication]bwhitelistedapp;Name"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"installedApplication":{"type":"String","metadata":{"displayName":"Application - names (supports wildcards)","description":"A semicolon-separated list of the - names of the applications that should be installed. e.g. ''Microsoft SQL Server - 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL Server 2014*'' - (to match any application starting with ''Microsoft SQL Server 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WhitelistedApplication","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]bwhitelistedapp;Name'', - ''='', parameters(''installedApplication'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ebb67efd-3c46-49b0-adfe-5599eb944998","type":"Microsoft.Authorization/policyDefinitions","name":"ebb67efd-3c46-49b0-adfe-5599eb944998"}' - headers: - cache-control: - - no-cache - content-length: - - '4358' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ec068d99-e9c7-401f-8cef-5bdde4e6ccf1'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:17 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Double encryption should be enabled on - Azure Data Explorer","policyType":"BuiltIn","mode":"Indexed","description":"Enabling - double encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments. When double encryption has been enabled, - data in the storage account is encrypted twice, once at the service level - and once at the infrastructure level, using two different encryption algorithms - and two different keys.","metadata":{"version":"2.0.0","category":"Azure Data - Explorer"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kusto/Clusters"},{"anyOf":[{"field":"Microsoft.Kusto/clusters/enableDoubleEncryption","exists":false},{"field":"Microsoft.Kusto/clusters/enableDoubleEncryption","equals":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec068d99-e9c7-401f-8cef-5bdde4e6ccf1","type":"Microsoft.Authorization/policyDefinitions","name":"ec068d99-e9c7-401f-8cef-5bdde4e6ccf1"}' - headers: - cache-control: - - no-cache - content-length: - - '1228' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ec49586f-4939-402d-a29e-6ff502b20592'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Linux VMs that allow remote connections from accounts without passwords","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that allow remote connections from accounts without passwords. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid110","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid110"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec49586f-4939-402d-a29e-6ff502b20592","type":"Microsoft.Authorization/policyDefinitions","name":"ec49586f-4939-402d-a29e-6ff502b20592"}' - headers: - cache-control: - - no-cache - content-length: - - '7019' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:19 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ec7ac234-2af5-4729-94d2-c557c071799d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Administrative Templates - Control Panel''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - Control Panel''. It also creates a system-assigned managed identity and - deploys the VM extension for Guest Configuration. This policy should only - be used along with its corresponding audit policy in an initiative. For more - information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdministrativeTemplatesControlPanel","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdministrativeTemplatesControlPanel"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ec7ac234-2af5-4729-94d2-c557c071799d","type":"Microsoft.Authorization/policyDefinitions","name":"ec7ac234-2af5-4729-94d2-c557c071799d"}' - headers: - cache-control: - - no-cache - content-length: - - '5797' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ed66d4f5-8220-45dc-ab4a-20d1749c74e6'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Event Hub namespaces to use - private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Event Hub namespaces. - Learn more at: https://docs.microsoft.com/azure/event-hubs/private-link-service.","metadata":{"version":"1.0.0","category":"Event - Hub"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"namespace"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"namespace-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ed66d4f5-8220-45dc-ab4a-20d1749c74e6","type":"Microsoft.Authorization/policyDefinitions","name":"ed66d4f5-8220-45dc-ab4a-20d1749c74e6"}' - headers: - cache-control: - - no-cache - content-length: - - '2454' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ed7c8c13-51e7-49d1-8a43-8490431a0da2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Key Vault - to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Key Vault to stream to a regional Event Hub when - any Key Vault which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.0.0","category":"Key - Vault"},"parameters":{"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Key - Vaults in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.KeyVault/vaults"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vaultName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"resources":[{"type":"Microsoft.KeyVault/vaults/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''vaultName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"AuditEvent","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{"policy":{"type":"string","value":"[concat(''Enabled - diagnostic settings for '', parameters(''vaultName''))]"}}},"parameters":{"location":{"value":"[field(''location'')]"},"vaultName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ed7c8c13-51e7-49d1-8a43-8490431a0da2","type":"Microsoft.Authorization/policyDefinitions","name":"ed7c8c13-51e7-49d1-8a43-8490431a0da2"}' - headers: - cache-control: - - no-cache - content-length: - - '3892' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''edf3780c-3d70-40fe-b17e-ab72013dafca'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Stream - Analytics to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Stream Analytics to stream to a regional Event - Hub when any Stream Analytics which is missing this diagnostic settings is - created or updated.","metadata":{"version":"2.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Location","description":"The location the Event Hub resides in. Only Stream - Analytics in this location will be linked to this Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.StreamAnalytics/streamingjobs"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.StreamAnalytics/streamingjobs/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"Execution","enabled":"[parameters(''logsEnabled'')]"},{"category":"Authoring","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/edf3780c-3d70-40fe-b17e-ab72013dafca","type":"Microsoft.Authorization/policyDefinitions","name":"edf3780c-3d70-40fe-b17e-ab72013dafca"}' - headers: - cache-control: - - no-cache - content-length: - - '4109' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:25 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ee40564d-486e-4f68-a5ca-7a621edae0fb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Machine Learning workspace - to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Azure Machine - Learning workspaces. Learn more at: https://docs.microsoft.com/azure/machine-learning/how-to-network-security-overview.","metadata":{"version":"1.0.0","category":"Machine - Learning"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone id","description":"A private DNS zone id to connect to the private - endpoint.","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"amlworkspace"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"amlworkspace-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ee40564d-486e-4f68-a5ca-7a621edae0fb","type":"Microsoft.Authorization/policyDefinitions","name":"ee40564d-486e-4f68-a5ca-7a621edae0fb"}' - headers: - cache-control: - - no-cache - content-length: - - '2500' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ee980b6d-0eca-4501-8d54-f6290fd512c3'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:27 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Cognitive Search services should - disable public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that your Azure Cognitive - Search service is not exposed on the public internet. Creating private endpoints - can limit exposure of your Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"version":"1.0.0","category":"Search"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Search/searchServices"},{"field":"Microsoft.Search/searchServices/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ee980b6d-0eca-4501-8d54-f6290fd512c3","type":"Microsoft.Authorization/policyDefinitions","name":"ee980b6d-0eca-4501-8d54-f6290fd512c3"}' - headers: - cache-control: - - no-cache - content-length: - - '1100' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ee984370-154a-4ee8-9726-19d900e56fc0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Accounts''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Accounts'' for limiting local account use of blank passwords and - guest account status. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsAccounts","version":"1.*","configurationParameter":{"AccountsGuestAccountStatus":"Accounts: - Guest account status;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"AccountsGuestAccountStatus":{"type":"String","metadata":{"displayName":"Accounts: - Guest account status","description":"Specifies whether the local Guest account - is disabled."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsAccounts","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Accounts: - Guest account status;ExpectedValue'', ''='', parameters(''AccountsGuestAccountStatus'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ee984370-154a-4ee8-9726-19d900e56fc0","type":"Microsoft.Authorization/policyDefinitions","name":"ee984370-154a-4ee8-9726-19d900e56fc0"}' - headers: - cache-control: - - no-cache - content-length: - - '4304' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:30 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerability assessment should be enabled - on your SQL servers","policyType":"BuiltIn","mode":"Indexed","description":"Audit - Azure SQL servers which do not have recurring vulnerability assessment scans - enabled. Vulnerability assessment can discover, track, and help you remediate - potential database vulnerabilities.","metadata":{"version":"2.0.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Sql/servers"},{"field":"kind","notContains":"analytics"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/vulnerabilityAssessments","name":"default","existenceCondition":{"field":"Microsoft.Sql/servers/vulnerabilityAssessments/recurringScans.isEnabled","equals":"True"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9","type":"Microsoft.Authorization/policyDefinitions","name":"ef2a8f2a-b3d9-49cd-a8a8-9a3aaaf647d9"}' - headers: - cache-control: - - no-cache - content-length: - - '1152' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ef45854f-b33f-49a3-8041-9057e915d88f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure private endpoints to Azure - SignalR Service","policyType":"BuiltIn","mode":"Indexed","description":"Private - endpoints connect your virtual network to Azure services without a public - IP address at the source or destination. By mapping private endpoints to Azure - SignalR Service resources, you can reduce data leakage risks. Learn more at - https://aka.ms/asrs/privatelink.","metadata":{"version":"1.0.0","category":"SignalR"},"parameters":{"privateEndpointSubnetId":{"type":"String","metadata":{"displayName":"Private - Endpoint Subnet ID","description":"A subnet with private endpoint network - policies disabled.","strongType":"Microsoft.Network/virtualNetworks/subnets"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.SignalRService/SignalR"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.SignalRService/SignalR/privateEndpointConnections","existenceCondition":{"field":"Microsoft.SignalRService/SignalR/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"},"roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7","/providers/Microsoft.Authorization/roleDefinitions/8cf5e20a-e4b2-4e9d-b3a1-5ceb692c2761"],"deployment":{"properties":{"mode":"incremental","parameters":{"name":{"value":"[field(''name'')]"},"serviceId":{"value":"[field(''id'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"name":{"type":"string"},"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"}},"variables":{"privateEndpointName":"[concat(''pe-'',substring(parameters(''name''),0,min(length(parameters(''name'')),50)),''-'',uniquestring(deployment().name))]"},"resources":[{"type":"Microsoft.Resources/deployments","name":"[variables(''privateEndpointName'')]","apiVersion":"2020-06-01","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serviceId":{"type":"string"},"privateEndpointSubnetId":{"type":"string"},"subnetLocation":{"type":"string"}},"variables":{"privateEndpointName":"[deployment().name]"},"resources":[{"name":"[variables(''privateEndpointName'')]","type":"Microsoft.Network/privateEndpoints","apiVersion":"2020-07-01","location":"[parameters(''subnetLocation'')]","tags":{},"properties":{"subnet":{"id":"[parameters(''privateEndpointSubnetId'')]"},"privateLinkServiceConnections":[{"name":"[variables(''privateEndpointName'')]","properties":{"privateLinkServiceId":"[parameters(''serviceId'')]","groupIds":["signalr"],"requestMessage":"autoapprove"}}],"manualPrivateLinkServiceConnections":[]}}]},"parameters":{"serviceId":{"value":"[parameters(''serviceId'')]"},"privateEndpointSubnetId":{"value":"[parameters(''privateEndpointSubnetId'')]"},"subnetLocation":{"value":"[reference(first(take(split(parameters(''privateEndpointSubnetId''),''/subnets''),1)),''2020-07-01'',''Full'').location]"}}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef45854f-b33f-49a3-8041-9057e915d88f","type":"Microsoft.Authorization/policyDefinitions","name":"ef45854f-b33f-49a3-8041-9057e915d88f"}' - headers: - cache-control: - - no-cache - content-length: - - '3566' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ef619a2c-cc4d-4d03-b2ba-8c94a834d85b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"API Management services should use a - virtual network","policyType":"BuiltIn","mode":"Indexed","description":"Azure - Virtual Network deployment provides enhanced security, isolation and allows - you to place your API Management service in a non-internet routable network - that you control access to. These networks can then be connected to your on-premises - networks using various VPN technologies, which enables access to your backend - services within the network and/or on-premises. The developer portal and API - gateway, can be configured to be accessible either from the Internet or only - within the virtual network.","metadata":{"version":"1.0.1","category":"API - Management"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]},"evaluatedSkuNames":{"type":"Array","metadata":{"displayName":"API - Management SKU Names","description":"List of API Management SKUs against which - this policy will be evaluated."},"allowedValues":["Developer","Basic","Standard","Premium","Consumption"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ApiManagement/service"},{"field":"Microsoft.ApiManagement/service/sku.name","in":"[parameters(''evaluatedSkuNames'')]"},{"anyOf":[{"field":"Microsoft.ApiManagement/service/virtualNetworkType","exists":"false"},{"field":"Microsoft.ApiManagement/service/virtualNetworkType","equals":"None"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef619a2c-cc4d-4d03-b2ba-8c94a834d85b","type":"Microsoft.Authorization/policyDefinitions","name":"ef619a2c-cc4d-4d03-b2ba-8c94a834d85b"}' - headers: - cache-control: - - no-cache - content-length: - - '1727' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ef7b61ef-b8e4-4c91-8e78-6946c6b0023f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Diagnostic Settings for Event - Hub to Event Hub","policyType":"BuiltIn","mode":"Indexed","description":"Deploys - the diagnostic settings for Event Hub to stream to a regional Event Hub when - any Event Hub which is missing this diagnostic settings is created or updated.","metadata":{"version":"2.1.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"profileName":{"type":"String","metadata":{"displayName":"Profile - name","description":"The diagnostic settings profile name"}},"eventHubRuleId":{"type":"String","metadata":{"displayName":"Event - Hub Authorization Rule Id","description":"The Event Hub authorization rule - Id for Azure Diagnostics. The authorization rule needs to be at Event Hub - namespace level. e.g. /subscriptions/{subscription Id}/resourceGroups/{resource - group}/providers/Microsoft.EventHub/namespaces/{Event Hub namespace}/authorizationrules/{authorization - rule}","strongType":"Microsoft.EventHub/Namespaces/AuthorizationRules","assignPermissions":true}},"eventHubLocation":{"type":"String","metadata":{"displayName":"Event - Hub Destination Location","description":"The location the Event Hub that will - get diagnostic data resides in. Only source Event Hubs in this location will - be linked to this destination Event Hub.","strongType":"location"}},"metricsEnabled":{"type":"String","metadata":{"displayName":"Enable - metrics","description":"Whether to enable metrics stream to the Event Hub - - True or False"},"allowedValues":["True","False"]},"logsEnabled":{"type":"String","metadata":{"displayName":"Enable - logs","description":"Whether to enable logs stream to the Event Hub - True - or False"},"allowedValues":["True","False"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventHub/namespaces"},{"anyOf":[{"value":"[parameters(''eventHubLocation'')]","equals":""},{"field":"location","equals":"[parameters(''eventHubLocation'')]"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","name":"[parameters(''profileName'')]","existenceCondition":{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"[parameters(''logsEnabled'')]"},{"field":"Microsoft.Insights/diagnosticSettings/metrics.enabled","equals":"[parameters(''metricsEnabled'')]"}]},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceName":{"type":"string"},"location":{"type":"string"},"eventHubRuleId":{"type":"string"},"metricsEnabled":{"type":"string"},"logsEnabled":{"type":"string"},"profileName":{"type":"string"}},"variables":{},"resources":[{"type":"Microsoft.EventHub/namespaces/providers/diagnosticSettings","apiVersion":"2017-05-01-preview","name":"[concat(parameters(''resourceName''), - ''/'', ''Microsoft.Insights/'', parameters(''profileName''))]","location":"[parameters(''location'')]","dependsOn":[],"properties":{"eventHubAuthorizationRuleId":"[parameters(''eventHubRuleId'')]","metrics":[{"category":"AllMetrics","enabled":"[parameters(''metricsEnabled'')]","retentionPolicy":{"enabled":false,"days":0}}],"logs":[{"category":"ArchiveLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"OperationalLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"AutoScaleLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaCoordinatorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"KafkaUserErrorLogs","enabled":"[parameters(''logsEnabled'')]"},{"category":"EventHubVNetConnectionEvent","enabled":"[parameters(''logsEnabled'')]"},{"category":"CustomerManagedKeyUserLogs","enabled":"[parameters(''logsEnabled'')]"}]}}],"outputs":{}},"parameters":{"location":{"value":"[field(''location'')]"},"resourceName":{"value":"[field(''name'')]"},"eventHubRuleId":{"value":"[parameters(''eventHubRuleId'')]"},"metricsEnabled":{"value":"[parameters(''metricsEnabled'')]"},"logsEnabled":{"value":"[parameters(''logsEnabled'')]"},"profileName":{"value":"[parameters(''profileName'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ef7b61ef-b8e4-4c91-8e78-6946c6b0023f","type":"Microsoft.Authorization/policyDefinitions","name":"ef7b61ef-b8e4-4c91-8e78-6946c6b0023f"}' - headers: - cache-control: - - no-cache - content-length: - - '4515' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''efbde977-ba53-4479-b8e9-10b957924fbf'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"The Log Analytics agent should be installed - on Virtual Machine Scale Sets","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any Windows/Linux Virtual Machine Scale Sets if the Log Analytics - agent is not installed.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachineScaleSets/extensions","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/type","in":["MicrosoftMonitoringAgent","OmsAgentForLinux"]},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/provisioningState","equals":"Succeeded"},{"field":"Microsoft.Compute/virtualMachineScaleSets/extensions/settings.workspaceId","exists":"true"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/efbde977-ba53-4479-b8e9-10b957924fbf","type":"Microsoft.Authorization/policyDefinitions","name":"efbde977-ba53-4479-b8e9-10b957924fbf"}' - headers: - cache-control: - - no-cache - content-length: - - '1400' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f0473e7a-a1ba-4e86-afb2-e829e11b01d8'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:39 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Ensure that Register with - Azure Active Directory is enabled on Function App","policyType":"BuiltIn","mode":"Indexed","description":"This - policy is a duplicate of the respective Managed Identity policies. Please - use /providers/Microsoft.Authorization/policyDefinitions/0da106f2-4ca3-48e8-bc85-c638fe6aea8f - instead.","metadata":{"version":"1.0.0-deprecated","category":"App Service","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/web.managedServiceIdentityId","exists":"true"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0473e7a-a1ba-4e86-afb2-e829e11b01d8","type":"Microsoft.Authorization/policyDefinitions","name":"f0473e7a-a1ba-4e86-afb2-e829e11b01d8"}' - headers: - cache-control: - - no-cache - content-length: - - '1169' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f0633351-c7b2-41ff-9981-508fc08553c2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that have the specified applications installed","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have the specified applications installed. It also creates a system-assigned - managed identity and deploys the VM extension for Guest Configuration. This - policy should only be used along with its corresponding audit policy in an - initiative. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"ApplicationName":{"type":"String","metadata":{"displayName":"[Deprecated]: - Application names (supports wildcards)","description":"A semicolon-separated - list of the names of the applications that should not be installed. e.g. ''Microsoft - SQL Server 2014 (64-bit); Microsoft Visual Studio Code'' or ''Microsoft SQL - Server 2014*'' (to match any application starting with ''Microsoft SQL Server - 2014'')"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"NotInstalledApplication","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[InstalledApplication]NotInstalledApplicationResource1;Name'', - ''='', parameters(''ApplicationName'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"NotInstalledApplication"},"ApplicationName":{"value":"[parameters(''ApplicationName'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"ApplicationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]NotInstalledApplicationResource1;Name","value":"[parameters(''ApplicationName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[InstalledApplication]NotInstalledApplicationResource1;Name","value":"[parameters(''ApplicationName'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0633351-c7b2-41ff-9981-508fc08553c2","type":"Microsoft.Authorization/policyDefinitions","name":"f0633351-c7b2-41ff-9981-508fc08553c2"}' - headers: - cache-control: - - no-cache - content-length: - - '6704' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Latest TLS version should be used in - your Web App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"app*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b","type":"Microsoft.Authorization/policyDefinitions","name":"f0e6e85b-9b9f-4a4b-b67b-f730d42f1b0b"}' - headers: - cache-control: - - no-cache - content-length: - - '914' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f0fcf93c-c063-4071-9668-c47474bd3564'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Service Bus namespaces to use - private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to Service Bus namespaces. - Learn more at: https://docs.microsoft.com/azure/service-bus-messaging/private-link-service.","metadata":{"version":"1.0.0","category":"Service - Bus"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS Zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"namespace"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"namespace-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f0fcf93c-c063-4071-9668-c47474bd3564","type":"Microsoft.Authorization/policyDefinitions","name":"f0fcf93c-c063-4071-9668-c47474bd3564"}' - headers: - cache-control: - - no-cache - content-length: - - '2471' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f1525828-9a90-4fcf-be48-268cdd02361e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:45 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy Workflow Automation for Azure - Security Center alerts","policyType":"BuiltIn","mode":"All","description":"Enable - automation of Azure Security Center alerts. This policy deploys a workflow - automation with your conditions and triggers on the assigned scope. To deploy - this policy on newly created subscriptions, open the Compliance tab, select - the relevant non-compliant assignment and create a remediation task.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"automationName":{"type":"String","metadata":{"displayName":"Automation - name","description":"This is the automation name."}},"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the workflow automation - is created. If you enter a name for a resource group that doesn''t exist, - it''ll be created in the subscription."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - workflow automation are created.","strongType":"location"}},"alertName":{"type":"String","metadata":{"displayName":"Alert - name contains","description":"String included in the required alert name. - For a full reference list of Security Center''s alerts, see https://docs.microsoft.com/azure/security-center/alerts-reference."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"logicAppResourceId":{"type":"String","metadata":{"displayName":"Logic - App","description":"The Logic App that is triggered.","strongType":"Microsoft.Logic/workflows","assignPermissions":true}},"logicAppTrigger":{"type":"String","metadata":{"displayName":"Logic - app trigger","description":"The trigger connector of the logic app that is - triggered. Possible values: ''Manual (Incoming HTTP request)'', ''When an - Azure Security Center Alert is created or triggered''."},"allowedValues":["Manual - (Incoming HTTP request)","When an Azure Security Center Alert is created or - triggered"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"[parameters(''automationName'')]","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","in":"[union(parameters(''alertSeverities''),if(equals(parameters(''alertName''), - ''''), array(''3.''), array(parameters(''alertName''))))]"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","in":"[union(array(''Severity''),if(equals(parameters(''alertName''), - ''''), array(''Version''), array(''AlertDisplayName'')))]"},{"count":{"value":"[parameters(''alertSeverities'')]","name":"alertSeverity","where":{"count":{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*]","where":{"allOf":[{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].propertyJPath","equals":"Severity"},{"field":"Microsoft.Security/automations/sources[*].ruleSets[*].rules[*].expectedValue","equals":"[current(''alertSeverity'')]"}]}},"equals":1}},"equals":"[length(parameters(''alertSeverities''))]"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"automationName":{"type":"string"},"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"alertName":{"type":"string"},"alertSeverities":{"type":"array"},"logicAppResourceId":{"type":"string"},"logicAppTrigger":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","severityMap":{"High":"high","Medium":"medium","Low":"low"},"triggerMap":{"Manual - (Incoming HTTP request)":"manual","When an Azure Security Center Alert is - created or triggered":"When_an_Azure_Security_Center_Alert_is_created_or_triggered"}},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"[parameters(''automationName'')]","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Workflow - Automation for Azure Security Center alerts via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":[{"eventSource":"Alerts","copy":[{"name":"ruleSets","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"[if(equals(parameters(''alertName''), - ''''), ''Version'', ''AlertDisplayName'')]","propertyType":"string","expectedValue":"[if(equals(parameters(''alertName''), - ''''), ''3.'', parameters(''alertName''))]","operator":"Contains"},{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''severityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSets''), - variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]}],"actions":[{"actionType":"LogicApp","logicAppResourceId":"[parameters(''logicAppResourceId'')]","uri":"[listCallbackUrl(concat(parameters(''logicAppResourceId''), - ''/triggers/'', variables(''triggerMap'')[parameters(''logicAppTrigger'')]),''2016-06-01'').value]"}]}}]}}}]},"parameters":{"automationName":{"value":"[parameters(''automationName'')]"},"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"alertName":{"value":"[parameters(''alertName'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"logicAppResourceId":{"value":"[parameters(''logicAppResourceId'')]"},"logicAppTrigger":{"value":"[parameters(''logicAppTrigger'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1525828-9a90-4fcf-be48-268cdd02361e","type":"Microsoft.Authorization/policyDefinitions","name":"f1525828-9a90-4fcf-be48-268cdd02361e"}' - headers: - cache-control: - - no-cache - content-length: - - '7326' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f1776c76-f58c-4245-a8d0-2b207198dc8b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual networks should use specified - virtual network gateway","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits any virtual network if the default route does not point to the - specified virtual network gateway.","metadata":{"version":"1.0.0","category":"Network"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"virtualNetworkGatewayId":{"type":"String","metadata":{"displayName":"Virtual - network gateway Id","description":"Resource Id of the virtual network gateway. - Example: /subscriptions/YourSubscriptionId/resourceGroups/YourResourceGroup/providers/Microsoft.Network/virtualNetworkGateways/Name"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Network/virtualNetworks"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/virtualNetworks/subnets","name":"GatewaySubnet","existenceCondition":{"not":{"field":"Microsoft.Network/virtualNetworks/subnets/ipConfigurations[*].id","notContains":"[concat(parameters(''virtualNetworkGatewayId''), - ''/'')]"}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1776c76-f58c-4245-a8d0-2b207198dc8b","type":"Microsoft.Authorization/policyDefinitions","name":"f1776c76-f58c-4245-a8d0-2b207198dc8b"}' - headers: - cache-control: - - no-cache - content-length: - - '1379' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f19aa1c1-6b91-4c27-ae6a-970279f03db9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Linux VMs that do not have the passwd file permissions set to 0644","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Linux virtual machines - that do not have the passwd file permissions set to 0644. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid121","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"PasswordPolicy_msid121"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f19aa1c1-6b91-4c27-ae6a-970279f03db9","type":"Microsoft.Authorization/policyDefinitions","name":"f19aa1c1-6b91-4c27-ae6a-970279f03db9"}' - headers: - cache-control: - - no-cache - content-length: - - '7009' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f1f4825d-58fb-4257-8016-8c00e3c9ed9d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Administrative Templates - MSS (Legacy)''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Administrative Templates - - MSS (Legacy)''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_AdminstrativeTemplatesMSSLegacy","deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_AdminstrativeTemplatesMSSLegacy"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*"}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f1f4825d-58fb-4257-8016-8c00e3c9ed9d","type":"Microsoft.Authorization/policyDefinitions","name":"f1f4825d-58fb-4257-8016-8c00e3c9ed9d"}' - headers: - cache-control: - - no-cache - content-length: - - '5787' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f2143251-70de-4e81-87a8-36cee5a2f29d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Settings - Account Policies''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Settings - Account Policies'' for password history, age, length, complexity, - and storing passwords using reversible encryption. This policy requires that - the Guest Configuration prerequisites have been deployed to the policy assignment - scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecuritySettingsAccountPolicies","version":"1.*","configurationParameter":{"EnforcePasswordHistory":"Enforce - password history;ExpectedValue","MaximumPasswordAge":"Maximum password age;ExpectedValue","MinimumPasswordAge":"Minimum - password age;ExpectedValue","MinimumPasswordLength":"Minimum password length;ExpectedValue","PasswordMustMeetComplexityRequirements":"Password - must meet complexity requirements;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"EnforcePasswordHistory":{"type":"String","metadata":{"displayName":"Enforce - password history","description":"Specifies limits on password reuse - how - many times a new password must be created for a user account before the password - can be repeated."}},"MaximumPasswordAge":{"type":"String","metadata":{"displayName":"Maximum - password age","description":"Specifies the maximum number of days that may - elapse before a user account password must be changed. The format of the value - is two integers separated by a comma, denoting an inclusive range."}},"MinimumPasswordAge":{"type":"String","metadata":{"displayName":"Minimum - password age","description":"Specifies the minimum number of days that must - elapse before a user account password can be changed."}},"MinimumPasswordLength":{"type":"String","metadata":{"displayName":"Minimum - password length","description":"Specifies the minimum number of characters - that a user account password may contain."}},"PasswordMustMeetComplexityRequirements":{"type":"String","metadata":{"displayName":"Password - must meet complexity requirements","description":"Specifies whether a user - account password must be complex. If required, a complex password must not - contain part of user''s account name or full name; be at least 6 characters - long; contain a mix of uppercase, lowercase, number, and non-alphabetic characters."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecuritySettingsAccountPolicies","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Enforce - password history;ExpectedValue'', ''='', parameters(''EnforcePasswordHistory''), - '','', ''Maximum password age;ExpectedValue'', ''='', parameters(''MaximumPasswordAge''), - '','', ''Minimum password age;ExpectedValue'', ''='', parameters(''MinimumPasswordAge''), - '','', ''Minimum password length;ExpectedValue'', ''='', parameters(''MinimumPasswordLength''), - '','', ''Password must meet complexity requirements;ExpectedValue'', ''='', - parameters(''PasswordMustMeetComplexityRequirements'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f2143251-70de-4e81-87a8-36cee5a2f29d","type":"Microsoft.Authorization/policyDefinitions","name":"f2143251-70de-4e81-87a8-36cee5a2f29d"}' - headers: - cache-control: - - no-cache - content-length: - - '6176' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:53 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f39f5f49-4abf-44de-8c70-0756997bfb51'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:54 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Disk access resources should use private - link","policyType":"BuiltIn","mode":"Indexed","description":"Azure Private - Link lets you connect your virtual network to Azure services without a public - IP address at the source or destination. The Private Link platform handles - the connectivity between the consumer and services over the Azure backbone - network. By mapping private endpoints to diskAccesses, data leakage risks - are reduced. Learn more about private links at: https://aka.ms/disksprivatelinksdoc. - ","metadata":{"version":"1.0.0","category":"Compute"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Compute/diskAccesses"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/diskAccesses/privateEndpointConnections","existenceCondition":{"field":"Microsoft.Compute/diskAccesses/privateEndpointConnections/privateLinkServiceConnectionState.status","equals":"Approved"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f39f5f49-4abf-44de-8c70-0756997bfb51","type":"Microsoft.Authorization/policyDefinitions","name":"f39f5f49-4abf-44de-8c70-0756997bfb51"}' - headers: - cache-control: - - no-cache - content-length: - - '1323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f3b44e5d-1456-475f-9c67-c66c4618e85a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs if the Administrators group doesn''t contain all of the specified - members","policyType":"BuiltIn","mode":"All","description":"This policy should - only be used along with its corresponding deploy policy in an initiative. - This definition allows Azure Policy to process the results of auditing Windows - virtual machines in which the Administrators group does not contain all of - the specified members. For more information on Guest Configuration policies, - please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AdministratorsGroupMembersToInclude","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3b44e5d-1456-475f-9c67-c66c4618e85a","type":"Microsoft.Authorization/policyDefinitions","name":"f3b44e5d-1456-475f-9c67-c66c4618e85a"}' - headers: - cache-control: - - no-cache - content-length: - - '3259' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:55 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f3b9ad83-000d-4dc1-bff0-6d54533dd03f'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:57 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not contain the specified certificates in Trusted Root","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows VMs that do not contain the specified certificates in the - Trusted Root Certification Authorities certificate store (Cert:\\LocalMachine\\Root). - For more information on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsCertificateInTrustedRoot","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f3b9ad83-000d-4dc1-bff0-6d54533dd03f","type":"Microsoft.Authorization/policyDefinitions","name":"f3b9ad83-000d-4dc1-bff0-6d54533dd03f"}' - headers: - cache-control: - - no-cache - content-length: - - '3291' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f47b5582-33ec-4c5c-87c0-b010a6b2e917'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:58 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Log Analytics workspace for VM - - Report Mismatch","policyType":"BuiltIn","mode":"Indexed","description":"Reports - VMs as non-compliant if they aren''t logging to the Log Analytics workspace - specified in the policy/initiative assignment.","metadata":{"version":"1.0.1","category":"Monitoring"},"parameters":{"logAnalyticsWorkspaceId":{"type":"String","metadata":{"displayName":"Log - Analytics Workspace Id that VMs should be configured for","description":"This - is the Id (GUID) of the Log Analytics Workspace that the VMs should be configured - for."}}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines/extensions"},{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.EnterpriseCloud.Monitoring"},{"field":"Microsoft.Compute/virtualMachines/extensions/settings.workspaceId","notEquals":"[parameters(''logAnalyticsWorkspaceId'')]"}]},"then":{"effect":"audit"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f47b5582-33ec-4c5c-87c0-b010a6b2e917","type":"Microsoft.Authorization/policyDefinitions","name":"f47b5582-33ec-4c5c-87c0-b010a6b2e917"}' - headers: - cache-control: - - no-cache - content-length: - - '1157' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:51:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f4826e5f-6a27-407c-ae3e-9582eb39891d'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:51:59 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Authorization rules on the Event Hub - instance should be defined","policyType":"BuiltIn","mode":"All","description":"Audit - existence of authorization rules on Event Hub entities to grant least-privileged - access","metadata":{"version":"1.0.0","category":"Event Hub"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.EventHub/namespaces/eventhubs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.EventHub/namespaces/eventHubs/authorizationRules"}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4826e5f-6a27-407c-ae3e-9582eb39891d","type":"Microsoft.Authorization/policyDefinitions","name":"f4826e5f-6a27-407c-ae3e-9582eb39891d"}' - headers: - cache-control: - - no-cache - content-length: - - '889' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:00 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f48b2913-1dc5-4834-8c72-ccc1dfd819bb'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:02 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have the password complexity setting enabled","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines that do not have the password complexity - setting enabled. For more information on Guest Configuration policies, please - visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordMustMeetComplexityRequirements","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f48b2913-1dc5-4834-8c72-ccc1dfd819bb","type":"Microsoft.Authorization/policyDefinitions","name":"f48b2913-1dc5-4834-8c72-ccc1dfd819bb"}' - headers: - cache-control: - - no-cache - content-length: - - '3223' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f4b245d4-46c9-42be-9b1a-49e2b5b94194'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs that have not restarted within the specified number of days","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - that have not restarted within the specified number of days. It also creates - a system-assigned managed identity and deploys the VM extension for Guest - Configuration. This policy should only be used along with its corresponding - audit policy in an initiative. For more information on Guest Configuration - policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.1.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"NumberOfDays":{"type":"String","metadata":{"displayName":"[Deprecated]: - Number of days","description":"The number of days without restart until the - machine is considered non-compliant"}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"MachineLastBootUpTime","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''[MachineUpTime]MachineLastBootUpTime;NumberOfDays'', - ''='', parameters(''NumberOfDays'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"MachineLastBootUpTime"},"NumberOfDays":{"value":"[parameters(''NumberOfDays'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NumberOfDays":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[MachineUpTime]MachineLastBootUpTime;NumberOfDays","value":"[parameters(''NumberOfDays'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"[MachineUpTime]MachineLastBootUpTime;NumberOfDays","value":"[parameters(''NumberOfDays'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4b245d4-46c9-42be-9b1a-49e2b5b94194","type":"Microsoft.Authorization/policyDefinitions","name":"f4b245d4-46c9-42be-9b1a-49e2b5b94194"}' - headers: - cache-control: - - no-cache - content-length: - - '6469' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:03 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f4b53539-8df9-40e4-86c6-6b607703bd4e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Disk encryption should be enabled on - Azure Data Explorer","policyType":"BuiltIn","mode":"Indexed","description":"Enabling - disk encryption helps protect and safeguard your data to meet your organizational - security and compliance commitments.","metadata":{"version":"2.0.0","category":"Azure - Data Explorer"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Kusto/Clusters"},{"anyOf":[{"field":"Microsoft.Kusto/clusters/enableDiskEncryption","exists":false},{"field":"Microsoft.Kusto/clusters/enableDiskEncryption","equals":false}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4b53539-8df9-40e4-86c6-6b607703bd4e","type":"Microsoft.Authorization/policyDefinitions","name":"f4b53539-8df9-40e4-86c6-6b607703bd4e"}' - headers: - cache-control: - - no-cache - content-length: - - '1001' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:05 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f4c68484-132f-41f9-9b6d-3e4b1cb55036'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:06 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure SQL servers to have auditing - enabled","policyType":"BuiltIn","mode":"Indexed","description":"To ensure - the operations performed against your SQL assets are captured, SQL servers - should have auditing enabled. This is sometimes required for compliance with - regulatory standards.","metadata":{"version":"1.2.0","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]},"retentionDays":{"type":"String","metadata":{"description":"The - value in days of the retention period (0 indicates unlimited retention)","displayName":"Retention - days (optional, 180 days if unspecified)"}},"storageAccountsResourceGroup":{"type":"String","metadata":{"displayName":"Resource - group name for storage accounts","description":"Auditing writes database events - to an audit log in your Azure Storage account (a storage account will be created - in each region where a SQL Server is created that will be shared by all servers - in that region). Important - for proper operation of Auditing do not delete - or rename the resource group or the storage accounts.","strongType":"existingResourceGroups"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Sql/servers"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Sql/servers/auditingSettings","name":"Default","existenceCondition":{"field":"Microsoft.Sql/auditingSettings.state","equals":"Enabled"},"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/056cd41c-7e88-42e1-933e-88ba6a50c9c3","/providers/microsoft.authorization/roleDefinitions/17d1049b-9a84-46fb-8f53-869881c3d3ab"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"serverName":{"type":"string"},"auditRetentionDays":{"type":"string"},"storageAccountsResourceGroup":{"type":"string"},"location":{"type":"string"}},"variables":{"retentionDays":"[int(parameters(''auditRetentionDays''))]","subscriptionId":"[subscription().subscriptionId]","uniqueStorage":"[uniqueString(variables(''subscriptionId''), - parameters(''location''), parameters(''storageAccountsResourceGroup''))]","locationCode":"[substring(parameters(''location''), - 0, 3)]","storageName":"[tolower(concat(''sqlaudit'', variables(''locationCode''), - variables(''uniqueStorage'')))]","createStorageAccountDeploymentName":"[concat(''sqlServerAuditingStorageAccount-'', - uniqueString(variables(''locationCode''), parameters(''serverName'')))]"},"resources":[{"apiVersion":"2017-05-10","name":"[variables(''createStorageAccountDeploymentName'')]","type":"Microsoft.Resources/deployments","resourceGroup":"[parameters(''storageAccountsResourceGroup'')]","properties":{"mode":"Incremental","expressionEvaluationOptions":{"scope":"inner"},"parameters":{"location":{"value":"[parameters(''location'')]"},"storageName":{"value":"[variables(''storageName'')]"}},"template":{"$schema":"http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"location":{"type":"string"},"storageName":{"type":"string"}},"resources":[{"type":"Microsoft.Storage/storageAccounts","apiVersion":"2017-10-01","name":"[parameters(''storageName'')]","location":"[parameters(''location'')]","sku":{"name":"Standard_LRS"},"kind":"BlobStorage","tags":{"createdBy":"Azure - Policy - Configure SQL servers to have auditing enabled"},"properties":{"accessTier":"Hot","supportsHttpsTrafficOnly":true}}],"outputs":{"storageAccountEndPoint":{"type":"string","value":"[reference(parameters(''storageName'')).primaryEndpoints.blob]"}}}}},{"name":"[concat(parameters(''serverName''), - ''/Default'')]","type":"Microsoft.Sql/servers/auditingSettings","apiVersion":"2017-03-01-preview","dependsOn":["[resourceId(''Microsoft.Resources/deployments/'', - variables(''createStorageAccountDeploymentName''))]"],"properties":{"state":"Enabled","storageEndpoint":"[reference(variables(''createStorageAccountDeploymentName'')).outputs.storageAccountEndPoint.value]","storageAccountAccessKey":"[listKeys(resourceId(parameters(''storageAccountsResourceGroup''), - ''Microsoft.Storage/storageAccounts'', variables(''storageName'')), ''2017-06-01'').keys[0].value]","retentionDays":"[variables(''retentionDays'')]","storageAccountSubscriptionId":"[subscription().subscriptionId]","isStorageSecondaryKeyInUse":false}}]},"parameters":{"serverName":{"value":"[field(''name'')]"},"auditRetentionDays":{"value":"[parameters(''retentionDays'')]"},"storageAccountsResourceGroup":{"value":"[parameters(''storageAccountsResourceGroup'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f4c68484-132f-41f9-9b6d-3e4b1cb55036","type":"Microsoft.Authorization/policyDefinitions","name":"f4c68484-132f-41f9-9b6d-3e4b1cb55036"}' - headers: - cache-control: - - no-cache - content-length: - - '4930' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f56a3ab2-89d1-44de-ac0d-2ada5962e22a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:07 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''Security Options - Network Access''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''Security Options - - Network Access''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"NetworkAccessRemotelyAccessibleRegistryPaths":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network access: Remotely accessible registry paths","description":"Specifies - which registry paths will be accessible over the network, regardless of the - users or groups listed in the access control list (ACL) of the `winreg` registry - key."}},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network access: Remotely accessible registry paths and sub-paths","description":"Specifies - which registry paths and sub-paths will be accessible over the network, regardless - of the users or groups listed in the access control list (ACL) of the `winreg` - registry key."}},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"type":"String","metadata":{"displayName":"[Deprecated]: - Network access: Shares that can be accessed anonymously","description":"Specifies - which network shares can be accessed by anonymous users. The default configuration - for this policy setting has little effect because all users have to be authenticated - before they can access shared resources on the server."}}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsNetworkAccess","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Network - access: Remotely accessible registry paths;ExpectedValue'', ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPaths''), - '','', ''Network access: Remotely accessible registry paths and sub-paths;ExpectedValue'', - ''='', parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths''), - '','', ''Network access: Shares that can be accessed anonymously;ExpectedValue'', - ''='', parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SecurityOptionsNetworkAccess"},"NetworkAccessRemotelyAccessibleRegistryPaths":{"value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"NetworkAccessRemotelyAccessibleRegistryPaths":{"type":"string"},"NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths":{"type":"string"},"NetworkAccessSharesThatCanBeAccessedAnonymously":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - access: Remotely accessible registry paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},{"name":"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},{"name":"Network - access: Shares that can be accessed anonymously;ExpectedValue","value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Network - access: Remotely accessible registry paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPaths'')]"},{"name":"Network - access: Remotely accessible registry paths and sub-paths;ExpectedValue","value":"[parameters(''NetworkAccessRemotelyAccessibleRegistryPathsAndSubpaths'')]"},{"name":"Network - access: Shares that can be accessed anonymously;ExpectedValue","value":"[parameters(''NetworkAccessSharesThatCanBeAccessedAnonymously'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f56a3ab2-89d1-44de-ac0d-2ada5962e22a","type":"Microsoft.Authorization/policyDefinitions","name":"f56a3ab2-89d1-44de-ac0d-2ada5962e22a"}' - headers: - cache-control: - - no-cache - content-length: - - '9108' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:08 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f6b68e5a-7207-4638-a1fb-47d90404209e'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Web Application Firewall - should be a set mode for Application Gateway and Azure Front Door Service","policyType":"BuiltIn","mode":"Indexed","description":"Mandates - detect or prevent mode to be active on all Web Application Firewall policies - for Azure Front Door and Application Gateway. Web Application Firewall policies - can have a consistent mode configuration across a resource group.","metadata":{"version":"1.0.0-deprecated","category":"Network","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]},"modeRequirement":{"type":"String","metadata":{"displayName":"[Deprecated]: - Mode Requirement","description":"Mode required for all WAF policies"},"allowedValues":["Prevention","Detection"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Network/frontdoorwebapplicationfirewallpolicies"},{"field":"Microsoft.Network/frontdoorWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]},{"allOf":[{"field":"type","equals":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies"},{"field":"Microsoft.Network/applicationGatewayWebApplicationFirewallPolicies/policySettings.mode","notEquals":"[parameters(''modeRequirement'')]"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f6b68e5a-7207-4638-a1fb-47d90404209e","type":"Microsoft.Authorization/policyDefinitions","name":"f6b68e5a-7207-4638-a1fb-47d90404209e"}' - headers: - cache-control: - - no-cache - content-length: - - '1657' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:09 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f6de0be7-9a8a-4b8a-b349-43cf02d22f7c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Internet-facing virtual machines should - be protected with network security groups","policyType":"BuiltIn","mode":"All","description":"Protect - your virtual machines from potential threats by restricting access to them - with network security groups (NSG). Learn more about controlling traffic with - NSGs at https://aka.ms/nsg-doc","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Compute/virtualMachines","Microsoft.ClassicCompute/virtualMachines"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"483f12ed-ae23-447e-a2de-a67a10db4353","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f6de0be7-9a8a-4b8a-b349-43cf02d22f7c","type":"Microsoft.Authorization/policyDefinitions","name":"f6de0be7-9a8a-4b8a-b349-43cf02d22f7c"}' - headers: - cache-control: - - no-cache - content-length: - - '1173' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:11 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f6ec09a3-78bf-4f8f-99dc-6c77182d0f99'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Audit Linux machines that have accounts - without passwords","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines that - have accounts without passwords","metadata":{"category":"Guest Configuration","version":"1.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"PasswordPolicy_msid232","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"PasswordPolicy_msid232","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99","type":"Microsoft.Authorization/policyDefinitions","name":"f6ec09a3-78bf-4f8f-99dc-6c77182d0f99"}' - headers: - cache-control: - - no-cache - content-length: - - '4926' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:12 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f71be03e-e25b-4d0f-b8bc-9b3e309b66c0'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Windows machines should meet requirements - for ''Security Options - Recovery console''","policyType":"BuiltIn","mode":"Indexed","description":"Windows - machines should have the specified Group Policy settings in the category ''Security - Options - Recovery console'' for allowing floppy copy and access to all drives - and folders. This policy requires that the Guest Configuration prerequisites - have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.","metadata":{"category":"Guest - Configuration","version":"2.0.0","requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureBaseline_SecurityOptionsRecoveryconsole","version":"1.*","configurationParameter":{"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":"Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue"}}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"Include - Arc connected servers","description":"By selecting this option, you agree - to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders":{"type":"String","metadata":{"displayName":"Recovery - console: Allow floppy copy and access to all drives and all folders","description":"Specifies - whether to make the Recovery Console SET command available, which allows setting - of recovery console environment variables."}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsRecoveryconsole","existenceCondition":{"allOf":[{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"},{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Recovery - console: Allow floppy copy and access to all drives and all folders;ExpectedValue'', - ''='', parameters(''RecoveryConsoleAllowFloppyCopyAndAccessToAllDrivesAndAllFolders'')))]"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f71be03e-e25b-4d0f-b8bc-9b3e309b66c0","type":"Microsoft.Authorization/policyDefinitions","name":"f71be03e-e25b-4d0f-b8bc-9b3e309b66c0"}' - headers: - cache-control: - - no-cache - content-length: - - '4649' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:13 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f78ccdb4-7bf4-4106-8647-270491d2978a'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Azure Data Factory linked - services should use system-assigned managed identity authentication when it - is supported","policyType":"BuiltIn","mode":"All","description":"Using system-assigned - managed identity when communicating with data stores via linked services avoids - the use of less secured credentials such as passwords or connection strings.","metadata":{"version":"1.0.0-preview","category":"Data - Factory","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DataFactory/factories/linkedservices"},{"field":"Microsoft.DataFactory/factories/linkedservices/type","in":["AzureSqlDatabase","AzureSqlMI","AzureSqlDW","AzureBlobFS","AdlsGen2CosmosStructuredStream","AzureDataLakeStore","AzureDataLakeStoreCosmosStructuredStream","AzureBlobStorage","AzureDatabricks"]},{"anyOf":[{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"User - ID="},{"field":"Microsoft.DataFactory/factories/linkedservices/typeProperties.connectionString","contains":"AccountKey="},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureSqlDW.typeProperties.servicePrincipalKey","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.accountKey","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/AzureStorage.typeProperties.sasUri","exists":"true"},{"field":"Microsoft.DataFactory/factories/linkedservices/Hubspot.typeProperties.accessToken","exists":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f78ccdb4-7bf4-4106-8647-270491d2978a","type":"Microsoft.Authorization/policyDefinitions","name":"f78ccdb4-7bf4-4106-8647-270491d2978a"}' - headers: - cache-control: - - no-cache - content-length: - - '1968' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:15 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f7d52b2d-e161-4dfa-a82b-55e564167385'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Synapse workspaces should use customer-managed - keys to encrypt data at rest","policyType":"BuiltIn","mode":"Indexed","description":"Use - customer-managed keys to control the encryption at rest of the data stored - in Azure Synapse workspaces. Customer-managed keys deliver double encryption - by adding a second layer of encryption on top of the default encryption with - service-managed keys.","metadata":{"version":"1.0.0","category":"Synapse"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Synapse/workspaces"},{"field":"Microsoft.Synapse/workspaces/encryption.cmk.key.name","exists":false}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f7d52b2d-e161-4dfa-a82b-55e564167385","type":"Microsoft.Authorization/policyDefinitions","name":"f7d52b2d-e161-4dfa-a82b-55e564167385"}' - headers: - cache-control: - - no-cache - content-length: - - '1067' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:16 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f8036bd0-c10b-4931-86bb-94a878add855'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs that do not have the specified Windows PowerShell execution policy","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines where Windows PowerShell is not configured - to use the specified PowerShell execution policy. For more information on - Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"WindowsPowerShellExecutionPolicy","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8036bd0-c10b-4931-86bb-94a878add855","type":"Microsoft.Authorization/policyDefinitions","name":"f8036bd0-c10b-4931-86bb-94a878add855"}' - headers: - cache-control: - - no-cache - content-length: - - '3262' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:18 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f8456c1c-aa66-4dfb-861a-25d127b775c9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"External accounts with owner permissions - should be removed from your subscription","policyType":"BuiltIn","mode":"All","description":"External - accounts with owner permissions should be removed from your subscription in - order to prevent unmonitored access.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"c3b6ae71-f1f0-31b4-e6c1-d5951285d03d","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8456c1c-aa66-4dfb-861a-25d127b775c9","type":"Microsoft.Authorization/policyDefinitions","name":"f8456c1c-aa66-4dfb-861a-25d127b775c9"}' - headers: - cache-control: - - no-cache - content-length: - - '1062' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:20 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f8b0158d-4766-490f-bea0-259e52dba473'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - audit Windows VMs configurations in ''System Audit Policies - System''","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a Guest Configuration assignment to audit Windows virtual machines - with non-compliant settings in Group Policy category: ''System Audit Policies - - System''. It also creates a system-assigned managed identity and deploys - the VM extension for Guest Configuration. This policy should only be used - along with its corresponding audit policy in an initiative. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.2.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"parameters":{"AuditOtherSystemEvents":{"type":"String","metadata":{"displayName":"[Deprecated]: - Audit Other System Events","description":"Specifies whether audit events are - generated for Windows Firewall Service and Windows Firewall driver start and - stop events, failure events for these services and Windows Firewall Service - policy processing failures."},"allowedValues":["No Auditing","Success","Failure","Success - and Failure"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SystemAuditPoliciesSystem","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash","equals":"[base64(concat(''Audit - Other System Events;ExpectedValue'', ''='', parameters(''AuditOtherSystemEvents'')))]"},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"},"type":{"value":"[field(''type'')]"},"configurationName":{"value":"AzureBaseline_SystemAuditPoliciesSystem"},"AuditOtherSystemEvents":{"value":"[parameters(''AuditOtherSystemEvents'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"},"type":{"type":"string"},"configurationName":{"type":"string"},"AuditOtherSystemEvents":{"type":"string"}},"resources":[{"condition":"[equals(toLower(parameters(''type'')), - toLower(''microsoft.hybridcompute/machines''))]","apiVersion":"2018-11-20","type":"Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Other System Events;ExpectedValue","value":"[parameters(''AuditOtherSystemEvents'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2018-11-20","type":"Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments","name":"[concat(parameters(''vmName''), - ''/Microsoft.GuestConfiguration/'', parameters(''configurationName''))]","location":"[parameters(''location'')]","properties":{"guestConfiguration":{"name":"[parameters(''configurationName'')]","version":"1.*","configurationParameter":[{"name":"Audit - Other System Events;ExpectedValue","value":"[parameters(''AuditOtherSystemEvents'')]"}]}}},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"condition":"[equals(toLower(parameters(''type'')), - toLower(''Microsoft.Compute/virtualMachines''))]","apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforWindows'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforWindows","typeHandlerVersion":"1.1","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}},"dependsOn":["[concat(''Microsoft.Compute/virtualMachines/'',parameters(''vmName''),''/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/'',parameters(''configurationName''))]"]}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8b0158d-4766-490f-bea0-259e52dba473","type":"Microsoft.Authorization/policyDefinitions","name":"f8b0158d-4766-490f-bea0-259e52dba473"}' - headers: - cache-control: - - no-cache - content-length: - - '6783' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:21 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f8d36e2f-389b-4ee4-898d-21aeb69a0f45'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:22 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Service Bus should be - enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit enabling - of resource logs. This enables you to recreate activity trails to use for - investigation purposes; when a security incident occurs or when your network - is compromised","metadata":{"version":"4.0.1","category":"Service Bus"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.ServiceBus/namespaces"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8d36e2f-389b-4ee4-898d-21aeb69a0f45","type":"Microsoft.Authorization/policyDefinitions","name":"f8d36e2f-389b-4ee4-898d-21aeb69a0f45"}' - headers: - cache-control: - - no-cache - content-length: - - '1939' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:23 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f8f774be-6aee-492a-9e29-486ef81f3a68'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Azure Event Grid domains should disable - public network access","policyType":"BuiltIn","mode":"Indexed","description":"Disabling - public network access improves security by ensuring that the resource isn''t - exposed on the public internet. You can limit exposure of your resources by - creating private endpoints instead. Learn more at: https://aka.ms/privateendpoints.","metadata":{"version":"1.0.0","category":"Event - Grid"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.EventGrid/domains"},{"field":"Microsoft.EventGrid/domains/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f8f774be-6aee-492a-9e29-486ef81f3a68","type":"Microsoft.Authorization/policyDefinitions","name":"f8f774be-6aee-492a-9e29-486ef81f3a68"}' - headers: - cache-control: - - no-cache - content-length: - - '1043' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:24 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f9be5368-9bf5-4b84-9e0a-7850da98bb46'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Resource logs in Azure Stream Analytics - should be enabled","policyType":"BuiltIn","mode":"Indexed","description":"Audit - enabling of resource logs. This enables you to recreate activity trails to - use for investigation purposes; when a security incident occurs or when your - network is compromised","metadata":{"version":"4.0.1","category":"Stream Analytics"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]},"requiredRetentionDays":{"type":"String","metadata":{"displayName":"Required - retention (days)","description":"The required resource logs retention in days"}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.StreamAnalytics/streamingJobs"},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Insights/diagnosticSettings","existenceCondition":{"count":{"field":"Microsoft.Insights/diagnosticSettings/logs[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","equals":"0"},{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.days","greaterOrEquals":"[parameters(''requiredRetentionDays'')]"}]},{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"}]},{"allOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs.enabled","equals":"true"},{"anyOf":[{"field":"Microsoft.Insights/diagnosticSettings/logs[*].retentionPolicy.enabled","notEquals":"true"},{"field":"Microsoft.Insights/diagnosticSettings/storageAccountId","exists":false}]}]}]}},"greaterOrEquals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9be5368-9bf5-4b84-9e0a-7850da98bb46","type":"Microsoft.Authorization/policyDefinitions","name":"f9be5368-9bf5-4b84-9e0a-7850da98bb46"}' - headers: - cache-control: - - no-cache - content-length: - - '1963' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:26 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''f9d614c5-c173-4d56-95a7-b4437057d193'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Latest TLS version should be used in - your Function App","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - to the latest TLS version","metadata":{"version":"1.0.0","category":"App Service"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Web/sites"},{"field":"kind","like":"functionapp*"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Web/sites/config","name":"web","existenceCondition":{"field":"Microsoft.Web/sites/config/minTlsVersion","equals":"1.2"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/f9d614c5-c173-4d56-95a7-b4437057d193","type":"Microsoft.Authorization/policyDefinitions","name":"f9d614c5-c173-4d56-95a7-b4437057d193"}' - headers: - cache-control: - - no-cache - content-length: - - '927' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:28 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fa298e57-9444-42ba-bf04-86e8470e32c7'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Saved-queries in Azure Monitor should - be saved in customer storage account for logs encryption","policyType":"BuiltIn","mode":"Indexed","description":"Link - storage account to Log Analytics workspace to protect saved-queries with storage - account encryption. Customer-managed keys are commonly required to meet regulatory - compliance and for more control over the access to your saved-queries in Azure - Monitor. For more details on the above, see https://docs.microsoft.com/azure/azure-monitor/platform/customer-managed-keys?tabs=portal#customer-managed-key-for-saved-queries.","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["audit","deny","disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.OperationalInsights/workspaces"},{"not":{"field":"Microsoft.OperationalInsights/workspaces/forceCmkForQuery","equals":"true"}}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fa298e57-9444-42ba-bf04-86e8470e32c7","type":"Microsoft.Authorization/policyDefinitions","name":"fa298e57-9444-42ba-bf04-86e8470e32c7"}' - headers: - cache-control: - - no-cache - content-length: - - '1308' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:29 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''faf25c8c-9598-4305-b4de-0aee1317fb31'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Audit Linux virtual machines - on which the Linux Guest Configuration extension is not enabled","policyType":"BuiltIn","mode":"Indexed","description":"This - policy audits Linux virtual machines hosted in Azure that are supported by - Guest Configuration but do not have the Guest Configuration extension enabled. - For more information on Guest Configuration, visit https://aka.ms/gcpol.","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Deprecated]: - Effect","description":"Enable or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/faf25c8c-9598-4305-b4de-0aee1317fb31","type":"Microsoft.Authorization/policyDefinitions","name":"faf25c8c-9598-4305-b4de-0aee1317fb31"}' - headers: - cache-control: - - no-cache - content-length: - - '4670' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:31 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:32 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Deploy prerequisites to - enable Guest Configuration Policy on Linux VMs.","policyType":"BuiltIn","mode":"Indexed","description":"This - policy creates a system-assigned managed identity and deploys the VM extension - for Guest Configuration on Linux VMs. This is a prerequisite for Guest Configuration - Policy and must be assigned to the scope before using any Guest Configuration - policy. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol.","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","requiredProviders":["Microsoft.GuestConfiguration"],"deprecated":true},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},"then":{"effect":"deployIfNotExists","details":{"roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"type":"Microsoft.Compute/virtualMachines/extensions","name":"AzurePolicyforLinux","existenceCondition":{"allOf":[{"field":"Microsoft.Compute/virtualMachines/extensions/publisher","equals":"Microsoft.GuestConfiguration"},{"field":"Microsoft.Compute/virtualMachines/extensions/type","equals":"ConfigurationforLinux"},{"field":"Microsoft.Compute/virtualMachines/extensions/provisioningState","equals":"Succeeded"}]},"deployment":{"properties":{"mode":"incremental","parameters":{"vmName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}},"template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"vmName":{"type":"string"},"location":{"type":"string"}},"resources":[{"apiVersion":"2019-07-01","type":"Microsoft.Compute/virtualMachines","identity":{"type":"SystemAssigned"},"name":"[parameters(''vmName'')]","location":"[parameters(''location'')]"},{"apiVersion":"2019-07-01","name":"[concat(parameters(''vmName''), - ''/AzurePolicyforLinux'')]","type":"Microsoft.Compute/virtualMachines/extensions","location":"[parameters(''location'')]","properties":{"publisher":"Microsoft.GuestConfiguration","type":"ConfigurationforLinux","typeHandlerVersion":"1.0","autoUpgradeMinorVersion":true,"settings":{},"protectedSettings":{}}}]}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50","type":"Microsoft.Authorization/policyDefinitions","name":"fb27e9e0-526e-4ae1-89f2-a2a0bf0f8a50"}' - headers: - cache-control: - - no-cache - content-length: - - '5628' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:33 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fb893a29-21bb-418c-a157-e99480ec364c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Kubernetes Services should be upgraded - to a non-vulnerable Kubernetes version","policyType":"BuiltIn","mode":"Indexed","description":"Upgrade - your Kubernetes service cluster to a later Kubernetes version to protect against - known vulnerabilities in your current Kubernetes version. Vulnerability CVE-2019-9946 - has been patched in Kubernetes versions 1.11.9+, 1.12.7+, 1.13.5+, and 1.14.0+","metadata":{"version":"1.0.2","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.ContainerService/managedClusters"},{"anyOf":[{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.13.4","1.13.3","1.13.2","1.13.1","1.13.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.12.6","1.12.5","1.12.4","1.12.3","1.12.2","1.12.1","1.12.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","in":["1.11.8","1.11.7","1.11.6","1.11.5","1.11.4","1.11.3","1.11.2","1.11.1","1.11.0"]},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.10.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.9.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.8.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.7.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.6.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.5.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.4.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.3.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.2.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.1.*"},{"field":"Microsoft.ContainerService/managedClusters/kubernetesVersion","Like":"1.0.*"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fb893a29-21bb-418c-a157-e99480ec364c","type":"Microsoft.Authorization/policyDefinitions","name":"fb893a29-21bb-418c-a157-e99480ec364c"}' - headers: - cache-control: - - no-cache - content-length: - - '2407' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:34 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fbb99e8e-e444-4da0-9ff1-75c92f5a85b2'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Storage account containing the container - with activity logs must be encrypted with BYOK","policyType":"BuiltIn","mode":"All","description":"This - policy audits if the Storage account containing the container with activity - logs is encrypted with BYOK. The policy works only if the storage account - lies on the same subscription as activity logs by design. More information - on Azure Storage encryption at rest can be found here https://aka.ms/azurestoragebyok. - ","metadata":{"version":"1.0.0","category":"Monitoring"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Insights/logProfiles"},{"field":"Microsoft.Insights/logProfiles/storageAccountId","exists":"true"}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Storage/storageAccounts","existenceScope":"subscription","existenceCondition":{"allOf":[{"value":"[contains(field(''Microsoft.Insights/logProfiles/storageAccountId''), - subscription().Id)]","equals":"true"},{"field":"name","equals":"[last(split(field(''Microsoft.Insights/logProfiles/storageAccountId''),''/''))]"},{"field":"Microsoft.Storage/storageAccounts/encryption.keySource","equals":"Microsoft.Keyvault"}]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fbb99e8e-e444-4da0-9ff1-75c92f5a85b2","type":"Microsoft.Authorization/policyDefinitions","name":"fbb99e8e-e444-4da0-9ff1-75c92f5a85b2"}' - headers: - cache-control: - - no-cache - content-length: - - '1574' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:35 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fbc14a67-53e4-4932-abcc-2049c6706009'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Configure Azure Cognitive Search services - to use private DNS zones","policyType":"BuiltIn","mode":"Indexed","description":"Use - private DNS zones to override the DNS resolution for a private endpoint. A - private DNS zone links to your virtual network to resolve to your Azure Cognitive - Search service. Learn more at: https://aka.ms/azure-cognitive-search/inbound-private-endpoints.","metadata":{"category":"Search","version":"1.0.0"},"parameters":{"privateDnsZoneId":{"type":"String","metadata":{"displayName":"Private - DNS zone ID","description":"Specifies the private DNS zone to use to configure - private endpoint","strongType":"Microsoft.Network/privateDnsZones"}},"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["DeployIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/privateEndpoints"},{"count":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","where":{"field":"Microsoft.Network/privateEndpoints/privateLinkServiceConnections[*].groupIds[*]","equals":"searchService"}},"greaterOrEquals":1}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","roleDefinitionIds":["/providers/Microsoft.Authorization/roleDefinitions/4d97b98b-1d4f-4787-a291-c67834d212e7"],"deployment":{"properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"privateDnsZoneId":{"type":"string"},"privateEndpointName":{"type":"string"},"location":{"type":"string"}},"resources":[{"name":"[concat(parameters(''privateEndpointName''), - ''/deployedByPolicy'')]","type":"Microsoft.Network/privateEndpoints/privateDnsZoneGroups","apiVersion":"2020-03-01","location":"[parameters(''location'')]","properties":{"privateDnsZoneConfigs":[{"name":"searchService-privateDnsZone","properties":{"privateDnsZoneId":"[parameters(''privateDnsZoneId'')]"}}]}}]},"parameters":{"privateDnsZoneId":{"value":"[parameters(''privateDnsZoneId'')]"},"privateEndpointName":{"value":"[field(''name'')]"},"location":{"value":"[field(''location'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fbc14a67-53e4-4932-abcc-2049c6706009","type":"Microsoft.Authorization/policyDefinitions","name":"fbc14a67-53e4-4932-abcc-2049c6706009"}' - headers: - cache-control: - - no-cache - content-length: - - '2484' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:37 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fc4d8e41-e223-45ea-9bf5-eada37891d87'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Virtual machines and virtual machine - scale sets should have encryption at host enabled","policyType":"BuiltIn","mode":"Indexed","description":"Use - encryption at host to get end-to-end encryption for your virtual machine and - virtual machine scale set data. Encryption at host enables encryption at rest - for your temporary disk and OS/data disk caches. Temporary and ephemeral OS - disks are encrypted with platform-managed keys when encryption at host is - enabled. OS/data disk caches are encrypted at rest with either customer-managed - or platform-managed key, depending on the encryption type selected on the - disk. Learn more at https://aka.ms/vm-hbe.","metadata":{"category":"Compute","version":"1.0.0"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"field":"Microsoft.Compute/virtualMachines/securityProfile.encryptionAtHost","notEquals":"true"}]},{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachineScaleSets"},{"field":"Microsoft.Compute/virtualMachineScaleSets/virtualMachineProfile.securityProfile.encryptionAtHost","notEquals":"true"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fc4d8e41-e223-45ea-9bf5-eada37891d87","type":"Microsoft.Authorization/policyDefinitions","name":"fc4d8e41-e223-45ea-9bf5-eada37891d87"}' - headers: - cache-control: - - no-cache - content-length: - - '1568' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:38 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fc5e4038-4584-4632-8c85-c0448d374b2c'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: All Internet traffic should - be routed via your deployed Azure Firewall","policyType":"BuiltIn","mode":"All","description":"Azure - Security Center has identified that some of your subnets aren''t protected - with a next generation firewall. Protect your subnets from potential threats - by restricting access to them with Azure Firewall or a supported next generation - firewall","metadata":{"version":"3.0.0-preview","category":"Network","preview":true},"parameters":{"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable All Internet traffic should be routed - via your deployed Azure Firewall"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.Network/virtualNetworks"},{"count":{"field":"Microsoft.Network/virtualNetworks/subnets[*]","where":{"allOf":[{"count":{"field":"Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*]","where":{"value":"[empty(field(''Microsoft.Network/virtualNetworks/subnets[*].ipConfigurations[*].id''))]","equals":false}},"greaterOrEquals":2},{"field":"Microsoft.Network/virtualNetworks/subnets[*].routeTable","exists":false},{"not":{"anyOf":[{"field":"Microsoft.Network/virtualNetworks/subnets[*].name","equals":"AzureBastionSubnet"},{"field":"Microsoft.Network/virtualNetworks/subnets[*].name","equals":"GatewaySubnet"}]}}]}},"greater":0}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Network/azureFirewalls","existenceCondition":{"count":{"field":"Microsoft.Network/azureFirewalls/ipConfigurations[*]","where":{"field":"Microsoft.Network/azureFirewalls/ipConfigurations[*].subnet.id","like":"[concat(''/subscriptions/'', - subscription().subscriptionId, ''/resourceGroups/*/providers/Microsoft.Network/virtualNetworks/'', - first(split(field(''fullName''), ''/'')), ''/subnets/AzureFirewallSubnet'')]"}},"equals":1}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fc5e4038-4584-4632-8c85-c0448d374b2c","type":"Microsoft.Authorization/policyDefinitions","name":"fc5e4038-4584-4632-8c85-c0448d374b2c"}' - headers: - cache-control: - - no-cache - content-length: - - '2118' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:40 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fc9b3da7-8347-4380-8e70-0a0361d8dedd'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Preview]: Linux machines should meet - requirements for the Azure security baseline","policyType":"BuiltIn","mode":"Indexed","description":"Requires - that prerequisites are deployed to the policy assignment scope. For details, - visit https://aka.ms/gcpol. Machines are non-compliant if Linux machines should - meet the requirements for the Azure security baseline","metadata":{"category":"Guest - Configuration","version":"1.1.0-preview","preview":true,"requiredProviders":["Microsoft.GuestConfiguration"],"guestConfiguration":{"name":"AzureLinuxBaseline","version":"1.*"}},"parameters":{"IncludeArcMachines":{"type":"String","metadata":{"displayName":"[Preview]: - Include Arc connected servers","description":"By selecting this option, you - agree to be charged monthly per Arc connected machine."},"allowedValues":["true","false"]},"effect":{"type":"String","metadata":{"displayName":"[Preview]: - Effect","description":"Enable or disable the execution of this policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"value":"[parameters(''IncludeArcMachines'')]","equals":"true"},{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureLinuxBaseline","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fc9b3da7-8347-4380-8e70-0a0361d8dedd","type":"Microsoft.Authorization/policyDefinitions","name":"fc9b3da7-8347-4380-8e70-0a0361d8dedd"}' - headers: - cache-control: - - no-cache - content-length: - - '5012' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:41 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fcbc55c9-f25a-4e55-a6cb-33acb3be778b'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:42 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Windows VMs configurations in ''Security Options - Microsoft Network Client''","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Windows virtual machines with non-compliant settings in Group Policy - category: ''Security Options - Microsoft Network Client''. For more information - on Guest Configuration policies, please visit https://aka.ms/gcpol","metadata":{"version":"1.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["esri","incredibuild","MicrosoftDynamicsAX","MicrosoftSharepoint","MicrosoftVisualStudio","MicrosoftWindowsDesktop","MicrosoftWindowsServerHPCPack"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftWindowsServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"MicrosoftSQLServer"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","equals":"dsvm-windows"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","in":["standard-data-science-vm","windows-data-science-vm"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"batch"},{"field":"Microsoft.Compute/imageOffer","equals":"rendering-windows2016"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","like":"cis-windows-server-201*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"pivotal"},{"field":"Microsoft.Compute/imageOffer","like":"bosh-windows-server*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloud-infrastructure-services"},{"field":"Microsoft.Compute/imageOffer","like":"ad*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Windows*"}]},{"anyOf":[{"field":"Microsoft.Compute/imageSKU","exists":"false"},{"allOf":[{"field":"Microsoft.Compute/imageSKU","notLike":"2008*"},{"field":"Microsoft.Compute/imageOffer","notLike":"SQL2008*"}]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"windows*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"AzureBaseline_SecurityOptionsMicrosoftNetworkClient","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fcbc55c9-f25a-4e55-a6cb-33acb3be778b","type":"Microsoft.Authorization/policyDefinitions","name":"fcbc55c9-f25a-4e55-a6cb-33acb3be778b"}' - headers: - cache-control: - - no-cache - content-length: - - '3286' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:43 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fdccbe47-f3e3-4213-ad5d-ea459b2fa077'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Public network access should be disabled - for MariaDB servers","policyType":"BuiltIn","mode":"Indexed","description":"Disable - the public network access property to improve security and ensure your Azure - Database for MariaDB can only be accessed from a private endpoint. This configuration - strictly disables access from any public address space outside of Azure IP - range, and denies all logins that match IP or virtual network-based firewall - rules.","metadata":{"version":"1.0.2","category":"SQL"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["Audit","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.DBforMariaDB/servers"},{"field":"Microsoft.DBforMariaDB/servers/publicNetworkAccess","notEquals":"Disabled"}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fdccbe47-f3e3-4213-ad5d-ea459b2fa077","type":"Microsoft.Authorization/policyDefinitions","name":"fdccbe47-f3e3-4213-ad5d-ea459b2fa077"}' - headers: - cache-control: - - no-cache - content-length: - - '1118' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:44 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fe3fd216-4f83-4fc1-8984-2bbec80a3418'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:46 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Cognitive Services accounts should use - a managed identity","policyType":"BuiltIn","mode":"Indexed","description":"Assigning - a managed identity to your Cognitive Service account helps ensure secure authentication. - This identity is used by this Cognitive service account to communicate with - other Azure services, like Azure Key Vault, in a secure way without you having - to manage any credentials.","metadata":{"version":"1.0.0","category":"Cognitive - Services"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"The - effect determines what happens when the policy rule is evaluated to match"},"allowedValues":["Audit","Deny","Disabled"]}},"policyRule":{"if":{"allOf":[{"field":"type","equals":"Microsoft.CognitiveServices/accounts"},{"anyOf":[{"field":"identity.type","exists":"false"},{"field":"identity.type","equals":"None"}]}]},"then":{"effect":"[parameters(''effect'')]"}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fe3fd216-4f83-4fc1-8984-2bbec80a3418","type":"Microsoft.Authorization/policyDefinitions","name":"fe3fd216-4f83-4fc1-8984-2bbec80a3418"}' - headers: - cache-control: - - no-cache - content-length: - - '1137' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''fee5cb2b-9d9b-410e-afe3-2902d90d0004'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:47 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"[Deprecated]: Show audit results from - Linux VMs that do not have the specified applications installed","policyType":"BuiltIn","mode":"All","description":"This - policy should only be used along with its corresponding deploy policy in an - initiative. This definition allows Azure Policy to process the results of - auditing Linux virtual machines that do not have the specified applications - installed. For more information on Guest Configuration policies, please visit - https://aka.ms/gcpol","metadata":{"version":"3.0.0-deprecated","category":"Guest - Configuration","deprecated":true},"policyRule":{"if":{"anyOf":[{"allOf":[{"field":"type","equals":"Microsoft.Compute/virtualMachines"},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","in":["microsoft-aks","qubole-inc","datastax","couchbase","scalegrid","checkpoint","paloaltonetworks","debian"]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"OpenLogic"},{"field":"Microsoft.Compute/imageOffer","like":"CentOS*"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Oracle"},{"field":"Microsoft.Compute/imageOffer","equals":"Oracle-Linux"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["RHEL","RHEL-HA","RHEL-SAP","RHEL-SAP-APPS","RHEL-SAP-HA","RHEL-SAP-HANA"]},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"RedHat"},{"field":"Microsoft.Compute/imageOffer","in":["osa","rhel-byos"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"center-for-internet-security-inc"},{"field":"Microsoft.Compute/imageOffer","in":["cis-centos-7-l1","cis-centos-7-v2-1-1-l1","cis-centos-8-l1","cis-debian-linux-8-l1","cis-debian-linux-9-l1","cis-nginx-centos-7-v1-1-0-l1","cis-oracle-linux-7-v2-0-0-l1","cis-oracle-linux-8-l1","cis-postgresql-11-centos-linux-7-level-1","cis-rhel-7-l2","cis-rhel-7-v2-2-0-l1","cis-rhel-8-l1","cis-suse-linux-12-v2-0-0-l1","cis-ubuntu-linux-1604-v1-0-0-l1","cis-ubuntu-linux-1804-l1"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"credativ"},{"field":"Microsoft.Compute/imageOffer","equals":"Debian"},{"field":"Microsoft.Compute/imageSKU","notLike":"7*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Suse"},{"field":"Microsoft.Compute/imageOffer","like":"SLES*"},{"field":"Microsoft.Compute/imageSKU","notLike":"11*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"Canonical"},{"field":"Microsoft.Compute/imageOffer","equals":"UbuntuServer"},{"field":"Microsoft.Compute/imageSKU","notLike":"12*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-dsvm"},{"field":"Microsoft.Compute/imageOffer","in":["linux-data-science-vm-ubuntu","azureml"]}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-centos-os"},{"field":"Microsoft.Compute/imageSKU","notLike":"6*"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"cloudera"},{"field":"Microsoft.Compute/imageOffer","equals":"cloudera-altus-centos-os"}]},{"allOf":[{"field":"Microsoft.Compute/imagePublisher","equals":"microsoft-ads"},{"field":"Microsoft.Compute/imageOffer","like":"linux*"}]},{"allOf":[{"anyOf":[{"field":"Microsoft.Compute/virtualMachines/osProfile.linuxConfiguration","exists":"true"},{"field":"Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType","like":"Linux*"}]},{"anyOf":[{"field":"Microsoft.Compute/imagePublisher","exists":"false"},{"field":"Microsoft.Compute/imagePublisher","notIn":["OpenLogic","RedHat","credativ","Suse","Canonical","microsoft-dsvm","cloudera","microsoft-ads","center-for-internet-security-inc","Oracle"]}]}]}]}]},{"allOf":[{"field":"type","equals":"Microsoft.HybridCompute/machines"},{"field":"Microsoft.HybridCompute/imageOffer","like":"linux*"}]}]},"then":{"effect":"auditIfNotExists","details":{"type":"Microsoft.GuestConfiguration/guestConfigurationAssignments","name":"installed_application_linux","existenceCondition":{"field":"Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus","equals":"Compliant"}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/fee5cb2b-9d9b-410e-afe3-2902d90d0004","type":"Microsoft.Authorization/policyDefinitions","name":"fee5cb2b-9d9b-410e-afe3-2902d90d0004"}' - headers: - cache-control: - - no-cache - content-length: - - '4520' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:48 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''feedbf84-6b99-488c-acc2-71c829aa5ffc'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Vulnerabilities on your SQL databases - should be remediated","policyType":"BuiltIn","mode":"Indexed","description":"Monitor - Vulnerability Assessment scan results and recommendations for how to remediate - database vulnerabilities.","metadata":{"version":"4.0.0","category":"Security - Center"},"parameters":{"effect":{"type":"String","metadata":{"displayName":"Effect","description":"Enable - or disable the execution of the policy"},"allowedValues":["AuditIfNotExists","Disabled"]}},"policyRule":{"if":{"field":"type","in":["Microsoft.Sql/servers","Microsoft.Sql/managedinstances"]},"then":{"effect":"[parameters(''effect'')]","details":{"type":"Microsoft.Security/assessments","name":"82e20e14-edc5-4373-bfc4-f13121257c37","existenceCondition":{"field":"Microsoft.Security/assessments/status.code","in":["NotApplicable","Healthy"]}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/feedbf84-6b99-488c-acc2-71c829aa5ffc","type":"Microsoft.Authorization/policyDefinitions","name":"feedbf84-6b99-488c-acc2-71c829aa5ffc"}' - headers: - cache-control: - - no-cache - content-length: - - '1053' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:49 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9?api-version=2016-12-01 - response: - body: - string: '{"error":{"code":"PolicyDefinitionNotFound","message":"The policy definition - ''ffb6f416-7bd2-4488-8828-56585fef2be9'' could not be found."}}' - headers: - cache-control: - - no-store, no-cache - content-length: - - '138' - content-type: - - application/json - date: - - Mon, 19 Apr 2021 09:52:50 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - status: - code: 404 - message: Not Found -- request: - body: null - headers: - Accept: - - application/json, text/json - Accept-Encoding: - - gzip, deflate - CommandName: - - policy definition show - Connection: - - keep-alive - ParameterSetName: - - -n - User-Agent: - - AZURECLI/2.21.0 azsdk-python-azure-mgmt-resource/16.0.0 Python/3.8.0 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9?api-version=2016-12-01 - response: - body: - string: '{"properties":{"displayName":"Deploy export to Log Analytics workspace - for Azure Security Center data","policyType":"BuiltIn","mode":"All","description":"Enable - export to Log Analytics workspace of Azure Security Center data. This policy - deploys an export to Log Analytics workspace configuration with your conditions - and target workspace on the assigned scope. To deploy this policy on newly - created subscriptions, open the Compliance tab, select the relevant non-compliant - assignment and create a remediation task.","metadata":{"version":"3.0.0","category":"Security - Center"},"parameters":{"resourceGroupName":{"type":"String","metadata":{"displayName":"Resource - group name","description":"The resource group name where the export to Log - Analytics workspace configuration is created. If you enter a name for a resource - group that doesn''t exist, it''ll be created in the subscription. Note that - each resource group can only have one export to Log Analytics workspace configured."}},"resourceGroupLocation":{"type":"String","metadata":{"displayName":"Resource - group location","description":"The location where the resource group and the - export to Log Analytics workspace configuration are created.","strongType":"location"}},"exportedDataTypes":{"type":"Array","metadata":{"displayName":"Exported - data types","description":"The data types to be exported. To export a snapshot - (preview) of the data once a week, choose the data types which contains ''snapshot'', - other data types will be sent in real-time streaming."},"allowedValues":["Security - recommendations","Security alerts","Overall secure score","Secure score controls","Regulatory - compliance","Overall secure score - snapshot","Secure score controls - snapshot","Regulatory - compliance - snapshot"]},"recommendationNames":{"type":"Array","metadata":{"displayName":"Recommendation - IDs","description":"Applicable only for export of security recommendations. - To export all recommendations, leave this empty. To export specific recommendations, - enter a list of recommendation IDs separated by semicolons ('';''). Recommendation - IDs are available through the Assessments API (https://docs.microsoft.com/rest/api/securitycenter/assessments), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/assessments."}},"recommendationSeverities":{"type":"Array","metadata":{"displayName":"Recommendation - severities","description":"Applicable only for export of security recommendations. - Determines recommendation severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"isSecurityFindingsEnabled":{"type":"Boolean","metadata":{"displayName":"Include - security findings","description":"Security findings are results from vulnerability - assessment solutions, and can be thought of as ''sub'' recommendations grouped - into a ''parent'' recommendation."},"allowedValues":[true,false]},"secureScoreControlsNames":{"type":"Array","metadata":{"displayName":"Secure - Score Controls IDs","description":"Applicable only for export of secure score - controls. To export all secure score controls, leave this empty. To export - specific secure score controls, enter a list of secure score controls IDs - separated by semicolons ('';''). Secure score controls IDs are available through - the Secure score controls API (https://docs.microsoft.com/rest/api/securitycenter/securescorecontrols), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/securescores/securescorecontrols."}},"alertSeverities":{"type":"Array","metadata":{"displayName":"Alert - severities","description":"Applicable only for export of security alerts. - Determines alert severities. Example: High;Medium;Low;"},"allowedValues":["High","Medium","Low"]},"regulatoryComplianceStandardsNames":{"type":"Array","metadata":{"displayName":"Regulatory - compliance standards names","description":"Applicable only for export of regulatory - compliance. To export all regulatory compliance, leave this empty. To export - specific regulatory compliance standards, enter a list of these standards - names separated by semicolons ('';''). Regulatory compliance standards names - are available through the regulatory compliance standards API (https://docs.microsoft.com/rest/api/securitycenter/regulatorycompliancestandards), - or Azure Resource Graph Explorer, choose securityresources and microsoft.security/regulatorycompliancestandards."}},"workspaceResourceId":{"type":"String","metadata":{"displayName":"Log - Analytics workspace","description":"The Log Analytics workspace of where the - data should be exported to.","strongType":"Microsoft.OperationalInsights/workspaces","assignPermissions":true}}},"policyRule":{"if":{"field":"type","equals":"Microsoft.Resources/subscriptions"},"then":{"effect":"deployIfNotExists","details":{"type":"Microsoft.Security/automations","name":"ExportToWorkspace","existenceScope":"resourcegroup","ResourceGroupName":"[parameters(''resourceGroupName'')]","deploymentScope":"subscription","roleDefinitionIds":["/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"],"existenceCondition":{"allOf":[{"field":"Microsoft.Security/automations/isEnabled","equals":true},{"count":{"field":"Microsoft.Security/automations/sources[*]"},"equals":"[if(parameters(''isSecurityFindingsEnabled''),add(length(parameters(''exportedDataTypes'')),1),length(parameters(''exportedDataTypes'')))]"},{"count":{"value":"[parameters(''exportedDataTypes'')]","name":"dataType","where":{"count":{"field":"Microsoft.Security/automations/sources[*]","where":{"anyOf":[{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Assessments"},{"value":"[current(''dataType'')]","equals":"Security - recommendations"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"Alerts"},{"value":"[current(''dataType'')]","equals":"Security - alerts"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScores"},{"value":"[current(''dataType'')]","equals":"Overall - secure score"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoreControls"},{"value":"[current(''dataType'')]","equals":"Secure - score controls"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"RegulatoryComplianceAssessment"},{"value":"[current(''dataType'')]","equals":"Regulatory - compliance"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoresSnapshot"},{"value":"[current(''dataType'')]","equals":"Overall - secure score - snapshot"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"SecureScoreControlsSnapshot"},{"value":"[current(''dataType'')]","equals":"Secure - score controls - snapshot"}]},{"allOf":[{"field":"Microsoft.Security/automations/sources[*].eventSource","equals":"RegulatoryComplianceAssessmentSnapshot"},{"value":"[current(''dataType'')]","equals":"Regulatory - compliance - snapshot"}]}]}},"equals":1}},"equals":"[length(parameters(''exportedDataTypes''))]"}]},"deployment":{"location":"westeurope","properties":{"mode":"incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2018-05-01/subscriptionDeploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{"resourceGroupName":{"type":"string"},"resourceGroupLocation":{"type":"string"},"exportedDataTypes":{"type":"array"},"isSecurityFindingsEnabled":{"type":"bool"},"recommendationNames":{"type":"array"},"recommendationSeverities":{"type":"array"},"alertSeverities":{"type":"array"},"secureScoreControlsNames":{"type":"array"},"regulatoryComplianceStandardsNames":{"type":"array"},"workspaceResourceId":{"type":"string"},"guidValue":{"type":"string","defaultValue":"[newGuid()]"}},"variables":{"scopeDescription":"scope - for subscription {0}","subAssessmentRuleExpectedValue":"/assessments/{0}/","recommendationNamesLength":"[length(parameters(''recommendationNames''))]","secureScoreControlsNamesLength":"[length(parameters(''secureScoreControlsNames''))]","secureScoreControlsLengthIfEmpty":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), 1, variables(''secureScoreControlsNamesLength''))]","regulatoryComplianceStandardsNamesLength":"[length(parameters(''regulatoryComplianceStandardsNames''))]","regulatoryComplianceStandardsNamesLengthIfEmpty":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), 1, variables(''regulatoryComplianceStandardsNamesLength''))]","recommendationSeveritiesLength":"[length(parameters(''recommendationSeverities''))]","alertSeveritiesLength":"[length(parameters(''alertSeverities''))]","recommendationNamesLengthIfEmpty":"[if(equals(variables(''recommendationNamesLength''), - 0), 1, variables(''recommendationNamesLength''))]","recommendationSeveritiesLengthIfEmpty":"[if(equals(variables(''recommendationSeveritiesLength''), - 0), 1, variables(''recommendationSeveritiesLength''))]","alertSeveritiesLengthIfEmpty":"[if(equals(variables(''alertSeveritiesLength''), - 0), 1, variables(''alertSeveritiesLength''))]","totalRuleCombinationsForOneRecommendationName":"[variables(''recommendationSeveritiesLengthIfEmpty'')]","totalRuleCombinationsForOneRecommendationSeverity":1,"exportedDataTypesLength":"[length(parameters(''exportedDataTypes''))]","exportedDataTypesLengthIfEmpty":"[if(equals(variables(''exportedDataTypesLength''), - 0), 1, variables(''exportedDataTypesLength''))]","dataTypeMap":{"Security - recommendations":"Assessments","Security alerts":"Alerts","Overall secure - score":"SecureScores","Secure score controls":"SecureScoreControls","Regulatory - compliance":"RegulatoryComplianceAssessment","Overall secure score - snapshot":"SecureScoresSnapshot","Secure - score controls - snapshot":"SecureScoreControlsSnapshot","Regulatory compliance - - snapshot":"RegulatoryComplianceAssessmentSnapshot"},"alertSeverityMap":{"High":"high","Medium":"medium","Low":"low"},"ruleSetsForAssessmentsObj":{"copy":[{"name":"ruleSetsForAssessmentsArr","count":"[mul(variables(''recommendationNamesLengthIfEmpty''),variables(''recommendationSeveritiesLengthIfEmpty''))]","input":{"rules":[{"propertyJPath":"[if(equals(variables(''recommendationNamesLength''),0),''type'',''name'')]","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''),0),''Microsoft.Security/assessments'',parameters(''recommendationNames'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationName'')),variables(''recommendationNamesLength''))])]","operator":"Contains"},{"propertyJPath":"properties.metadata.severity","propertyType":"string","expectedValue":"[parameters(''recommendationSeverities'')[mod(div(copyIndex(''ruleSetsForAssessmentsArr''),variables(''totalRuleCombinationsForOneRecommendationSeverity'')),variables(''recommendationSeveritiesLength''))]]","operator":"Equals"}]}}]},"customRuleSetsForSubAssessmentsObj":{"copy":[{"name":"ruleSetsForSubAssessmentsArr","count":"[variables(''recommendationNamesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"id","propertyType":"string","expectedValue":"[if(equals(variables(''recommendationNamesLength''), - 0), json(''null''), replace(variables(''subAssessmentRuleExpectedValue''),''{0}'', - parameters(''recommendationNames'')[copyIndex(''ruleSetsForSubAssessmentsArr'')]))]","operator":"Contains"}]}}]},"ruleSetsForAlertsObj":{"copy":[{"name":"ruleSetsForAlertsArr","count":"[variables(''alertSeveritiesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"Severity","propertyType":"string","expectedValue":"[variables(''alertSeverityMap'')[parameters(''alertSeverities'')[mod(copyIndex(''ruleSetsForAlertsArr''),variables(''alertSeveritiesLengthIfEmpty''))]]]","operator":"Equals"}]}}]},"customRuleSetsForSecureScoreControlsObj":{"copy":[{"name":"ruleSetsForSecureScoreControlsArr","count":"[variables(''secureScoreControlsLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"name","propertyType":"string","expectedValue":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), json(''null''), parameters(''secureScoreControlsNames'')[copyIndex(''ruleSetsForSecureScoreControlsArr'')])]","operator":"Equals"}]}}]},"customRuleSetsForRegulatoryComplianceObj":{"copy":[{"name":"ruleSetsForRegulatoryCompliancArr","count":"[variables(''regulatoryComplianceStandardsNamesLengthIfEmpty'')]","input":{"rules":[{"propertyJPath":"id","propertyType":"string","expectedValue":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), json(''null''), parameters(''regulatoryComplianceStandardsNames'')[copyIndex(''ruleSetsForRegulatoryCompliancArr'')])]","operator":"Contains"}]}}]},"ruleSetsForSecureScoreControlsObj":"[if(equals(variables(''secureScoreControlsNamesLength''), - 0), json(''null''), variables(''customRuleSetsForSecureScoreControlsObj'').ruleSetsForSecureScoreControlsArr)]","ruleSetsForSecureRegulatoryComplianceObj":"[if(equals(variables(''regulatoryComplianceStandardsNamesLength''), - 0), json(''null''), variables(''customRuleSetsForRegulatoryComplianceObj'').ruleSetsForRegulatoryCompliancArr)]","ruleSetsForSubAssessmentsObj":"[if(equals(variables(''recommendationNamesLength''), - 0), json(''null''), variables(''customRuleSetsForSubAssessmentsObj'').ruleSetsForSubAssessmentsArr)]","subAssessmentSource":[{"eventSource":"SubAssessments","ruleSets":"[variables(''ruleSetsForSubAssessmentsObj'')]"}],"ruleSetsMap":{"Security - recommendations":"[variables(''ruleSetsForAssessmentsObj'').ruleSetsForAssessmentsArr]","Security - alerts":"[variables(''ruleSetsForAlertsObj'').ruleSetsForAlertsArr]","Overall - secure score":null,"Secure score controls":"[variables(''ruleSetsForSecureScoreControlsObj'')]","Regulatory - compliance":"[variables(''ruleSetsForSecureRegulatoryComplianceObj'')]","Overall - secure score - snapshot":null,"Secure score controls - snapshot":"[variables(''ruleSetsForSecureScoreControlsObj'')]","Regulatory - compliance - snapshot":"[variables(''ruleSetsForSecureRegulatoryComplianceObj'')]"},"sourcesWithoutSubAssessments":{"copy":[{"name":"sources","count":"[variables(''exportedDataTypesLengthIfEmpty'')]","input":{"eventSource":"[variables(''dataTypeMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]","ruleSets":"[variables(''ruleSetsMap'')[parameters(''exportedDataTypes'')[copyIndex(''sources'')]]]"}}]},"sourcesWithSubAssessments":"[concat(variables(''subAssessmentSource''),variables(''sourcesWithoutSubAssessments'').sources)]","sources":"[if(equals(parameters(''isSecurityFindingsEnabled''),bool(''true'')),variables(''sourcesWithSubAssessments''),variables(''sourcesWithoutSubAssessments'').sources)]"},"resources":[{"name":"[parameters(''resourceGroupName'')]","type":"Microsoft.Resources/resourceGroups","apiVersion":"2019-10-01","location":"[parameters(''resourceGroupLocation'')]","tags":{},"properties":{}},{"type":"Microsoft.Resources/deployments","apiVersion":"2019-10-01","name":"[concat(''nestedAutomationDeployment'', - ''_'', parameters(''guidValue''))]","resourceGroup":"[parameters(''resourceGroupName'')]","dependsOn":["[resourceId(''Microsoft.Resources/resourceGroups/'', - parameters(''resourceGroupName''))]"],"properties":{"mode":"Incremental","template":{"$schema":"https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#","contentVersion":"1.0.0.0","parameters":{},"variables":{},"resources":[{"tags":{},"apiVersion":"2019-01-01-preview","location":"[parameters(''resourceGroupLocation'')]","name":"ExportToWorkspace","type":"Microsoft.Security/automations","dependsOn":[],"properties":{"description":"Export - Azure Security Center data to Log Analytics workspace via policy","isEnabled":true,"scopes":[{"description":"[replace(variables(''scopeDescription''),''{0}'', - subscription().subscriptionId)]","scopePath":"[subscription().id]"}],"sources":"[variables(''sources'')]","actions":[{"actionType":"Workspace","workspaceResourceId":"[parameters(''workspaceResourceId'')]"}]}}]}}}]},"parameters":{"resourceGroupName":{"value":"[parameters(''resourceGroupName'')]"},"resourceGroupLocation":{"value":"[parameters(''resourceGroupLocation'')]"},"exportedDataTypes":{"value":"[parameters(''exportedDataTypes'')]"},"isSecurityFindingsEnabled":{"value":"[parameters(''isSecurityFindingsEnabled'')]"},"recommendationNames":{"value":"[parameters(''recommendationNames'')]"},"secureScoreControlsNames":{"value":"[parameters(''secureScoreControlsNames'')]"},"recommendationSeverities":{"value":"[parameters(''recommendationSeverities'')]"},"alertSeverities":{"value":"[parameters(''alertSeverities'')]"},"regulatoryComplianceStandardsNames":{"value":"[parameters(''regulatoryComplianceStandardsNames'')]"},"workspaceResourceId":{"value":"[parameters(''workspaceResourceId'')]"}}}}}}}},"id":"/providers/Microsoft.Authorization/policyDefinitions/ffb6f416-7bd2-4488-8828-56585fef2be9","type":"Microsoft.Authorization/policyDefinitions","name":"ffb6f416-7bd2-4488-8828-56585fef2be9"}' - headers: - cache-control: - - no-cache - content-length: - - '16710' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 19 Apr 2021 09:52:51 GMT - expires: - - '-1' - pragma: - - no-cache - server: - - Kestrel - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup.yaml deleted file mode 100644 index 5dcc1d37c6c..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup.yaml +++ /dev/null @@ -1,1204 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:03:48 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:03:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","type":"Microsoft.Management/managementGroups","name":"testcligetgroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:00 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 45214f15-3220-4534-ac8c-f0310191e0c3 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup","name":"testcligetgroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '163' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:10 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - f0021e74-1a9f-4cf0-8401-d778e4be4b20 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup","name":"testcligetgroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup","details":{"version":14,"updatedTime":"2022-02-09T01:04:05.1101087Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '383' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:20 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - a463e2c4-6090-4259-a3e0-26c211ed4f93 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","type":"Microsoft.Management/managementGroups","name":"testcligetgroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup","details":{"version":14,"updatedTime":"2022-02-09T01:04:05.1101087Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '551' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:20 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 29da67f5-c411-4660-9c0f-eaf11ff36c48 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:21 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:31 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup1", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '143' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:32 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 1730d1e0-2b18-4594-a344-9d20abe85aaa - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:42 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 4c4bbd4b-6327-444c-9197-cdb3865511c7 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:04:53 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 9a9cf0e6-ae0d-43f6-9ca1-09e26fdf3e3e - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":29,"updatedTime":"2022-02-09T01:04:39.4525774Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '386' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:04 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - c821ba08-5708-43a5-807c-c51b9e65cc85 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":29,"updatedTime":"2022-02-09T01:04:39.4525774Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","name":"testcligetgroup","displayName":"testcligetgroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '506' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:04 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 07bf3ad3-992e-46a5-9166-65d6672f89fc - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":29,"updatedTime":"2022-02-09T01:04:39.4525774Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","name":"testcligetgroup","displayName":"testcligetgroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '506' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:15 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - a1f37734-272c-4a29-b60a-468907d1bd20 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:16 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:28 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 798ed90a-e5d3-46fb-aab6-8fe946a9ab7d - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:38 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - cb996e44-e3bd-4646-aea4-073ba40ddcd6 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:39 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","type":"Microsoft.Management/managementGroups","name":"testcligetgroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:05:51 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 85ec2a9b-43e2-4166-8f1e-cd0cae2bdbba - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup","name":"testcligetgroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:06:00 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - d42c0e9c-fb9f-42d2-a58a-a56427726318 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand.yaml deleted file mode 100644 index 7a6cea09f24..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand.yaml +++ /dev/null @@ -1,1345 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:29:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:29:48 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '70' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","type":"Microsoft.Management/managementGroups","name":"testcligetgroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup","details":{"version":15,"updatedTime":"2022-02-09T01:23:17.8884875Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '551' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:29:48 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 636379b0-27f1-426e-98e3-ae7549d2ffbf - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:29:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:00 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup1", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '143' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":30,"updatedTime":"2022-02-09T01:23:50.7279872Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","name":"testcligetgroup","displayName":"testcligetgroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '506' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:01 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 1ecebda4-d82e-4d75-ae57-c02922066d09 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:02 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:12 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup2", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup1"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '144' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:15 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 75e27418-3269-42ec-9452-3f8b46df5204 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:25 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 89a0aefc-00dd-430e-a136-0562c8e2808c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup2","details":{"version":23,"updatedTime":"2022-02-09T01:30:21.9082687Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '386' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:35 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - ce7ca13a-6c5a-4b58-8e22-1accce95fcb6 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup2","details":{"version":23,"updatedTime":"2022-02-09T01:30:21.9082687Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","name":"testcligetgroup1","displayName":"testcligetgroup1"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '509' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:36 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - ffc6fe74-7e86-4874-9029-def539071444 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --expand - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:37 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name --expand - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:47 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name --expand - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01&$expand=children&$recurse=false - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":30,"updatedTime":"2022-02-09T01:23:50.7279872Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","name":"testcligetgroup","displayName":"testcligetgroup"}},"children":[{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","displayName":"testcligetgroup2"}]}}' - headers: - cache-control: - - no-cache - content-length: - - '700' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:48 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 23050f50-b4b5-4863-ab44-e10c4711633e - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:49 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:30:59 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:00 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - db4e37b8-206c-4608-bafb-10f63167876a - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:10 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 28e9d8db-5556-4286-9983-014ece0cae2f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:11 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:22 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:23 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 9e8ca321-9a46-495d-b548-3308b2d0c8ab - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '58' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:33 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - b4d57803-3de7-4e56-bf79-59a0e3154e6f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:34 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:44 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup","type":"Microsoft.Management/managementGroups","name":"testcligetgroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:45 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 37b0e936-95ed-4c88-bbc9-719a400d73ef - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup","name":"testcligetgroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:31:55 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - af4fd00a-7e16-4645-965d-8bc23541627d - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand_and_recurse.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand_and_recurse.yaml deleted file mode 100644 index 3a3638e6a68..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_show_managementgroup_with_expand_and_recurse.yaml +++ /dev/null @@ -1,2156 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:13 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup1", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '71' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:24 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - bec277b4-88d0-4677-95f5-2f8c81960e62 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:34 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - e86fdb65-1137-4b47-9564-73d06d66edd2 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":31,"updatedTime":"2022-02-09T01:32:30.9911435Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '386' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:45 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 0ef43a34-331b-4fa6-aab9-f397dc0e3714 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup1","details":{"version":31,"updatedTime":"2022-02-09T01:32:30.9911435Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '554' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:45 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 7945e310-37c4-406d-8125-d11dc7470acf - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:47 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:57 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup2", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup1"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '144' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:32:58 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 33f8fa03-6806-42ac-937e-71c2b3312c71 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1198' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:08 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 53311405-bf39-4c57-ad6f-995ecb1466ca - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup2","details":{"version":24,"updatedTime":"2022-02-09T01:33:03.1797448Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '386' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:19 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 232fbbd3-2a5b-489e-86eb-d5dfd965f4b9 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup2","details":{"version":24,"updatedTime":"2022-02-09T01:33:03.1797448Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","name":"testcligetgroup1","displayName":"testcligetgroup1"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '509' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:19 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - aded4db3-3459-4cdf-aad2-525a9c812c3b - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:30 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup3", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup2"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '144' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup3","type":"Microsoft.Management/managementGroups","name":"testcligetgroup3","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:31 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup3?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 43c50c76-72c7-4b9a-9179-efd857c40b78 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3","name":"testcligetgroup3","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:41 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup3?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - a18f342e-a8a9-4334-aeca-f47220050a8c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup3","name":"testcligetgroup3","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup3","details":{"version":11,"updatedTime":"2022-02-09T01:33:37.2206477Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '386' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:52 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 56dce980-96c8-4594-8299-46b090a2ce91 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup3","type":"Microsoft.Management/managementGroups","name":"testcligetgroup3","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup3","details":{"version":11,"updatedTime":"2022-02-09T01:33:37.2206477Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","name":"testcligetgroup2","displayName":"testcligetgroup2"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '509' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:52 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 321dec3f-1e65-42f4-9f71-b28d541786a8 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:33:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligetgroup4", "properties": {"details": {"parent": {"id": - "/providers/Microsoft.Management/managementGroups/testcligetgroup3"}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '144' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup4","type":"Microsoft.Management/managementGroups","name":"testcligetgroup4","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:05 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup4?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - adec62a9-afac-4d9b-887b-9efcb6a7ec85 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4","name":"testcligetgroup4","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '165' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:15 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligetgroup4?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 27b90276-1bc6-49d2-b598-49b33c494e95 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligetgroup4","name":"testcligetgroup4","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup4","details":{"version":8,"updatedTime":"2022-02-09T01:34:11.1105252Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '385' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:26 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - a7a3e2dc-af76-46cf-be94-0634b032a439 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup4","type":"Microsoft.Management/managementGroups","name":"testcligetgroup4","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup4","details":{"version":8,"updatedTime":"2022-02-09T01:34:11.1105252Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup3","name":"testcligetgroup3","displayName":"testcligetgroup3"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '508' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:26 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 5629283c-385b-469f-b263-6d17e66ab4d3 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name --expand --recurse - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:27 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name --expand --recurse - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:38 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group show - Connection: - - keep-alive - ParameterSetName: - - --name --expand --recurse - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01&$expand=children&$recurse=true - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligetgroup2","details":{"version":0,"updatedTime":"0001-01-01T00:00:00","updatedBy":null,"parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","name":"testcligetgroup1","displayName":"testcligetgroup1"}},"children":[{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup3","type":"Microsoft.Management/managementGroups","name":"testcligetgroup3","displayName":"testcligetgroup3","children":[{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup4","type":"Microsoft.Management/managementGroups","name":"testcligetgroup4","displayName":"testcligetgroup4"}]}]}}' - headers: - cache-control: - - no-cache - content-length: - - '853' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:39 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - c21162e0-febc-460d-91b2-38aed0afbdca - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup4","type":"Microsoft.Management/managementGroups","name":"testcligetgroup4","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:34:58 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup4?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 44e1edaa-77df-4e8f-ae6d-211f98090fa3 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup4?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup4","name":"testcligetgroup4","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:09 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 6fbe8ec5-b28c-48c9-9878-033f9e8d2cd1 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:09 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:20 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup3","type":"Microsoft.Management/managementGroups","name":"testcligetgroup3","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:22 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup3?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 4e86379a-6c58-4395-9edd-0358bc1f0ae2 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup3?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup3","name":"testcligetgroup3","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:31 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 092bd8b3-78d8-49d4-b7e0-1a108d3fabd8 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:32 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup2","type":"Microsoft.Management/managementGroups","name":"testcligetgroup2","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:44 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup2?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - dbf42d1e-3c7a-48a5-a686-8aacc1985030 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '58' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup2","name":"testcligetgroup2","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:54 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 2bf5e47a-099f-46bd-ae00-6b685b35d4df - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:35:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:36:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligetgroup1","type":"Microsoft.Management/managementGroups","name":"testcligetgroup1","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:36:06 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligetgroup1?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - cf3ca36a-288d-493f-a330-ea3fe735c580 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligetgroup1","name":"testcligetgroup1","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:36:16 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 97f3b320-5015-4500-9a4c-792bdc2cdc9d - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_subscription_locks.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_subscription_locks.yaml deleted file mode 100644 index 0acd859cd87..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_subscription_locks.yaml +++ /dev/null @@ -1,386 +0,0 @@ -interactions: -- request: - body: '{"properties": {"level": "CanNotDelete"}}' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock create] - Connection: [keep-alive] - Content-Length: ['41'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:13 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 201, message: Created} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock list] - Connection: [keep-alive] - ParameterSetName: [--query] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:13 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:14 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:14 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:15 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock show] - Connection: [keep-alive] - ParameterSetName: [--ids] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:15 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['296'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:15 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['284'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:16 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "ReadOnly", "notes": "notes000002"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Length: ['70'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [-n --notes --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:16 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1199'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['323'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:16 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"ReadOnly","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['311'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:16 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: 'b''{"properties": {"level": "CanNotDelete", "notes": "notes000002"}}''' - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock update] - Connection: [keep-alive] - Content-Length: ['74'] - Content-Type: [application/json; charset=utf-8] - ParameterSetName: [--ids --lock-type] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: '{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}'} - headers: - cache-control: [no-cache] - content-length: ['315'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:16 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-writes: ['1197'] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock delete] - Connection: [keep-alive] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks?api-version=2016-09-01 - response: - body: {string: '{"value":[{"properties":{"level":"CanNotDelete","notes":"notes000002"},"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001","type":"Microsoft.Authorization/locks","name":"cli-test-lock000001"}]}'} - headers: - cache-control: [no-cache] - content-length: ['327'] - content-type: [application/json; charset=utf-8] - date: ['Thu, 28 Feb 2019 00:01:17 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - transfer-encoding: [chunked] - vary: ['Accept-Encoding,Accept-Encoding'] - x-content-type-options: [nosniff] - status: {code: 200, message: OK} -- request: - body: null - headers: - Accept: [application/json] - Accept-Encoding: ['gzip, deflate'] - CommandName: [account lock delete] - Connection: [keep-alive] - Content-Length: ['0'] - ParameterSetName: [-n] - User-Agent: [python/3.5.2 (Windows-10-10.0.17763-SP0) msrest/0.6.2 msrest_azure/0.4.34 - managementlockclient/2.1.0 Azure-SDK-For-Python AZURECLI/2.0.58] - accept-language: [en-US] - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/locks/cli-test-lock000001?api-version=2016-09-01 - response: - body: {string: ''} - headers: - cache-control: [no-cache] - content-length: ['0'] - date: ['Thu, 28 Feb 2019 00:01:18 GMT'] - expires: ['-1'] - pragma: [no-cache] - strict-transport-security: [max-age=31536000; includeSubDomains] - x-content-type-options: [nosniff] - x-ms-ratelimit-remaining-subscription-deletes: ['14998'] - status: {code: 200, message: OK} -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_tag_scenario.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_tag_scenario.yaml deleted file mode 100644 index 6eded787969..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_tag_scenario.yaml +++ /dev/null @@ -1,675 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - date: - - Mon, 29 Jun 2020 07:58:40 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 204 - message: No Content -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[]}' - headers: - cache-control: - - no-cache - content-length: - - '154' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag add-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test","tagValue":"test","count":{"type":"Total","value":0}}' - headers: - cache-control: - - no-cache - content-length: - - '150' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag add-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: PUT - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}' - headers: - cache-control: - - no-cache - content-length: - - '152' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:54 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 201 - message: Created -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test","tagValue":"test","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29781' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:55 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag remove-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:58:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14999' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2","tagValue":"test2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29630' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:58:58 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag remove-value - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n --value - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag/tagValues/test2?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:59:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14998' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag","tagName":"cli_test_tag","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29478' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:59:04 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - -n - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: DELETE - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cli_test_tag?api-version=2018-05-01 - response: - body: - string: '' - headers: - cache-control: - - no-cache - content-length: - - '0' - date: - - Mon, 29 Jun 2020 07:59:07 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-deletes: - - '14997' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - tag list - Connection: - - keep-alive - ParameterSetName: - - --query - User-Agent: - - python/3.8.0 (Windows-10-10.0.19041-SP0) msrest/0.6.9 msrest_azure/0.6.3 azure-mgmt-resource/10.0.0 - Azure-SDK-For-Python AZURECLI/2.8.0 - accept-language: - - en-US - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/tagNames?api-version=2018-05-01 - response: - body: - string: '{"value":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo","tagName":"foo","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/foo/tagValues/doo","tagValue":"doo","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,","tagName":"{tag1: value1,","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag1: - value1,/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}","tagName":"tag2: value2}","count":{"type":"Total","value":10},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag2: - value2}/tagValues/","tagValue":"","count":{"type":"Total","value":10}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,","tagName":"{tag2: value2,","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/{tag2: - value2,/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}","tagName":"tag1: value1}","count":{"type":"Total","value":6},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1: - value1}/tagValues/","tagValue":"","count":{"type":"Total","value":6}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1","tagName":"key1","count":{"type":"Total","value":12},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":12}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage","tagName":"ms-resource-usage","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/ms-resource-usage/tagValues/azure-cloud-shell","tagValue":"azure-cloud-shell","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application","tagName":"application","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/application/tagValues/databricks","tagValue":"databricks","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment","tagName":"databricks-environment","count":{"type":"Total","value":15},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/databricks-environment/tagValues/true","tagValue":"true","count":{"type":"Total","value":15}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test","tagName":"test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/test/tagValues/cli","tagValue":"cli","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate","tagName":"imagebuilderTemplate","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/imagebuilderTemplate/tagValues/ubuntu1804","tagValue":"ubuntu1804","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10","tagName":"key10","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key10/tagValues/val10","tagValue":"val10","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4","tagName":"key4","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key4/tagValues/val4","tagValue":"val4","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5","tagName":"key5","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key5/tagValues/val5","tagValue":"val5","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6","tagName":"key6","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key6/tagValues/val6","tagValue":"val6","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9","tagName":"key9","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key9/tagValues/val9","tagValue":"val9","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by","tagName":"created_by","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/created_by/tagValues/image-copy-extension","tagValue":"image-copy-extension","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2","tagName":"key2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key2/tagValues/value2","tagValue":"value2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key","tagName":"patch_key","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/patch_key/tagValues/PatchKeyUpdated","tagValue":"PatchKeyUpdated","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test","tagName":"zhoxing_test","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test/tagValues/1","tagValue":"1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev","tagName":"dev","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/dev/tagValues/test","tagValue":"test","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist","tagName":"vmlist","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist/tagValues/vm1","tagValue":"vm1","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2","tagName":"vmlist2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist2/tagValues/vm2","tagValue":"vm2","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3","tagName":"vmlist3","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/vmlist3/tagValues/vm3","tagValue":"vm3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key","tagName":"key","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/key/tagValues/val","tagValue":"val","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env","tagName":"env","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/env/tagValues/CI","tagValue":"CI","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project","tagName":"project","count":{"type":"Total","value":3},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/project/tagValues/Digital - Platform","tagValue":"Digital Platform","count":{"type":"Total","value":3}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy","tagName":"CreatedBy","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/CreatedBy/tagValues/DevTestLabs","tagValue":"DevTestLabs","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center","tagName":"Cost Center","count":{"type":"Total","value":2},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/Cost - Center/tagValues/","tagValue":"","count":{"type":"Total","value":2}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2","tagName":"zhoxing-test2","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test2/tagValues/ - sdasdad","tagValue":" sdasdad","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1","tagName":"tag1","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1 - tag2=value2","tagValue":"value1 tag2=value2","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/tag1/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a","tagName":"a","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value1","tagValue":"a-value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/a/tagValues/a-value2","tagValue":"a-value2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag","tagName":"jltag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2","tagName":"jltag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/jltag2/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag","tagName":"pretag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/ value1","tagValue":" value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value1","tagValue":"value1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/pretag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag","tagName":"testtag","count":{"type":"Total","value":1},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value3","tagValue":"value3","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag/tagValues/value2 - ","tagValue":"value2 ","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2","tagName":"testtag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/testtag2/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714","tagName":"xplatResourceGroupTag2714","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag2714/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197","tagName":"xplatResourceGroupTag6197","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag6197/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910","tagName":"xplatResourceGroupTag8910","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag8910/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992","tagName":"xplatResourceGroupTag992","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag992/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929","tagName":"xplatResourceGroupTag9929","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9929/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235","tagName":"xplatResourceTag5235","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5235/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313","tagName":"xplatResourceTag5313","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag5313/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604","tagName":"xplatResourceTag604","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag604/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015","tagName":"xplatResourceTag8015","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8015/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954","tagName":"xplatResourceTag8954","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8954/tagValues/fooValue","tagValue":"fooValue","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032","tagName":"xplatResourceTag9032","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9032/tagValues/ygtag-value","tagValue":"ygtag-value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag","tagName":"yugangw-tag","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v1","tagValue":"yugangw-tag-v1","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag/tagValues/yugangw-tag-v2","tagValue":"yugangw-tag-v2","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2","tagName":"yugangw-tag2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/yugangw-tag2/tagValues/yugangw-tag2-v1","tagValue":"yugangw-tag2-v1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test","tagName":"zhoxing-test","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/ value","tagValue":" value","count":{"type":"Total","value":0}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing-test/tagValues/value","tagValue":"value","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2","tagName":"zhoxing_test2","count":{"type":"Total","value":0},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/zhoxing_test2/tagValues/1","tagValue":"1","count":{"type":"Total","value":0}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType","tagName":"StorageType","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/StorageType/tagValues/Standard_LRS","tagValue":"Standard_LRS","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type","tagName":"type","count":{"type":"Total","value":37},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/type/tagValues/test","tagValue":"test","count":{"type":"Total","value":37}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product","tagName":"product","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/product/tagValues/azurecli","tagValue":"azurecli","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause","tagName":"cause","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/cause/tagValues/automation","tagValue":"automation","count":{"type":"Total","value":52}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date","tagName":"date","count":{"type":"Total","value":52},"values":[{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-13T02:04:59Z","tagValue":"2020-06-13T02:04:59Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-15T01:51:27Z","tagValue":"2020-06-15T01:51:27Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-16T02:22:31Z","tagValue":"2020-06-16T02:22:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-19T06:52:20Z","tagValue":"2020-06-19T06:52:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-20T02:16:09Z","tagValue":"2020-06-20T02:16:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:11:55Z","tagValue":"2020-06-22T08:11:55Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-22T08:20:07Z","tagValue":"2020-06-22T08:20:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-28T07:50:04Z","tagValue":"2020-06-28T07:50:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:07Z","tagValue":"2020-06-29T06:53:07Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:17Z","tagValue":"2020-06-29T06:53:17Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T06:53:35Z","tagValue":"2020-06-29T06:53:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-29T07:57:14Z","tagValue":"2020-06-29T07:57:14Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-02-14T18:49:57Z","tagValue":"2020-02-14T18:49:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T15:51:37Z","tagValue":"2020-03-12T15:51:37Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:01:48Z","tagValue":"2020-03-12T16:01:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:09:34Z","tagValue":"2020-03-12T16:09:34Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T16:11:35Z","tagValue":"2020-03-12T16:11:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:29:21Z","tagValue":"2020-03-12T18:29:21Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T18:35:47Z","tagValue":"2020-03-12T18:35:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-12T19:01:09Z","tagValue":"2020-03-12T19:01:09Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-17T07:31:48Z","tagValue":"2020-03-17T07:31:48Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-03-18T09:40:25Z","tagValue":"2020-03-18T09:40:25Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-15T03:15:42Z","tagValue":"2020-04-15T03:15:42Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-04-25T01:12:20Z","tagValue":"2020-04-25T01:12:20Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-02T01:16:04Z","tagValue":"2020-05-02T01:16:04Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-10T06:47:57Z","tagValue":"2020-05-10T06:47:57Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-23T02:07:24Z","tagValue":"2020-05-23T02:07:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-05-30T02:22:22Z","tagValue":"2020-05-30T02:22:22Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-02T08:19:04Z","tagValue":"2020-06-02T08:19:04Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-03T07:10:50Z","tagValue":"2020-06-03T07:10:50Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-06-06T02:20:51Z","tagValue":"2020-06-06T02:20:51Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:54:47Z","tagValue":"2019-10-15T16:54:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:55:16Z","tagValue":"2019-10-15T16:55:16Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:15Z","tagValue":"2019-10-15T16:56:15Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-15T16:56:26Z","tagValue":"2019-10-15T16:56:26Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-16T14:48:47Z","tagValue":"2019-10-16T14:48:47Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:42:46Z","tagValue":"2019-10-17T15:42:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:43:24Z","tagValue":"2019-10-17T15:43:24Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-17T15:44:46Z","tagValue":"2019-10-17T15:44:46Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-10-18T00:59:19Z","tagValue":"2019-10-18T00:59:19Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:35Z","tagValue":"2019-11-11T08:59:35Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:39Z","tagValue":"2019-11-11T08:59:39Z","count":{"type":"Total","value":2}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-11-11T08:59:40Z","tagValue":"2019-11-11T08:59:40Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-27T22:15:53Z","tagValue":"2019-12-27T22:15:53Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2019-12-30T02:24:44Z","tagValue":"2019-12-30T02:24:44Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:23:31Z","tagValue":"2020-01-21T07:23:31Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:26:32Z","tagValue":"2020-01-21T07:26:32Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:33:45Z","tagValue":"2020-01-21T07:33:45Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:36:43Z","tagValue":"2020-01-21T07:36:43Z","count":{"type":"Total","value":1}},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/date/tagValues/2020-01-21T07:42:41Z","tagValue":"2020-01-21T07:42:41Z","count":{"type":"Total","value":1}}]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag3602","tagName":"xplatResourceGroupTag3602","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7142","tagName":"xplatResourceGroupTag7142","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7429","tagName":"xplatResourceGroupTag7429","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag7670","tagName":"xplatResourceGroupTag7670","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceGroupTag9838","tagName":"xplatResourceGroupTag9838","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag1210","tagName":"xplatResourceTag1210","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag3833","tagName":"xplatResourceTag3833","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag7831","tagName":"xplatResourceTag7831","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8311","tagName":"xplatResourceTag8311","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag8732","tagName":"xplatResourceTag8732","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag875","tagName":"xplatResourceTag875","count":{"type":"Total","value":0},"values":[]},{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/tagNames/xplatResourceTag9329","tagName":"xplatResourceTag9329","count":{"type":"Total","value":0},"values":[]}]}' - headers: - cache-control: - - no-cache - content-length: - - '29323' - content-type: - - application/json; charset=utf-8 - date: - - Mon, 29 Jun 2020 07:59:10 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname.yaml deleted file mode 100644 index 55f75cdd07a..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname.yaml +++ /dev/null @@ -1,412 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:51:51 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1198' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":163,"updatedTime":"2022-02-09T00:50:22.9686203Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:02 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 5c9de50e-552d-496e-b705-347752fc3e9a - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: '{"displayName": "testcligroupDisplayName"}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group update - Connection: - - keep-alive - Content-Length: - - '42' - Content-Type: - - application/json - ParameterSetName: - - --name --display-name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PATCH - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupDisplayName","details":{"version":164,"updatedTime":"2022-02-09T00:52:03.1315257Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '554' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:04 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 4991fa67-a25c-4476-8491-4bf528fdcb9b - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:05 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:18 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 49a423d6-bccd-4eb0-a819-c05848ce2891 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 00:52:29 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 018b5821-cd2b-442b-adc0-299ba4569137 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname_and_parentid.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname_and_parentid.yaml deleted file mode 100644 index f16b00ea7b5..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_displayname_and_parentid.yaml +++ /dev/null @@ -1,1068 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:17:42 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:17:52 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:17:53 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 69716325-bbbd-4af9-a74e-58171ddacf0e - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:03 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 1705afc7-b38d-42a2-9b8f-57e101c9788f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":174,"updatedTime":"2022-02-09T01:17:59.2633479Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:14 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - aef96c13-85b7-47e8-9618-b13f3780ae83 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":174,"updatedTime":"2022-02-09T01:17:59.2633479Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:14 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 0cccb7ac-139d-449b-a8b9-11ce6b705313 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:15 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:25 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroupchild", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '72' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:26 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - aa874678-6e89-488c-ad09-3afc0730a0de - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:36 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 1a210c8e-da9d-47b0-b068-488328049c1c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":108,"updatedTime":"2022-02-09T01:18:32.3558561Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '390' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:48 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 8b19fd66-aefe-4e57-8398-a349ad80a1a7 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":108,"updatedTime":"2022-02-09T01:18:32.3558561Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '558' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:48 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - acc4d96b-0719-44d6-a1e0-b85185bb91fe - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"displayName": "testcligroupchild", "parentGroupId": "/providers/Microsoft.Management/managementGroups/testcligroup"}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group update - Connection: - - keep-alive - Content-Length: - - '118' - Content-Type: - - application/json - ParameterSetName: - - --name --display-name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PATCH - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":109,"updatedTime":"2022-02-09T01:18:49.9811829Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","name":"testcligroup","displayName":"testcligroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '501' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:50 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - e9665b86-2745-4946-8a10-6a9217594003 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:18:50 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:01 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:02 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - dae0bc60-5eb3-4527-ad68-4894765c3331 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:12 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 53f44399-8a1d-4f73-a18f-91240d91a40c - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:14 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:24 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:25 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - b2ced49e-0735-4d74-9478-f8c94802d860 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:19:35 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - eaf606ff-75d7-4934-a27e-748987db792f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_parentid.yaml b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_parentid.yaml deleted file mode 100644 index aa13a3b8cea..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/recordings/test_update_managementgroup_with_parentid.yaml +++ /dev/null @@ -1,1067 +0,0 @@ -interactions: -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:46 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:56 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroup", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '67' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:25:56 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - ef9e0ad5-50e3-4f61-9755-64c9aaebf09a - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1198' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '157' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:07 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - afa2459d-473a-4207-9897-02cc266d4eec - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":177,"updatedTime":"2022-02-09T01:26:02.5828886Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '375' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:17 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 2bfa13f3-790f-447a-9c51-2e73a3e184fc - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroup","details":{"version":177,"updatedTime":"2022-02-09T01:26:02.5828886Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/c7a87cda-9a66-4920-b0f8-869baa04efe0","name":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"Root - Management Group"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '543' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:17 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - dc279b68-ec7e-4428-bf25-b2df5ce94fca - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:19 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:28 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"name": "testcligroupchild", "properties": {"details": {"parent": {}}}}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group create - Connection: - - keep-alive - Content-Length: - - '72' - Content-Type: - - application/json - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PUT - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:29 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - a461545b-bc68-4124-b14b-a8a0131aafc5 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1198' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Running"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '167' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:39 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/create/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 064b7aba-6355-45d5-b305-bb00b03c99cd - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/create/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":112,"updatedTime":"2022-02-09T01:26:36.1782913Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701"}}}' - headers: - cache-control: - - no-cache - content-length: - - '390' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - bd242db7-5cd9-4c61-8db9-f9cc9207c8bf - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group create - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":112,"updatedTime":"2022-02-09T01:26:36.1782913Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","name":"testcligroup","displayName":"testcligroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '501' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:51 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 0f35d807-f1a8-49a8-9dda-3e21863bebf4 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: '{"parentGroupId": "/providers/Microsoft.Management/managementGroups/testcligroup"}' - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group update - Connection: - - keep-alive - Content-Length: - - '82' - Content-Type: - - application/json - ParameterSetName: - - --name --parent - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: PATCH - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","properties":{"tenantId":"c7a87cda-9a66-4920-b0f8-869baa04efe0","displayName":"testcligroupchild","details":{"version":112,"updatedTime":"2022-02-09T01:26:36.1782913Z","updatedBy":"27e85fe3-7b1b-4de4-8d55-d58291b5d701","parent":{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","name":"testcligroup","displayName":"testcligroup"}}}}' - headers: - cache-control: - - no-cache - content-length: - - '501' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:52 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - b6a769d0-b901-4f3c-b4b2-1c97f18d48bf - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:26:53 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1197' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:03 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroupchild","type":"Microsoft.Management/managementGroups","name":"testcligroupchild","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '171' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:04 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroupchild?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - 939fd14d-f7c3-4e3b-8cb8-7e1f6a60cde8 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroupchild","name":"testcligroupchild","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '169' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:14 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 3d2faea0-11f5-48d2-8be4-40993748340f - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2454 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: POST - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management/register?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:16 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-subscription-writes: - - '1199' - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-azure-mgmt-resource/20.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management?api-version=2018-05-01 - response: - body: - string: '{"id":"/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Management","namespace":"Microsoft.Management","authorization":{"applicationId":"f2c304cf-8e7e-4c3f-8164-16299ad9d272","roleDefinitionId":"c1cf3708-588a-4647-be7f-f400bbe214cf"},"resourceTypes":[{"resourceType":"resources","locations":[],"apiVersions":["2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"managementGroups","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"getEntities","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"managementGroups/settings","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2018-03-01-beta"]},{"resourceType":"checkNameAvailability","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview"]},{"resourceType":"operationResults/asyncOperation","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"operations","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta","2018-01-01-preview","2017-11-01-preview","2017-08-31-preview","2017-06-30-preview","2017-05-31-preview"]},{"resourceType":"tenantBackfillStatus","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]},{"resourceType":"startTenantBackfill","locations":[],"apiVersions":["2021-04-01","2020-10-01","2020-05-01","2020-02-01","2019-11-01","2018-03-01-preview","2018-03-01-beta"]}],"registrationState":"Registered"}' - headers: - cache-control: - - no-cache - content-length: - - '2360' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:26 GMT - expires: - - '-1' - pragma: - - no-cache - strict-transport-security: - - max-age=31536000; includeSubDomains - vary: - - Accept-Encoding - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -- request: - body: null - headers: - Accept: - - application/json - Accept-Encoding: - - gzip, deflate - Cache-Control: - - no-cache - CommandName: - - account management-group delete - Connection: - - keep-alive - Content-Length: - - '0' - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: DELETE - uri: https://management.azure.com/providers/Microsoft.Management/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/managementGroups/testcligroup","type":"Microsoft.Management/managementGroups","name":"testcligroup","status":"NotStarted"}' - headers: - azure-asyncoperation: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - cache-control: - - no-cache - content-length: - - '161' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:28 GMT - expires: - - '-1' - location: - - https://management.azure.com/providers/Microsoft.Management/operationResults/delete/managementGroups/testcligroup?api-version=2021-04-01 - pragma: - - no-cache - request-id: - - db654ade-3b82-4a55-8f59-bfeed0dcb6d7 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - x-ms-ratelimit-remaining-managementgroups-requests: - - '59' - x-ms-ratelimit-remaining-tenant-deletes: - - '14999' - status: - code: 202 - message: Accepted -- request: - body: null - headers: - Accept: - - '*/*' - Accept-Encoding: - - gzip, deflate - CommandName: - - account management-group delete - Connection: - - keep-alive - ParameterSetName: - - --name - User-Agent: - - AZURECLI/2.32.0 azsdk-python-mgmt-managementgroups/1.0.0 Python/3.7.8 (Windows-10-10.0.19041-SP0) - method: GET - uri: https://management.azure.com/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup?api-version=2021-04-01 - response: - body: - string: '{"id":"/providers/Microsoft.Management/operationResults/delete/asyncOperation/status/managementGroups/testcligroup","name":"testcligroup","status":"Succeeded"}' - headers: - cache-control: - - no-cache - content-length: - - '159' - content-type: - - application/json; charset=utf-8 - date: - - Wed, 09 Feb 2022 01:27:38 GMT - expires: - - '-1' - pragma: - - no-cache - request-id: - - 2c2f5543-9c6f-45b3-a651-75bc7c72cc25 - server: - - Microsoft-HTTPAPI/2.0 - strict-transport-security: - - max-age=31536000; includeSubDomains - transfer-encoding: - - chunked - vary: - - Accept-Encoding - x-ba-restapi: - - 1.0.3.2425 - x-content-type-options: - - nosniff - status: - code: 200 - message: OK -version: 1 diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_create_ui_definition.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_create_ui_definition.json deleted file mode 100644 index 006188d23fd..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_create_ui_definition.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/0.1.2-preview/CreateUIDefinition.MultiVm.json#", - "handler": "Microsoft.Compute.MultiVm", - "version": "0.1.2-preview", - "parameters": { - "basics": [ - { - "name": "adminUsername", - "type": "Microsoft.Compute.UserNameTextBox", - "label": "Admin Username", - "toolTip": "Admin user name for the virtual machine", - "osPlatform": "Linux" - }, - { - "name": "adminPassword", - "type": "Microsoft.Common.PasswordBox", - "label": { - "password": "Admin Password", - "confirmPassword": "Confirm password" - }, - "toolTip": "Admin password for the virtual machine", - "constraints": { - "required": true, - "regex": "^(?:(?=.*[a-z])(?:(?=.*[A-Z])(?=.*[\\d\\W])|(?=.*\\W)(?=.*\\d))|(?=.*\\W)(?=.*[A-Z])(?=.*\\d)).{6,72}$", - "validationMessage": "The password must be between 6 and 72 characters long, and contain characters from at least 3 of the following groups: uppercase characters, lowercase characters, numbers, and special characters." - }, - "options": { - "hideConfirmation": false - } - } - ], - "steps": [ - { - "name": "ipConfig", - "label": "IP Config", - "subLabel": { - "preValidation": "Configure the public IP address", - "postValidation": "Done" - }, - "bladeTitle": "IP Settings", - "elements": [ - { - "name": "ipCombo", - "type": "Microsoft.Network.PublicIpAddressCombo", - "label": { - "publicIpAddress": "Public IP address", - "domainNameLabel": "Domain name label" - }, - "toolTip": { - "publicIpAddress": "", - "domainNameLabel": "" - }, - "defaultValue": { - "publicIpAddressName": "myPublicIP" - }, - "constraints": { - "required": { - "domainNameLabel": true - } - }, - "options": { - "hideNone": true, - "hideDomainNameLabel": false, - "hideExisting": true - }, - "visible": true - } - ] - } - ], - "outputs": { - "adminUsername": "[basics('adminUsername')]", - "adminPassword": "[basics('adminPassword')]", - "dnsLabelPrefix": "[steps('ipConfig').ipCombo.domainNameLabel]", - "applianceResourceNameForMainTemplate": "testappname" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_main_template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_main_template.json deleted file mode 100644 index 87adfe52d25..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_main_template.json +++ /dev/null @@ -1,187 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "adminUsername": { - "type": "string", - "metadata": { - "description": "User name for the Virtual Machine." - } - }, - "adminPassword": { - "type": "securestring", - "metadata": { - "description": "Password for the Virtual Machine." - } - }, - "dnsLabelPrefix": { - "type": "string", - "metadata": { - "description": "Unique DNS Name for the Public IP used to access the Virtual Machine." - } - }, - "ubuntuOSVersion": { - "type": "string", - "defaultValue": "16.04.0-LTS", - "allowedValues": [ - "12.04.5-LTS", - "14.04.5-LTS", - "15.10", - "16.04.0-LTS" - ], - "metadata": { - "description": "The Ubuntu version for the VM. This will pick a fully patched image of this given Ubuntu version." - } - } - }, - "variables": { - "storageAccountName": "[concat(uniquestring(resourceGroup().id), 'salinuxvm')]", - "imagePublisher": "Canonical", - "imageOffer": "UbuntuServer", - "nicName": "myVMNic", - "addressPrefix": "10.0.0.0/16", - "subnetName": "Subnet", - "subnetPrefix": "10.0.0.0/24", - "storageAccountType": "Standard_LRS", - "publicIPAddressName": "myPublicIP", - "publicIPAddressType": "Dynamic", - "vmName": "MyUbuntuVM", - "vmSize": "Standard_A1", - "virtualNetworkName": "MyVNET", - "vnetID": "[resourceId('Microsoft.Network/virtualNetworks',variables('virtualNetworkName'))]", - "subnetRef": "[concat(variables('vnetID'),'/subnets/',variables('subnetName'))]" - }, - "resources": [ - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[variables('storageAccountName')]", - "apiVersion": "2017-06-01", - "location": "westus", - "sku": { - "name": "[variables('storageAccountType')]" - }, - "kind": "Storage", - "properties": {} - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/publicIPAddresses", - "name": "[variables('publicIPAddressName')]", - "location": "westus", - "properties": { - "publicIPAllocationMethod": "[variables('publicIPAddressType')]", - "dnsSettings": { - "domainNameLabel": "[parameters('dnsLabelPrefix')]" - } - } - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/virtualNetworks", - "name": "[variables('virtualNetworkName')]", - "location": "westus", - "properties": { - "addressSpace": { - "addressPrefixes": [ - "[variables('addressPrefix')]" - ] - }, - "subnets": [ - { - "name": "[variables('subnetName')]", - "properties": { - "addressPrefix": "[variables('subnetPrefix')]" - } - } - ] - } - }, - { - "apiVersion": "2017-04-01", - "type": "Microsoft.Network/networkInterfaces", - "name": "[variables('nicName')]", - "location": "westus", - "dependsOn": [ - "[resourceId('Microsoft.Network/publicIPAddresses/', variables('publicIPAddressName'))]", - "[resourceId('Microsoft.Network/virtualNetworks/', variables('virtualNetworkName'))]" - ], - "properties": { - "ipConfigurations": [ - { - "name": "ipconfig1", - "properties": { - "privateIPAllocationMethod": "Dynamic", - "publicIPAddress": { - "id": "[resourceId('Microsoft.Network/publicIPAddresses',variables('publicIPAddressName'))]" - }, - "subnet": { - "id": "[variables('subnetRef')]" - } - } - } - ] - } - }, - { - "apiVersion": "2017-03-30", - "type": "Microsoft.Compute/virtualMachines", - "name": "[variables('vmName')]", - "location": "westus", - "dependsOn": [ - "[resourceId('Microsoft.Storage/storageAccounts/', variables('storageAccountName'))]", - "[resourceId('Microsoft.Network/networkInterfaces/', variables('nicName'))]" - ], - "properties": { - "hardwareProfile": { - "vmSize": "[variables('vmSize')]" - }, - "osProfile": { - "computerName": "[variables('vmName')]", - "adminUsername": "[parameters('adminUsername')]", - "adminPassword": "[parameters('adminPassword')]" - }, - "storageProfile": { - "imageReference": { - "publisher": "[variables('imagePublisher')]", - "offer": "[variables('imageOffer')]", - "sku": "[parameters('ubuntuOSVersion')]", - "version": "latest" - }, - "osDisk": { - "createOption": "FromImage" - }, - "dataDisks": [ - { - "diskSizeGB": "1023", - "lun": 0, - "createOption": "Empty" - } - ] - }, - "networkProfile": { - "networkInterfaces": [ - { - "id": "[resourceId('Microsoft.Network/networkInterfaces',variables('nicName'))]" - } - ] - }, - "diagnosticsProfile": { - "bootDiagnostics": { - "enabled": "true", - "storageUri": "[concat(reference(concat('Microsoft.Storage/storageAccounts/', variables('storageAccountName')), '2016-01-01').primaryEndpoints.blob)]" - } - } - } - } - ], - "outputs": { - "hostname": { - "type": "string", - "value": "[reference(variables('publicIPAddressName')).dnsSettings.fqdn]" - }, - "sshCommand": { - "type": "string", - "value": "[concat('ssh ', parameters('adminUsername'), '@', reference(variables('publicIPAddressName')).dnsSettings.fqdn)]" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param.json deleted file mode 100644 index a8a8df49f7f..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "allowedLocations": { - "value": [ - "australiaeast", - "eastus", - "japaneast", - "westus" - ] - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param_def.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param_def.json deleted file mode 100644 index a35854b9b18..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_param_def.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "allowedLocations": { - "type": "array", - "metadata": { - "description": "The list of locations that can be specified when deploying resources", - "strongType": "location", - "displayName": "Allowed locations" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_rule.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_rule.json deleted file mode 100644 index fbe0ed5d654..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_rule.json +++ /dev/null @@ -1,11 +0,0 @@ -{ - "if": { - "not": { - "field": "location", - "in": "[parameters('allowedLocations')]" - } - }, - "then": { - "effect": "deny" - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_set.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_set.json deleted file mode 100644 index a4ca9121bee..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/sample_policy_set.json +++ /dev/null @@ -1 +0,0 @@ -[{"parameters": {"allowedLocations": {"value": ["australiaeast", "eastus", "japaneast", "westus"]}}, "policyDefinitionId": "/subscriptions/00000000-0000-0000-0000-000000000000/providers/Microsoft.Authorization/policyDefinitions/azure-cli-test-policy000002"}] \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy.json deleted file mode 100644 index f35114273a8..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "location": { - "type": "string", - "defaultValue": "[resourceGroup().location]", - "metadata": { - "description": "Location for the network security group." - } - }, - "name": { - "type": "string", - "metadata": { - "description": "Name of the network security group." - } - } - }, - "variables": { - }, - "resources": [ - { - "type": "Microsoft.Network/networkSecurityGroups", - "name": "[parameters('name')]", - "apiVersion": "2015-06-15", - "location": "[parameters('location')]", - "properties": { - "securityRules": [ - ] - }, - "dependsOn": [ ] - } - ], - "outputs": { - "NewNSG": { - "type": "object", - "value": "[reference(parameters('name'))]" - } - } -} diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy_parameters.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy_parameters.json deleted file mode 100644 index 40c143fbf58..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/simple_deploy_parameters.json +++ /dev/null @@ -1,10 +0,0 @@ -{ - "parameters": { - "location": { - "value": "westus" - }, - "name": { - "value": "azure-cli-deploy-test-nsg1" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_parameters.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_parameters.json deleted file mode 100644 index d019608cf0f..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_parameters.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "storageAccountName": { - "value": "armbuilddemo1809" - }, - "nestedRGName": { - "value": "cli_test_subscription_level_deployment" - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_template.json deleted file mode 100644 index f8a2c8c80dd..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/subscription_level_template.json +++ /dev/null @@ -1,73 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "storageAccountName": { - "type": "string", - "defaultValue": "armbuilddemo1801" - }, - "nestedRGName": { - "type": "string", - "defaultValue": "cli_test_subscription_level_deployment" - } - }, - "variables": {}, - "resources": [ - { - "type": "Microsoft.Authorization/policyDefinitions", - "name": "policy2", - "apiVersion": "2016-12-01", - "properties": { - "policyType": "Custom", - "parameters": {}, - "policyRule": { - "if": { - "field": "location", - "equals": "northeurope" - }, - "then": { - "effect": "deny" - } - } - } - }, - { - "type": "Microsoft.Authorization/policyAssignments", - "name": "location-lock", - "apiVersion": "2016-12-01", - "dependsOn": [ - "policy2" - ], - "properties": { - "scope": "[subscription().id]", - "policyDefinitionId": "[resourceId('Microsoft.Authorization/policyDefinitions', 'policy2')]" - } - }, - { - "type": "Microsoft.Resources/deployments", - "name": "rg-nested", - "apiVersion": "2017-05-10", - "resourceGroup": "[parameters('nestedRGName')]", - "properties": { - "template": { - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": {}, - "variables": {}, - "resources": [ - { - "type": "Microsoft.Storage/storageAccounts", - "name": "[parameters('storageAccountName')]", - "apiVersion": "2015-06-15", - "location": "East US", - "properties": { - "accountType": "Standard_LRS" - } - } - ] - }, - "mode":"Incremental" - } - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-object.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-object.json deleted file mode 100644 index 64799c0ed6b..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-object.json +++ /dev/null @@ -1,8 +0,0 @@ -[ - { - "name": "bepool1" - }, - { - "name": "bepool2" - } -] \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-params.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-params.json deleted file mode 100644 index ef8b30fdcb3..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-params.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentParameters.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "name": { - "value": "test-lb" - }, - "location": { - "value": "westus" - }, - "privateIPAllocationMethod": { - "value": "Dynamic" - }, - "tags": { - "value": { - "key": "super=value" - } - } - } -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template-lite.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template-lite.json deleted file mode 100644 index 7df0aa57496..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template-lite.json +++ /dev/null @@ -1,5 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "resources": [] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template.json b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template.json deleted file mode 100644 index cdd7f5a8b73..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test-template.json +++ /dev/null @@ -1,48 +0,0 @@ -{ - "$schema": "http://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#", - "contentVersion": "1.0.0.0", - "parameters": { - "name": { - "type": "string" - }, - "location": { - "type": "string" - }, - "subnetId": { - "type": "string" - }, - "privateIPAllocationMethod": { - "type": "string" - }, - "backendAddressPools": { - "type": "array" - }, - "tags": { - "type": "object" - } - }, - "resources": [ - { - "apiVersion": "2016-03-30", - "dependsOn": [ ], - "location": "[parameters('location')]", - "name": "[parameters('name')]", - "properties": { - "frontendIPConfigurations": [ - { - "name": "LoadBalancerFrontEnd", - "properties": { - "privateIPAllocationMethod": "[parameters('privateIPAllocationMethod')]", - "subnet": { - "id": "[parameters('subnetId')]" - } - } - } - ], - "backendAddressPools": "[parameters('backendAddressPools')]" - }, - "tags": "[parameters('tags')]", - "type": "Microsoft.Network/loadBalancers" - } - ] -} \ No newline at end of file diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_api_check.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_api_check.py deleted file mode 100644 index 05bf47dc968..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_api_check.py +++ /dev/null @@ -1,97 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -from unittest.mock import MagicMock - -from knack.util import CLIError -from azure.cli.command_modules.resource.custom import (_ResourceUtils, _validate_resource_inputs, - parse_resource_id) - - -class TestApiCheck(unittest.TestCase): - @classmethod - def setUpClass(cls): - pass - - @classmethod - def tearDownClass(cls): - pass - - def setUp(self): - pass - - def tearDown(self): - pass - - def test_parse_resource(self): - parts = parse_resource_id('/subscriptions/00000/resourcegroups/bocconitestlabrg138089/' - 'providers/microsoft.devtestlab/labs/bocconitestlab/' - 'virtualmachines/tasktest1') - self.assertIsNotNone(parts.get('type')) - - def test_parse_resource_capital(self): - parts = parse_resource_id('/subscriptions/00000/resourceGroups/bocconitestlabrg138089/' - 'providers/microsoft.devtestlab/labs/bocconitestlab/' - 'virtualmachines/tasktest1') - self.assertIsNotNone(parts.get('type')) - - def test_validate_resource_inputs(self): - self.assertRaises(CLIError, _validate_resource_inputs, None, None, None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', None, None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', 'b', None, None) - self.assertRaises(CLIError, _validate_resource_inputs, 'a', 'b', 'c', None) - _validate_resource_inputs('a', 'b', 'c', 'd') - - def test_resolve_api_provider_backup(self): - # Verifies provider is used as backup if api-version not specified. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, resource_type='Mock/test', resource_name='vnet1', - resource_group_name='rg', rcf=rcf) - self.assertEqual(res_utils.api_version, "2016-01-01") - - def test_resolve_api_provider_with_parent_backup(self): - # Verifies provider (with parent) is used as backup if api-version not specified. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, parent_resource_path='foo/testfoo123', resource_group_name='rg', - resource_provider_namespace='Mock', resource_type='test', - resource_name='vnet1', - rcf=rcf) - self.assertEqual(res_utils.api_version, "1999-01-01") - - def test_resolve_api_all_previews(self): - # Verifies most recent preview version returned only if there are no non-preview versions. - from azure.cli.core.mock import DummyCli - cli = DummyCli() - rcf = self._get_mock_client() - res_utils = _ResourceUtils(cli, resource_type='Mock/preview', resource_name='vnet1', - resource_group_name='rg', rcf=rcf) - self.assertEqual(res_utils.api_version, "2005-01-01-preview") - - def _get_mock_client(self): - client = MagicMock() - provider = MagicMock() - provider.resource_types = [ - self._get_mock_resource_type('skip', ['2000-01-01-preview', '2000-01-01']), - self._get_mock_resource_type('test', ['2016-01-01-preview', '2016-01-01']), - self._get_mock_resource_type('foo', ['1999-01-01-preview', '1999-01-01']), - self._get_mock_resource_type('preview', ['2005-01-01-preview', '2004-01-01-preview']) - ] - client.providers.get.return_value = provider - return client - - def _get_mock_resource_type(self, name, api_versions): # pylint: disable=no-self-use - rt = MagicMock() - rt.resource_type = name - rt.api_versions = api_versions - return rt - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_locks.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_locks.py deleted file mode 100644 index ac0bb29a7d1..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_locks.py +++ /dev/null @@ -1,388 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -from time import sleep -import unittest -from azure.cli.testsdk import ScenarioTest, JMESPathCheck, ResourceGroupPreparer, record_only -from azure.cli.command_modules.resource.custom import _parse_lock_id - - -class ResourceLockTests(ScenarioTest): - def test_list_locks(self): - # just make sure this doesn't throw - self.cmd('az lock list').get_output_in_json() - - @record_only() - def test_generic_subscription_locks(self): - for lock_type in ['ReadOnly', 'CanNotDelete']: - lock_name = self.create_random_name('cli-test-lock', 48) - lock = self.cmd('az lock create -n {} --lock-type {}'.format(lock_name, lock_type)).get_output_in_json() - lock_id = lock.get('id') - self._sleep_for_lock_operation() - - locks_list = self.cmd('az lock list').get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, [lock['name'] for lock in locks_list]) - - lock = self.cmd('az lock show -n {}'.format(lock_name)).get_output_in_json() - lock_from_id = self.cmd('az lock show --ids {}'.format(lock_id)).get_output_in_json() - - self.assertEqual(lock.get('name', None), lock_name) - self.assertEqual(lock_from_id.get('name', None), lock_name) - self.assertEqual(lock.get('level', None), lock_type) - - notes = self.create_random_name('notes', 20) - new_lvl = 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - lock = self.cmd('az lock update -n {} --notes {} --lock-type {}' - .format(lock_name, notes, new_lvl)).get_output_in_json() - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), new_lvl) - - lock = self.cmd('az lock update --ids {} --lock-type {}' - .format(lock_id, lock_type)).get_output_in_json() - self.assertEqual(lock.get('level', None), lock_type) - - self.cmd('az lock delete -n {}'.format(lock_name)) - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_readonly_resource_group_lock') - def test_readonly_resource_group_lock(self, resource_group): - self._lock_operation_with_resource_group('ReadOnly', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_cannotdelete_resource_group_lock') - def test_cannotdelete_resource_group_lock(self, resource_group): - self._lock_operation_with_resource_group('CanNotDelete', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_readonly_resource_lock') - def test_readonly_resource_lock(self, resource_group): - self._lock_operation_with_resource('ReadOnly', resource_group) - - @ResourceGroupPreparer(name_prefix='cli_test_cannotdelete_resource_lock') - def test_cannotdelete_resource_lock(self, resource_group): - self._lock_operation_with_resource('CanNotDelete', resource_group) - - def _lock_operation_with_resource_group(self, lock_type, resource_group): - - self.kwargs = { - 'rg': resource_group, - 'type': lock_type, - 'lock': self.create_random_name('cli-test-lock', 48) - } - - self.cmd('az lock create -n {lock} -g {rg} --lock-type {type}') - self._sleep_for_lock_operation() - - self.cmd('az lock show -g {rg} -n {lock}', checks=[ - self.check('name', '{lock}'), - self.check('level', '{type}') - ]) - - locks_list = self.cmd("az lock list -g {rg} --query '[].name'").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(self.kwargs['lock'], locks_list) - - self.kwargs.update({ - 'notes': self.create_random_name('notes', 20), - 'new_lvl': 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - }) - self.cmd('az lock update -n {lock} -g {rg} --notes {notes} --lock-type {new_lvl}', checks=[ - self.check('notes', '{notes}'), - self.check('level', '{new_lvl}') - ]).get_output_in_json() - - self.cmd('az lock delete -g {rg} -n {lock}') - self._sleep_for_lock_operation() - - def _lock_operation_with_resource(self, lock_type, resource_group): - rsrc_name = self.create_random_name('cli.lock.rsrc', 30) - rsrc_type = 'Microsoft.Network/virtualNetworks' - lock_name = self.create_random_name('cli-test-lock', 74) - - self.cmd('az network vnet create -n {} -g {}'.format(rsrc_name, resource_group)) - self.cmd('az lock create -n {} -g {} --resource-type {} --resource-name {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, lock_type)) - self._sleep_for_lock_operation() - - self.cmd('az lock show --name {} -g {} --resource-type {} --resource-name {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name)).assert_with_checks([ - JMESPathCheck('name', lock_name), - JMESPathCheck('level', lock_type)]) - - locks_list = self.cmd("az lock list --query '[].name' -ojson").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - notes = self.create_random_name('notes', 20) - new_lvl = 'ReadOnly' if lock_type == 'CanNotDelete' else 'CanNotDelete' - lock = self.cmd('az lock update -n {} -g {} --resource-type {} --resource-name {} --notes {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, notes, new_lvl)).get_output_in_json() - - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), new_lvl) - - self.cmd('az lock delete --name {} -g {} --resource-name {} --resource-type {}' - .format(lock_name, resource_group, rsrc_name, rsrc_type)) - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_group_lock') - def test_group_lock_commands(self, resource_group): - - self.kwargs = { - 'rg': resource_group, - 'lock': self.create_random_name('cli-test-lock', 48), - 'notes': self.create_random_name('notes', 20) - } - - self.cmd('group lock create -n {lock} -g {rg} --lock-type CanNotDelete') - self._sleep_for_lock_operation() - - self.cmd('group lock show -g {rg} -n {lock}', checks=[ - self.check('name', '{lock}'), - self.check('level', 'CanNotDelete') - ]) - - locks_list = self.cmd("group lock list -g {rg} --query [].name").get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(self.kwargs['lock'], locks_list) - - self.cmd('group lock update -n {lock} -g {rg} --notes {notes} --lock-type ReadOnly', checks=[ - self.check('notes', '{notes}'), - self.check('level', 'ReadOnly') - ]) - - self.cmd('group lock delete -g {rg} -n {lock}') - self._sleep_for_lock_operation() - - @ResourceGroupPreparer(name_prefix='cli_test_resource_lock') - def test_resource_lock_commands(self, resource_group): - rsrc_name = self.create_random_name('cli.lock.rsrc', 30) - rsrc_type = 'Microsoft.Network/virtualNetworks' - lock_name = self.create_random_name('cli-test-lock', 74) - lock_type = 'CanNotDelete' - - self.cmd('network vnet create -n {} -g {}'.format(rsrc_name, resource_group)) - self.cmd('resource lock create -n {} -g {} --resource-type {} --resource-name {} --lock-type {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name, lock_type)) - self._sleep_for_lock_operation() - - self.cmd('resource lock show --name {} -g {} --resource-type {} --resource-name {}' - .format(lock_name, resource_group, rsrc_type, rsrc_name)).assert_with_checks([ - JMESPathCheck('name', lock_name), - JMESPathCheck('level', lock_type)]) - - list_cmd = "resource lock list -g {} --resource-type {} --resource-name {} " \ - "--query [].name -ojson".format(resource_group, rsrc_type, rsrc_name) - locks_list = self.cmd(list_cmd).get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - notes = self.create_random_name('notes', 20) - lock = self.cmd('resource lock update -n {} -g {} --resource-type {} --resource-name {} --notes {} ' - '--lock-type ReadOnly' - .format(lock_name, resource_group, rsrc_type, rsrc_name, notes)).get_output_in_json() - - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), 'ReadOnly') - - self.cmd('resource lock delete --name {} -g {} --resource-name {} --resource-type {}' - .format(lock_name, resource_group, rsrc_name, rsrc_type)) - self._sleep_for_lock_operation() - - @record_only() - def test_subscription_locks(self): - lock_name = self.create_random_name('cli-test-lock', 48) - lock = self.cmd('az account lock create -n {} --lock-type CanNotDelete'.format(lock_name)).get_output_in_json() - lock_id = lock.get('id') - - locks_list = self.cmd('az account lock list --query [].name').get_output_in_json() - self.assertTrue(locks_list) - self.assertIn(lock_name, locks_list) - - lock = self.cmd('az account lock show -n {}'.format(lock_name)).get_output_in_json() - lock_from_id = self.cmd('az account lock show --ids {}'.format(lock_id)).get_output_in_json() - - self.assertEqual(lock.get('name', None), lock_name) - self.assertEqual(lock_from_id.get('name', None), lock_name) - self.assertEqual(lock.get('level', None), 'CanNotDelete') - - notes = self.create_random_name('notes', 20) - lock = self.cmd('az account lock update -n {} --notes {} --lock-type {}' - .format(lock_name, notes, 'ReadOnly')).get_output_in_json() - self.assertEqual(lock.get('notes', None), notes) - self.assertEqual(lock.get('level', None), 'ReadOnly') - - lock = self.cmd('az account lock update --ids {} --lock-type {}' - .format(lock_id, 'CanNotDelete')).get_output_in_json() - self.assertEqual(lock.get('level', None), 'CanNotDelete') - - self.cmd('az account lock delete -n {}'.format(lock_name)) - - @ResourceGroupPreparer(name_prefix='cli_test_lock_commands_with_ids') - def test_lock_commands_with_ids(self, resource_group): - vnet_name = self.create_random_name('cli-lock-vnet', 30) - subnet_name = self.create_random_name('cli-lock-subnet', 30) - group_lock_name = self.create_random_name('cli-test-lock', 50) - vnet_lock_name = self.create_random_name('cli-test-lock', 50) - subnet_lock_name = self.create_random_name('cli-test-lock', 20) - - vnet = self.cmd('az network vnet create -n {} -g {}'.format(vnet_name, resource_group)).get_output_in_json() - subnetaddress = vnet.get('newVNet').get('addressSpace').get('addressPrefixes')[0] - self.cmd('az network vnet subnet create -n {} --address-prefix {} --vnet-name {} -g {}' - .format(subnet_name, subnetaddress, vnet_name, resource_group)) - - locks = [] - locks.append(self.cmd('az lock create -n {} -g {} --lock-type CanNotDelete' - .format(group_lock_name, resource_group)).get_output_in_json()) - locks.append(self.cmd('az lock create -n {} -g {} --resource-type Microsoft.Network/virtualNetworks' - ' --resource-name {} --lock-type CanNotDelete' - .format(vnet_lock_name, resource_group, vnet_name)).get_output_in_json()) - locks.append(self.cmd('az lock create -n {} -g {} --resource-name {} --resource-type subnets ' - '--namespace Microsoft.Network --parent virtualNetworks/{} --lock-type CanNotDelete' - .format(subnet_lock_name, resource_group, subnet_name, vnet_name)).get_output_in_json()) - self._sleep_for_lock_operation() - - space_delimited_ids = ' '.join([lock.get('id', None) for lock in locks]) - - my_locks = self.cmd('az lock show --ids {} --query [].name'.format(space_delimited_ids)).get_output_in_json() - self.assertTrue(len(my_locks) == 3) - for lock in my_locks: - self.assertIn(lock, [group_lock_name, vnet_lock_name, subnet_lock_name]) - - my_locks = self.cmd('az lock update --ids {} --notes somenotes --lock-type ReadOnly' - .format(space_delimited_ids)).get_output_in_json() - self.assertTrue(len(my_locks) == 3) - for lock in my_locks: - self.assertEqual(lock.get('notes', None), 'somenotes') - self.assertEqual(lock.get('level', None), 'ReadOnly') - - self.cmd('az lock delete --ids {}'.format(space_delimited_ids)) - self._sleep_for_lock_operation() - - my_locks = self.cmd("az lock list -g {} -ojson".format(resource_group)).get_output_in_json() - self.assertFalse(my_locks) - - @ResourceGroupPreparer(name_prefix='cli_test_lock_with_resource_id') - def test_lock_with_resource_id(self, resource_group): - vnet_name = self.create_random_name('cli-lock-vnet', 30) - subnet_name = self.create_random_name('cli-lock-subnet', 30) - vnet_lock_name = self.create_random_name('cli-test-lock', 50) - subnet_lock_name = self.create_random_name('cli-test-lock', 20) - - vnet = self.cmd('network vnet create -n {} -g {}'.format(vnet_name, resource_group)).get_output_in_json() - vnet_id = vnet.get('newVNet').get('id') - subnetaddress = vnet.get('newVNet').get('addressSpace').get('addressPrefixes')[0] - subnet_id = self.cmd('network vnet subnet create -n {} --address-prefix {} --vnet-name {} -g {}' - .format(subnet_name, subnetaddress, - vnet_name, resource_group)).get_output_in_json().get('id') - - self.cmd('resource lock create -n {} --resource {} --lock-type CanNotDelete'.format(vnet_lock_name, vnet_id)) - self.cmd('lock create -n {} --resource {} --lock-type CanNotDelete'.format(subnet_lock_name, subnet_id)) - - self.cmd('resource lock show --name {} --resource {}' - .format(vnet_lock_name, vnet_id)).assert_with_checks([JMESPathCheck('name', vnet_lock_name)]) - self.cmd('lock show --name {} --resource {}' - .format(subnet_lock_name, subnet_id)).assert_with_checks([JMESPathCheck('name', subnet_lock_name)]) - - self.cmd('resource lock delete --name {} --resource {}'.format(vnet_lock_name, vnet_id)) - self.cmd('lock delete --name {} --resource {}'.format(subnet_lock_name, subnet_id)) - - self._sleep_for_lock_operation() - - def _sleep_for_lock_operation(self): - if self.is_live: - sleep(5) - - -class ParseIdTests(unittest.TestCase): - def test_parsing_lock_ids(self): - tests = [ - { - 'input': "/subscriptions/subId/providers/" - "Microsoft.Authorization/locks/sublock", - 'expected': { - 'resource_group': None, - 'resource_provider_namespace': None, - 'parent_resource_path': None, - 'resource_type': None, - 'resource_name': None, - 'lock_name': 'sublock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/examplegroup/providers/" - "Microsoft.Authorization/locks/grouplock", - 'expected': { - 'resource_group': 'examplegroup', - 'resource_provider_namespace': None, - 'parent_resource_path': None, - 'resource_type': None, - 'resource_name': None, - 'lock_name': 'grouplock' - } - }, - { - 'input': "/subscriptions/subId/resourcegroups/mygroup/providers/" - "Microsoft.Network/virtualNetworks/myvnet/providers/" - "Microsoft.Authorization/locks/vnetlock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Network', - 'parent_resource_path': None, - 'resource_type': 'virtualNetworks', - 'resource_name': 'myvnet', - 'lock_name': 'vnetlock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/mygroup/providers/" - "Microsoft.Network/virtualNetworks/myvnet/subnets/subnet/providers/" - "Microsoft.Authorization/locks/subnetlock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Network', - 'parent_resource_path': 'virtualNetworks/myvnet', - 'resource_type': 'subnets', - 'resource_name': 'subnet', - 'lock_name': 'subnetlock' - } - }, - { - 'input': "/subscriptions/subId/resourceGroups/mygroup/providers/" - "Microsoft.Provider1/resourceType1/name1/providers/" - "Microsoft.Provider2/resourceType2/name2/providers/" - "Microsoft.Authorization/locks/somelock", - 'expected': { - 'resource_group': 'mygroup', - 'resource_provider_namespace': 'Microsoft.Provider1', - 'parent_resource_path': 'resourceType1/name1/providers/Microsoft.Provider2', - 'resource_type': 'resourceType2', - 'resource_name': 'name2', - 'lock_name': 'somelock' - } - } - ] - for test in tests: - kwargs = _parse_lock_id(test['input']) - self.assertDictEqual(kwargs, test['expected']) - - fail_tests = [ - "/notsubscriptions/subId/providers/Microsoft.Authorization/locks/sublock", - "/subscriptions/subId/notResourceGroups/examplegroup/providers/Microsoft.Authorization/locks/grouplock", - "/subscriptions/subId/resourceGroups/examplegroup/providers/Microsoft.NotAuthorization/not_locks/grouplock", - "/subscriptions/subId/resourcegroups/mygroup/Microsoft.Network/virtualNetworks/myvnet/providers/" - "Microsoft.Authorization/locks/missingProvidersLock", - "/subscriptions/subId/resourcegroups/mygroup/providers/Microsoft.Network/myvnet/providers/" - "Microsoft.Authorization/locks/missingRsrcTypeLock", - "/subscriptions/subId/providers/Microsoft.Network/virtualNetworks/myvnet/subnets/subnet/providers/" - "Microsoft.Authorization/locks/missingRsrcGroupLock", - "not_a_id_at_all" - ] - for test in fail_tests: - with self.assertRaises(AttributeError): - _parse_lock_id(test) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_managmentgroups.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_managmentgroups.py deleted file mode 100644 index 0cb8d1ea475..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_managmentgroups.py +++ /dev/null @@ -1,415 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -from azure.cli.testsdk import ScenarioTest, record_only -import pytest - -class AzureManagementGroupsScenarioTest(ScenarioTest): - - def test_list_managementgroups(self): - managementgroups_list = self.cmd( - 'account management-group list').get_output_in_json() - self.assertIsNotNone(managementgroups_list) - self.assertTrue(len(managementgroups_list) > 0) - self.assertIsNotNone(managementgroups_list[0]["displayName"]) - self.assertTrue(managementgroups_list[0]["id"].startswith( - "/providers/Microsoft.Management/managementGroups/")) - self.assertIsNotNone(managementgroups_list[0]["name"]) - self.assertIsNotNone(managementgroups_list[0]["tenantId"]) - self.assertEqual( - managementgroups_list[0]["type"], - "Microsoft.Management/managementGroups") - - def test_show_managementgroup(self): - self.cmd('account management-group create --name testcligetgroup') - self.cmd('account management-group create --name testcligetgroup1 --parent /providers/Microsoft.Management/managementGroups/testcligetgroup') - managementgroup_get = self.cmd( - 'account management-group show --name testcligetgroup1').get_output_in_json() - self.cmd('account management-group delete --name testcligetgroup1') - self.cmd('account management-group delete --name testcligetgroup') - - self.assertIsNotNone(managementgroup_get) - self.assertIsNone(managementgroup_get["children"]) - self.assertIsNotNone(managementgroup_get["details"]) - self.assertEqual( - managementgroup_get["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup1") - self.assertEqual(managementgroup_get["name"], "testcligetgroup1") - self.assertEqual( - managementgroup_get["displayName"], - "testcligetgroup1") - self.assertEqual( - managementgroup_get["details"]["parent"]["displayName"], - "testcligetgroup") - self.assertEqual( - managementgroup_get["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup") - self.assertEqual( - managementgroup_get["details"]["parent"]["name"], - "testcligetgroup") - self.assertIsNotNone(managementgroup_get["tenantId"]) - self.assertEqual( - managementgroup_get["type"], - "Microsoft.Management/managementGroups") - - def test_show_managementgroup_with_expand(self): - self.cmd('account management-group create --name testcligetgroup') - self.cmd('account management-group create --name testcligetgroup1 --parent testcligetgroup') - self.cmd('account management-group create --name testcligetgroup2 --parent /providers/Microsoft.Management/managementGroups/testcligetgroup1') - managementgroup_get = self.cmd( - 'account management-group show --name testcligetgroup1 --expand').get_output_in_json() - self.cmd('account management-group delete --name testcligetgroup2') - self.cmd('account management-group delete --name testcligetgroup1') - self.cmd('account management-group delete --name testcligetgroup') - - self.assertIsNotNone(managementgroup_get) - self.assertIsNotNone(managementgroup_get["children"]) - self.assertIsNotNone(managementgroup_get["details"]) - self.assertEqual( - managementgroup_get["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup1") - self.assertEqual(managementgroup_get["name"], "testcligetgroup1") - self.assertEqual( - managementgroup_get["displayName"], - "testcligetgroup1") - self.assertEqual( - managementgroup_get["details"]["parent"]["displayName"], - "testcligetgroup") - self.assertEqual( - managementgroup_get["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup") - self.assertEqual( - managementgroup_get["details"]["parent"]["name"], - "testcligetgroup") - self.assertIsNotNone(managementgroup_get["tenantId"]) - self.assertEqual( - managementgroup_get["type"], - "Microsoft.Management/managementGroups") - self.assertEqual( - managementgroup_get["children"][0]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup2") - self.assertEqual( - managementgroup_get["children"][0]["type"], - "Microsoft.Management/managementGroups") - self.assertEqual( - managementgroup_get["children"][0]["displayName"], - "testcligetgroup2") - self.assertEqual( - managementgroup_get["children"][0]["name"], - "testcligetgroup2") - - def test_show_managementgroup_with_expand_and_recurse(self): - self.cmd('account management-group create --name testcligetgroup1') - self.cmd('account management-group create --name testcligetgroup2 --parent /providers/Microsoft.Management/managementGroups/testcligetgroup1') - self.cmd('account management-group create --name testcligetgroup3 --parent testcligetgroup2') - self.cmd('account management-group create --name testcligetgroup4 --parent /providers/Microsoft.Management/managementGroups/testcligetgroup3') - managementgroup_get = self.cmd( - 'account management-group show --name testcligetgroup2 --expand --recurse').get_output_in_json() - self.cmd('account management-group delete --name testcligetgroup4') - self.cmd('account management-group delete --name testcligetgroup3') - self.cmd('account management-group delete --name testcligetgroup2') - self.cmd('account management-group delete --name testcligetgroup1') - - self.assertIsNotNone(managementgroup_get) - self.assertIsNotNone(managementgroup_get["children"]) - self.assertIsNotNone(managementgroup_get["details"]) - self.assertEqual( - managementgroup_get["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup2") - self.assertEqual(managementgroup_get["name"], "testcligetgroup2") - self.assertEqual( - managementgroup_get["displayName"], - "testcligetgroup2") - self.assertEqual( - managementgroup_get["details"]["parent"]["displayName"], - "testcligetgroup1") - self.assertEqual( - managementgroup_get["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup1") - self.assertEqual( - managementgroup_get["details"]["parent"]["name"], - "testcligetgroup1") - self.assertIsNotNone(managementgroup_get["tenantId"]) - self.assertEqual( - managementgroup_get["type"], - "Microsoft.Management/managementGroups") - self.assertEqual( - managementgroup_get["children"][0]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup3") - self.assertEqual( - managementgroup_get["children"][0]["type"], - "Microsoft.Management/managementGroups") - self.assertEqual( - managementgroup_get["children"][0]["displayName"], - "testcligetgroup3") - self.assertEqual( - managementgroup_get["children"][0]["name"], - "testcligetgroup3") - self.assertEqual( - managementgroup_get["children"][0]["children"][0]["id"], - "/providers/Microsoft.Management/managementGroups/testcligetgroup4") - self.assertEqual( - managementgroup_get["children"][0]["children"][0]["type"], - "Microsoft.Management/managementGroups") - self.assertEqual( - managementgroup_get["children"][0]["children"][0]["displayName"], - "testcligetgroup4") - self.assertEqual( - managementgroup_get["children"][0]["children"][0]["name"], - "testcligetgroup4") - - def test_create_managementgroup(self): - name = "testcligroup" - displayName = "testcligroup" - managementgroup_create = self.cmd( - 'account management-group create --name ' + - name).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - - self.assertIsNotNone(managementgroup_create) - self.assertIsNotNone(managementgroup_create["details"]) - self.assertEqual( - managementgroup_create["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_create["name"], name) - self.assertEqual( - managementgroup_create["displayName"], - displayName) - self.assertEqual( - managementgroup_create["details"]["parent"]["displayName"], - "Root Management Group") - self.assertEqual( - managementgroup_create["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/" + - managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["details"]["parent"]["name"], - managementgroup_create["tenantId"]) - self.assertIsNotNone(managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["type"], - "Microsoft.Management/managementGroups") - - def test_create_managementgroup_with_displayname(self): - name = "testcligroup" - displayName = "TestCliDisplayName" - managementgroup_create = self.cmd( - 'account management-group create --name ' + - name + - ' --display-name ' + - displayName).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - - self.assertIsNotNone(managementgroup_create) - self.assertIsNotNone(managementgroup_create["details"]) - self.assertEqual( - managementgroup_create["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_create["name"], name) - self.assertEqual( - managementgroup_create["displayName"], - displayName) - self.assertEqual( - managementgroup_create["details"]["parent"]["displayName"], - "Root Management Group") - self.assertEqual( - managementgroup_create["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/" + - managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["details"]["parent"]["name"], - managementgroup_create["tenantId"]) - self.assertIsNotNone(managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["type"], - "Microsoft.Management/managementGroups") - - def test_create_managementgroup_with_parentid(self): - name = "testcligroupchild" - displayName = "testcligroupchild" - parentId = "/providers/Microsoft.Management/managementGroups/testcligroup" - parentName = "testcligroup" - self.cmd('account management-group create --name ' + parentName) - managementgroup_create = self.cmd( - 'account management-group create --name ' + - name + - ' --parent ' + - parentId).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - self.cmd('account management-group delete --name ' + parentName) - - self.assertIsNotNone(managementgroup_create) - self.assertIsNotNone(managementgroup_create["details"]) - self.assertEqual( - managementgroup_create["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_create["name"], name) - self.assertEqual( - managementgroup_create["displayName"], - displayName) - self.assertEqual( - managementgroup_create["details"]["parent"]["displayName"], - parentName) - self.assertEqual( - managementgroup_create["details"]["parent"]["id"], - parentId) - self.assertEqual( - managementgroup_create["details"]["parent"]["name"], - parentName) - self.assertIsNotNone(managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["type"], - "Microsoft.Management/managementGroups") - - def test_create_managementgroup_with_displayname_and_parentid(self): - name = "testcligroupchild" - displayName = "testcligroupchildDisplayName" - parentId = "/providers/Microsoft.Management/managementGroups/testcligroup" - parentName = "testcligroup" - self.cmd('account management-group create --name ' + parentName) - managementgroup_create = self.cmd( - 'account management-group create --name ' + - name + - ' --display-name ' + - displayName + - ' --parent ' + - parentName).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - self.cmd('account management-group delete --name ' + parentName) - - self.assertIsNotNone(managementgroup_create) - self.assertIsNotNone(managementgroup_create["details"]) - self.assertEqual( - managementgroup_create["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_create["name"], name) - self.assertEqual( - managementgroup_create["displayName"], - displayName) - self.assertEqual( - managementgroup_create["details"]["parent"]["displayName"], - parentName) - self.assertEqual( - managementgroup_create["details"]["parent"]["id"], - parentId) - self.assertEqual( - managementgroup_create["details"]["parent"]["name"], - parentName) - self.assertIsNotNone(managementgroup_create["tenantId"]) - self.assertEqual( - managementgroup_create["type"], - "Microsoft.Management/managementGroups") - - def test_update_managementgroup_with_displayname(self): - name = "testcligroup" - displayName = "testcligroupDisplayName" - self.cmd('account management-group create --name ' + name) - managementgroup_update = self.cmd( - 'account management-group update --name ' + - name + - ' --display-name ' + - displayName).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - - self.assertIsNotNone(managementgroup_update) - self.assertIsNotNone(managementgroup_update["details"]) - self.assertEqual( - managementgroup_update["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_update["name"], name) - self.assertEqual(managementgroup_update["displayName"], displayName) - self.assertEqual( - managementgroup_update["details"]["parent"]["displayName"], - "Root Management Group") - self.assertEqual( - managementgroup_update["details"]["parent"]["id"], - "/providers/Microsoft.Management/managementGroups/" + - managementgroup_update["tenantId"]) - self.assertEqual( - managementgroup_update["details"]["parent"]["name"], - managementgroup_update["tenantId"]) - self.assertIsNotNone(managementgroup_update["tenantId"]) - self.assertEqual( - managementgroup_update["type"], - "Microsoft.Management/managementGroups") - - def test_update_managementgroup_with_parentid(self): - name = "testcligroupchild" - displayName = "testcligroupchild" - parentId = "/providers/Microsoft.Management/managementGroups/testcligroup" - parentName = "testcligroup" - self.cmd('account management-group create --name ' + parentName) - self.cmd('account management-group create --name ' + name) - managementgroup_update = self.cmd( - 'account management-group update --name ' + - name + - ' --parent ' + - parentId).get_output_in_json() - print(managementgroup_update) - self.cmd('account management-group delete --name ' + name) - self.cmd('account management-group delete --name ' + parentName) - - self.assertIsNotNone(managementgroup_update) - self.assertIsNotNone(managementgroup_update["details"]) - self.assertEqual( - managementgroup_update["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_update["name"], name) - self.assertEqual(managementgroup_update["displayName"], displayName) - self.assertEqual( - managementgroup_update["details"]["parent"]["displayName"], - parentName) - self.assertEqual( - managementgroup_update["details"]["parent"]["id"], - parentId) - self.assertEqual( - managementgroup_update["details"]["parent"]["name"], - parentName) - self.assertIsNotNone(managementgroup_update["tenantId"]) - self.assertEqual( - managementgroup_update["type"], - "Microsoft.Management/managementGroups") - - def test_update_managementgroup_with_displayname_and_parentid(self): - name = "testcligroupchild" - displayName = "testcligroupchild" - parentId = "/providers/Microsoft.Management/managementGroups/testcligroup" - parentName = "testcligroup" - self.cmd('account management-group create --name ' + parentName) - self.cmd('account management-group create --name ' + name) - managementgroup_update = self.cmd( - 'account management-group update --name ' + - name + - ' --display-name ' + - displayName + - ' --parent ' + - parentName).get_output_in_json() - self.cmd('account management-group delete --name ' + name) - self.cmd('account management-group delete --name ' + parentName) - - self.assertIsNotNone(managementgroup_update) - self.assertIsNotNone(managementgroup_update["details"]) - self.assertEqual( - managementgroup_update["id"], - "/providers/Microsoft.Management/managementGroups/" + name) - self.assertEqual(managementgroup_update["name"], name) - self.assertEqual(managementgroup_update["displayName"], displayName) - self.assertEqual( - managementgroup_update["details"]["parent"]["displayName"], - parentName) - self.assertEqual( - managementgroup_update["details"]["parent"]["id"], - parentId) - self.assertEqual( - managementgroup_update["details"]["parent"]["name"], - parentName) - self.assertIsNotNone(managementgroup_update["tenantId"]) - self.assertEqual( - managementgroup_update["type"], - "Microsoft.Management/managementGroups") - - def test_create_delete_group_managementgroup(self): - self.cmd('account management-group create --name testcligroup') - self.cmd('account management-group delete --name testcligroup') diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource.py deleted file mode 100644 index 869d21e3bb2..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource.py +++ /dev/null @@ -1,981 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import json -import os -import time -from unittest import mock -import unittest - -from azure.cli.testsdk.scenario_tests.const import MOCKED_SUBSCRIPTION_ID -from azure.cli.testsdk.scenario_tests import AllowLargeResponse -from azure.cli.testsdk import ScenarioTest, LiveScenarioTest, ResourceGroupPreparer, create_random_name, live_only, record_only -from azure.cli.core.util import get_file_json - - -class ResourceGroupScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_rg_scenario') - def test_resource_group(self, resource_group): - - self.cmd('group delete -n {rg} --yes') - self.cmd('group exists -n {rg}', - checks=self.check('@', False)) - - self.cmd('group create -n {rg} -l westus --tag a=b c', checks=[ - self.check('name', '{rg}'), - self.check('tags', {'a': 'b', 'c': ''}) - ]) - self.cmd('group exists -n {rg}', - checks=self.check('@', True)) - self.cmd('group show -n {rg}', checks=[ - self.check('name', '{rg}'), - self.check('tags', {'a': 'b', 'c': ''}) - ]) - self.cmd('group list --tag a=b', checks=[ - self.check('[0].name', '{rg}'), - self.check('[0].tags', {'a': 'b', 'c': ''}) - ]) - # test --force-string - self.kwargs.update({'tag': "\"{\\\"k\\\":\\\"v\\\"}\""}) - self.cmd('group update -g {rg} --tags ""', - checks=self.check('tags', {})) - self.cmd('group update -g {rg} --set tags.a={tag}', - checks=self.check('tags.a', "{{'k': 'v'}}")) - self.cmd('group update -g {rg} --set tags.b={tag} --force-string', - checks=self.check('tags.b', '{{\"k\":\"v\"}}')) - - -class ResourceGroupNoWaitScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_rg_nowait_test') - def test_resource_group_no_wait(self, resource_group): - - self.cmd('group delete -n {rg} --no-wait --yes', - checks=self.is_empty()) - self.cmd('group wait --deleted -n {rg}', - checks=self.is_empty()) - self.cmd('group exists -n {rg}', - checks=self.check('@', False)) - self.cmd('group create -n {rg} -l westus', - checks=self.check('name', '{rg}')) - self.cmd('group exists -n {rg}', - checks=self.check('@', True)) - self.cmd('group wait --exists -n {rg}', - checks=self.is_empty()) - - -class ResourceScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_scenario', location='southcentralus') - @AllowLargeResponse() - def test_resource_scenario(self, resource_group, resource_group_location): - self.kwargs.update({ - 'loc': resource_group_location, - 'vnet': self.create_random_name('vnet-', 30), - 'subnet': self.create_random_name('subnet-', 30), - 'rt': 'Microsoft.Network/virtualNetworks' - }) - vnet_count = self.cmd("resource list --query \"length([?name=='{vnet}'])\"").get_output_in_json() or 0 - self.cmd('network vnet create -g {rg} -n {vnet} --subnet-name {subnet} --tags cli-test=test') - vnet_count += 1 - - self.cmd('resource list', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list -l {loc}', - checks=self.check("length([?location == '{loc}']) == length(@)", True)) - self.cmd('resource list --resource-type {rt}', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list --name {vnet}', checks=[ - self.check("length([?name=='{vnet}'])", vnet_count), - self.check('[0].provisioningState', 'Succeeded') - ]) - self.cmd('resource list --tag cli-test', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - self.cmd('resource list --tag cli-test=test', - checks=self.check("length([?name=='{vnet}'])", vnet_count)) - - # check for simple resource with tag - self.cmd('resource show -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks', checks=[ - self.check('name', '{vnet}'), - self.check('location', '{loc}'), - self.check('resourceGroup', '{rg}'), - self.check('tags', {'cli-test': 'test'}) - ]) - # check for child resource - self.cmd('resource show -n {subnet} -g {rg} --namespace Microsoft.Network --parent virtualNetworks/{vnet} --resource-type subnets', checks=[ - self.check('name', '{subnet}'), - self.check('resourceGroup', '{rg}') - ]) - - # clear tag and verify - self.cmd('resource tag -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks --tags') - self.cmd('resource show -n {vnet} -g {rg} --resource-type Microsoft.Network/virtualNetworks', - checks=self.check('tags', {})) - - # delete and verify - self.cmd('resource delete -n {vnet} -g {rg} --resource-type {rt}') - time.sleep(10) - self.cmd('resource list', checks=self.check("length([?name=='{vnet}'])", 0)) - - -class ResourceIDScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_id') - def test_resource_id_scenario(self, resource_group): - - self.kwargs.update({ - 'vnet': 'cli_test_resource_id_vnet', - 'subnet': 'cli_test_resource_id_subnet' - }) - - self.cmd('network vnet create -g {rg} -n {vnet} --subnet-name {subnet}') - - self.kwargs['sub'] = self.get_subscription_id() - - self.kwargs['vnet_id'] = '/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Network/virtualNetworks/{vnet}'.format( - **self.kwargs) - self.cmd('resource tag --id {vnet_id} --tags tag-vnet') - self.cmd('resource show --id {vnet_id}', checks=[ - self.check('name', '{vnet}'), - self.check('resourceGroup', '{rg}'), - self.check('tags', {'tag-vnet': ''}) - ]) - - self.kwargs['subnet_id'] = '/subscriptions/{sub}/resourceGroups/{rg}/providers/Microsoft.Network/virtualNetworks/{vnet}/subnets/{subnet}'.format( - **self.kwargs) - self.cmd('resource show --id {subnet_id}', checks=[ - self.check('name', '{subnet}'), - self.check('resourceGroup', '{rg}'), - self.check('properties.addressPrefix', '10.0.0.0/24') - ]) - - self.cmd('resource update --id {subnet_id} --set properties.addressPrefix=10.0.0.0/22', - checks=self.check('properties.addressPrefix', '10.0.0.0/22')) - - self.cmd('resource delete --id {subnet_id}', checks=self.is_empty()) - self.cmd('resource delete --id {vnet_id}', checks=self.is_empty()) - - -class ResourceGenericUpdate(LiveScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_resource_id') - def test_resource_id_scenario(self, resource_group): - self.kwargs.update({ - 'stor_1': self.create_random_name(prefix='stor1', length=10), - 'stor_2': self.create_random_name(prefix='stor2', length=10) - }) - - # create storage accounts - self.cmd('az storage account create -g {rg} -n {stor_1}') - self.cmd('az storage account create -g {rg} -n {stor_2}') - - # get ids - self.kwargs['stor_ids'] = " ".join(self.cmd('az storage account list -g {rg} --query "[].id"').get_output_in_json()) - - # update tags - self.cmd('az storage account update --ids {stor_ids} --set tags.isTag=True tags.isNotTag=False') - - self.cmd('az storage account show --name {stor_1} -g {rg}', checks=[ - self.check('tags.isTag', 'True'), - self.check('tags.isNotTag', 'False') - ]) - self.cmd('az storage account show --name {stor_2} -g {rg}', checks=[ - self.check('tags.isTag', 'True'), - self.check('tags.isNotTag', 'False') - ]) - - # delete tags.isTag - self.cmd('az storage account update --ids {stor_ids} --remove tags.isTag') - - self.cmd('az storage account show --name {stor_1} -g {rg} --query "tags"', checks=[ - self.check('isNotTag', 'False'), - self.check('isTag', None) - ]) - self.cmd('az storage account show --name {stor_2} -g {rg} --query "tags"', checks=[ - self.check('isNotTag', 'False'), - self.check('isTag', None) - ]) - - # delete tags.isNotTag - self.cmd('az storage account update --ids {stor_ids} --remove tags.isNotTag') - - # check tags is empty. - self.cmd('az storage account show --name {stor_1} -g {rg} --query "tags"', checks=self.is_empty()) - self.cmd('az storage account show --name {stor_2} -g {rg} --query "tags"', checks=self.is_empty()) - - -class ResourceCreateAndShowScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_resource_create') - def test_resource_create_and_show(self, resource_group, resource_group_location): - - self.kwargs.update({ - 'plan': 'cli_res_create_plan', - 'app': 'clirescreateweb', - 'loc': resource_group_location - }) - - self.cmd('resource create -g {rg} -n {plan} --resource-type Microsoft.web/serverFarms --is-full-object --properties "{{\\"location\\":\\"{loc}\\",\\"sku\\":{{\\"name\\":\\"B1\\",\\"tier\\":\\"BASIC\\"}}}}"', - checks=self.check('name', '{plan}')) - - result = self.cmd('resource create -g {rg} -n {app} --resource-type Microsoft.web/sites --properties "{{\\"serverFarmId\\":\\"{plan}\\"}}"', - checks=self.check('name', '{app}')).get_output_in_json() - - self.kwargs['app_settings_id'] = result['id'] + '/config/appsettings' - self.kwargs['app_config_id'] = result['id'] + '/config/web' - self.cmd('resource create --id {app_settings_id} --properties "{{\\"key2\\":\\"value12\\"}}"', - checks=[self.check('properties.key2', 'value12')]) - - self.cmd('resource show --id {app_config_id}', - checks=self.check('properties.publishingUsername', '${app}')) - self.cmd('resource show --id {app_config_id} --include-response-body', - checks=self.check('responseBody.properties.publishingUsername', '${app}')) - - -class TagScenarioTest(ScenarioTest): - - def test_tag_scenario(self): - - self.kwargs.update({ - 'tag': 'cli_test_tag' - }) - - tag_values = self.cmd('tag list --query "[?tagName == \'{tag}\'].values[].tagValue"').get_output_in_json() - for tag_value in tag_values: - self.cmd('tag remove-value --value {} -n {{tag}}'.format(tag_value)) - self.cmd('tag delete -n {tag} -y') - - self.cmd('tag list --query "[?tagName == \'{tag}\']"', checks=self.is_empty()) - self.cmd('tag create -n {tag}', checks=[ - self.check('tagName', '{tag}'), - self.check('values', []), - self.check('count.value', 0) - ]) - self.cmd('tag add-value -n {tag} --value test') - self.cmd('tag add-value -n {tag} --value test2') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', ['test', 'test2'])) - self.cmd('tag remove-value -n {tag} --value test') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', ['test2'])) - self.cmd('tag remove-value -n {tag} --value test2') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.check('[].values[].tagValue', [])) - self.cmd('tag delete -n {tag} -y') - self.cmd('tag list --query "[?tagName == \'{tag}\']"', - checks=self.is_empty()) - - -class ProviderRegistrationTest(ScenarioTest): - - def test_provider_registration(self): - - self.kwargs.update({'prov': 'Microsoft.ClassicInfrastructureMigrate'}) - - result = self.cmd('provider show -n {prov}').get_output_in_json() - if result['registrationState'] == 'Unregistered': - self.cmd('provider register -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Registering', 'Registered']) - self.cmd('provider unregister -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Unregistering', 'Unregistered']) - else: - self.cmd('provider unregister -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Unregistering', 'Unregistered']) - self.cmd('provider register -n {prov}') - result = self.cmd('provider show -n {prov}').get_output_in_json() - self.assertTrue(result['registrationState'] in ['Registering', 'Registered']) - - -class ProviderOperationTest(ScenarioTest): - - def test_provider_operation(self): - self.cmd('provider operation show --namespace microsoft.compute', checks=[ - self.check('id', '/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute'), - self.check('type', 'Microsoft.Authorization/providerOperations') - ]) - self.cmd('provider operation show --namespace microsoft.compute', checks=[ - self.check('id', '/providers/Microsoft.Authorization/providerOperations/Microsoft.Compute'), - self.check('type', 'Microsoft.Authorization/providerOperations') - ]) - self.cmd('provider operation show --namespace microsoft.storage', checks=[ - self.check('id', '/providers/Microsoft.Authorization/providerOperations/Microsoft.Storage'), - self.check('type', 'Microsoft.Authorization/providerOperations') - ]) - - -class SubscriptionLevelDeploymentTest(LiveScenarioTest): - def tearDown(self): - self.cmd('policy assignment delete -n location-lock') - self.cmd('policy definition delete -n policy2') - - def test_subscription_level_deployment(self): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'subscription_level_template.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'subscription_level_parameters.json').replace('\\', '\\\\'), - # params-uri below is the raw file url of the subscription_level_parameters.json above - 'params_uri': 'https://raw.githubusercontent.com/Azure/azure-cli/dev/src/command_modules/azure-cli-resource/azure/cli/command_modules/resource/tests/latest/subscription_level_parameters.json', - 'dn': self.create_random_name('azure-cli-sub-level-desubscription_level_parametersployment', 40) - }) - - self.cmd('group create --name cli_test_subscription_level_deployment --location WestUS', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('deployment validate --location WestUS --template-file "{tf}" --parameters @"{params}"', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('deployment validate --location WestUS --template-file "{tf}" --parameters @"{params_uri}"', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('deployment create -n {dn} --location WestUS --template-file "{tf}" --parameters @"{params}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - ]) - - self.cmd('deployment list', checks=[ - self.check('[0].name', '{dn}'), - ]) - - self.cmd('deployment show -n {dn}', checks=[ - self.check('name', '{dn}') - ]) - - self.cmd('deployment export -n {dn}', checks=[ - ]) - - self.cmd('deployment operation list -n {dn}', checks=[ - self.check('length([])', 4) - ]) - - -class DeploymentTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_deployment_lite') - def test_group_deployment_lite(self, resource_group): - # ensures that a template that is missing "parameters" or "resources" still deploys - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template-lite.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-deployment', 30) - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}') - ]) - - @ResourceGroupPreparer(name_prefix='cli_test_deployment') - def test_group_deployment(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'test-params.json').replace('\\', '\\\\'), - # params-uri below is the raw file url of the test_params.json above - 'params_uri': 'https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/test-params.json', - 'of': os.path.join(curr_dir, 'test-object.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment' - }) - self.kwargs['subnet_id'] = self.cmd('network vnet create -g {rg} -n vnet1 --subnet-name subnet1').get_output_in_json()['newVNet']['subnets'][0]['id'] - - self.cmd('group deployment validate -g {rg} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('group deployment validate -g {rg} --template-file "{tf}" --parameters "{params_uri}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}') - ]) - self.cmd('network lb show -g {rg} -n test-lb', - checks=self.check('tags', {'key': 'super=value'})) - - self.cmd('group deployment list -g {rg}', checks=[ - self.check('[0].name', '{dn}'), - self.check('[0].resourceGroup', '{rg}') - ]) - self.cmd('group deployment show -g {rg} -n {dn}', checks=[ - self.check('name', '{dn}'), - self.check('resourceGroup', '{rg}') - ]) - self.cmd('group deployment operation list -g {rg} -n {dn}', checks=[ - self.check('length([])', 2), - self.check('[0].resourceGroup', '{rg}') - ]) - - @ResourceGroupPreparer(name_prefix='cli_test_on_error_deployment_lastsuccessful') - def test_group_on_error_deployment_lastsuccessful(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template-lite.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-deployment', 30), - 'onErrorType': 'LastSuccessful', - 'sdn': self.create_random_name('azure-cli-deployment', 30) - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - self.check('properties.onErrorDeployment', None) - ]) - - self.cmd('group deployment create -g {rg} -n {sdn} --template-file "{tf}" --rollback-on-error', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - self.check('properties.onErrorDeployment.deploymentName', '{dn}'), - self.check('properties.onErrorDeployment.type', '{onErrorType}') - ]) - - @ResourceGroupPreparer(name_prefix='cli_test_on_error_deployment_specificdeployment') - def test_group_on_error_deployment_specificdeployment(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template-lite.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-deployment', 30), - 'onErrorType': 'SpecificDeployment', - 'sdn': self.create_random_name('azure-cli-deployment', 30) - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - self.check('properties.onErrorDeployment', None) - ]) - - self.cmd('group deployment create -g {rg} -n {sdn} --template-file "{tf}" --rollback-on-error {dn}', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - self.check('properties.onErrorDeployment.deploymentName', '{dn}'), - self.check('properties.onErrorDeployment.type', '{onErrorType}') - ]) - - -class DeploymentLiveTest(LiveScenarioTest): - @ResourceGroupPreparer() - def test_group_deployment_progress(self, resource_group): - from azure.cli.testsdk.utilities import force_progress_logging - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'test-template.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'test-params.json').replace('\\', '\\\\'), - 'of': os.path.join(curr_dir, 'test-object.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment2' - }) - - self.kwargs['subnet_id'] = self.cmd('network vnet create -g {rg} -n vnet1 --subnet-name subnet1').get_output_in_json()['newVNet']['subnets'][0]['id'] - - with force_progress_logging() as test_io: - self.cmd('group deployment create --verbose -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --parameters subnetId="{subnet_id}" --parameters backendAddressPools=@"{of}"') - - # very the progress - lines = test_io.getvalue().splitlines() - for line in lines: - self.assertTrue(line.split(':')[0] in ['Accepted', 'Succeeded']) - self.assertTrue('Succeeded: {} (Microsoft.Resources/deployments)'.format(self.kwargs['dn']), lines) - - -class DeploymentNoWaitTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_group_deployment_no_wait') - def test_group_deployment_no_wait(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'tf': os.path.join(curr_dir, 'simple_deploy.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'simple_deploy_parameters.json').replace('\\', '\\\\'), - 'dn': 'azure-cli-deployment' - }) - - self.cmd('group deployment create -g {rg} -n {dn} --template-file "{tf}" --parameters @"{params}" --no-wait', - checks=self.is_empty()) - - self.cmd('group deployment wait -g {rg} -n {dn} --created', - checks=self.is_empty()) - - self.cmd('group deployment show -g {rg} -n {dn}', - checks=self.check('properties.provisioningState', 'Succeeded')) - - -class DeploymentThruUriTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_deployment_uri') - def test_group_deployment_thru_uri(self, resource_group): - self.resource_group = resource_group - curr_dir = os.path.dirname(os.path.realpath(__file__)) - # same copy of the sample template file under current folder, but it is uri based now - self.kwargs.update({ - 'tf': 'https://raw.githubusercontent.com/Azure/azure-cli/dev/src/azure-cli/azure/cli/command_modules/resource/tests/latest/simple_deploy.json', - 'params': os.path.join(curr_dir, 'simple_deploy_parameters.json').replace('\\', '\\\\') - }) - self.kwargs['dn'] = self.cmd('group deployment create -g {rg} --template-uri "{tf}" --parameters @"{params}"', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg}'), - ]).get_output_in_json()['name'] - - self.cmd('group deployment show -g {rg} -n {dn}', - checks=self.check('name', '{dn}')) - - self.cmd('group deployment delete -g {rg} -n {dn}') - self.cmd('group deployment list -g {rg}', - checks=self.is_empty()) - - -class ResourceMoveScenarioTest(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_resource_move_dest', parameter_name='resource_group_dest', key='rg2') - @ResourceGroupPreparer(name_prefix='cli_test_resource_move_source', key='rg1') - def test_resource_move(self, resource_group, resource_group_dest): - self.kwargs.update({ - 'nsg1': self.create_random_name('nsg-move', 20), - 'nsg2': self.create_random_name('nsg-move', 20) - }) - - self.kwargs['nsg1_id'] = self.cmd('network nsg create -n {nsg1} -g {rg1}').get_output_in_json()['NewNSG']['id'] - self.kwargs['nsg2_id'] = self.cmd('network nsg create -n {nsg2} -g {rg1}').get_output_in_json()['NewNSG']['id'] - - self.cmd('resource move --ids {nsg1_id} {nsg2_id} --destination-group {rg2}') - - self.cmd('network nsg show -g {rg2} -n {nsg1}', checks=[ - self.check('name', '{nsg1}')]) - self.cmd('network nsg show -g {rg2} -n {nsg2}', checks=[ - self.check('name', '{nsg2}')]) - - -class PolicyScenarioTest(ScenarioTest): - - def cmdstring(self, basic, management_group=None, subscription=None): - cmd = basic - if (management_group): - cmd = cmd + ' --management-group {mg}' - if (subscription): - cmd = cmd + ' --subscription {sub}' - return cmd - - def applyPolicy(self): - # create a policy assignment on a resource group - self.kwargs.update({ - 'pan': self.create_random_name('azurecli-test-policy-assignment', 40), - 'padn': self.create_random_name('test_assignment', 20) - }) - - self.cmd('policy assignment create --policy {pn} -n {pan} --display-name {padn} -g {rg} --params {params}', checks=[ - self.check('name', '{pan}'), - self.check('displayName', '{padn}') - ]) - - # create a policy assignment using a built in policy definition name - self.kwargs['pan2'] = self.create_random_name('azurecli-test-policy-assignment2', 40) - self.kwargs['bip'] = '06a78e20-9358-41c9-923c-fb736d382a4d' - - self.cmd('policy assignment create --policy {bip} -n {pan2} --display-name {padn} -g {rg}', checks=[ - self.check('name', '{pan2}'), - self.check('displayName', '{padn}') - ]) - - self.cmd('policy assignment delete -n {pan2} -g {rg}') - - # listing at subscription level won't find the assignment made at a resource group - import jmespath - try: - self.cmd('policy assignment list', checks=self.check("length([?name=='{pan}'])", 0)) - except jmespath.exceptions.JMESPathTypeError: # ok if query fails on None result - pass - - # but enable --show-all works - self.cmd('policy assignment list --disable-scope-strict-match', checks=self.check("length([?name=='{pan}'])", 1)) - - # delete the assignment and validate it's gone - self.cmd('policy assignment delete -n {pan} -g {rg}') - self.cmd('policy assignment list --disable-scope-strict-match', checks=self.check("length([?name=='{pan}'])", 0)) - - def applyPolicyAtScope(self, scope, policyId): - # create a policy assignment at the given scope - self.kwargs.update({ - 'pol': policyId, - 'pan': self.create_random_name('cli-test-polassg', 24), # limit is 24 characters at MG scope - 'padn': self.create_random_name('test_assignment', 20), - 'scope': scope - }) - - self.cmd('policy assignment create --policy {pol} -n {pan} --display-name {padn} --params {params} --scope {scope}', checks=[ - self.check('name', '{pan}'), - self.check('displayName', '{padn}'), - self.check('sku.name', 'A0'), - self.check('sku.tier', 'Free') - ]) - - # delete the assignment and validate it's gone - self.cmd('policy assignment delete -n {pan} --scope {scope}') - self.cmd('policy assignment list --disable-scope-strict-match', checks=self.check("length([?name=='{pan}'])", 0)) - - def resource_policy_operations(self, resource_group, management_group=None, subscription=None): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'pn': self.create_random_name('azure-cli-test-policy', 30), - 'pdn': self.create_random_name('test_policy', 20), - 'desc': 'desc_for_test_policy_123', - 'rf': os.path.join(curr_dir, 'sample_policy_rule.json').replace('\\', '\\\\'), - 'pdf': os.path.join(curr_dir, 'sample_policy_param_def.json').replace('\\', '\\\\'), - 'params': os.path.join(curr_dir, 'sample_policy_param.json').replace('\\', '\\\\'), - 'mode': 'Indexed' - }) - if (management_group): - self.kwargs.update({'mg': management_group}) - if (subscription): - self.kwargs.update({'sub': subscription}) - - # create a policy - cmd = self.cmdstring('policy definition create -n {pn} --rules {rf} --params {pdf} --display-name {pdn} --description {desc} --mode {mode}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('name', '{pn}'), - self.check('displayName', '{pdn}'), - self.check('description', '{desc}'), - self.check('mode', '{mode}') - ]) - - # update it - self.kwargs['desc'] = self.kwargs['desc'] + '_new' - self.kwargs['pdn'] = self.kwargs['pdn'] + '_new' - - cmd = self.cmdstring('policy definition update -n {pn} --description {desc} --display-name {pdn}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('description', '{desc}'), - self.check('displayName', '{pdn}') - ]) - - # list and show it - cmd = self.cmdstring('policy definition list', management_group, subscription) - self.cmd(cmd, checks=self.check("length([?name=='{pn}'])", 1)) - - cmd = self.cmdstring('policy definition show -n {pn}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('name', '{pn}'), - self.check('displayName', '{pdn}') - ]) - - # apply assignments - if management_group: - scope = '/providers/Microsoft.Management/managementGroups/{mg}'.format(mg=management_group) - policy = '{scope}/providers/Microsoft.Authorization/policyDefinitions/{pn}'.format(pn=self.kwargs['pn'], scope=scope) - self.applyPolicyAtScope(scope, policy) - elif subscription: - policy = '/subscriptions/{sub}/providers/Microsoft.Authorization/policyDefinitions/{pn}'.format(sub=subscription, pn=self.kwargs['pn']) - self.applyPolicyAtScope('/subscriptions/{sub}'.format(sub=subscription), policy) - else: - self.applyPolicy() - - # delete the policy - cmd = self.cmdstring('policy definition delete -n {pn}', management_group, subscription) - self.cmd(cmd) - time.sleep(10) # ensure the policy is gone when run live. - - cmd = self.cmdstring('policy definition list', management_group, subscription) - self.cmd(cmd, checks=self.check("length([?name=='{pn}'])", 0)) - - def resource_policyset_operations(self, resource_group, management_group=None, subscription=None): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'pn': self.create_random_name('azure-cli-test-policy', 30), - 'pdn': self.create_random_name('test_policy', 20), - 'desc': 'desc_for_test_policy_123', - 'psn': self.create_random_name('azure-cli-test-policyset', 30), - 'psdn': self.create_random_name('test_policyset', 20), - 'ps_desc': 'desc_for_test_policyset_123', - 'rf': os.path.join(curr_dir, 'sample_policy_rule.json').replace('\\', '\\\\'), - 'psf': os.path.join(curr_dir, 'sample_policy_set.json').replace('\\', '\\\\'), - 'pdf': os.path.join(curr_dir, 'sample_policy_param_def.json').replace('\\', '\\\\') - }) - if (management_group): - self.kwargs.update({'mg': management_group}) - if (subscription): - self.kwargs.update({'sub': subscription}) - - # create a policy - cmd = self.cmdstring('policy definition create -n {pn} --rules {rf} --params {pdf} --display-name {pdn} --description {desc}', management_group, subscription) - policy = self.cmd(cmd).get_output_in_json() - - # create a policy set - policyset = get_file_json(self.kwargs['psf']) - policyset[0]['policyDefinitionId'] = policy['id'] - with open(os.path.join(curr_dir, 'sample_policy_set.json'), 'w') as outfile: - json.dump(policyset, outfile) - - cmd = self.cmdstring('policy set-definition create -n {psn} --definitions @"{psf}" --display-name {psdn} --description {ps_desc}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('name', '{psn}'), - self.check('displayName', '{psdn}'), - self.check('description', '{ps_desc}') - ]) - - # update it - self.kwargs['ps_desc'] = self.kwargs['ps_desc'] + '_new' - self.kwargs['psdn'] = self.kwargs['psdn'] + '_new' - - cmd = self.cmdstring('policy set-definition update -n {psn} --display-name {psdn} --description {ps_desc}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('description', '{ps_desc}'), - self.check('displayName', '{psdn}') - ]) - - # list and show it - cmd = self.cmdstring('policy set-definition list', management_group, subscription) - self.cmd(cmd, checks=self.check("length([?name=='{psn}'])", 1)) - - cmd = self.cmdstring('policy set-definition show -n {psn}', management_group, subscription) - self.cmd(cmd, checks=[ - self.check('name', '{psn}'), - self.check('displayName', '{psdn}') - ]) - - # create a policy assignment on a resource group - if not management_group and not subscription: - self.kwargs.update({ - 'pan': self.create_random_name('azurecli-test-policy-assignment', 40), - 'padn': self.create_random_name('test_assignment', 20) - }) - - self.cmd('policy assignment create -d {psn} -n {pan} --display-name {padn} -g {rg}', checks=[ - self.check('name', '{pan}'), - self.check('displayName', '{padn}'), - self.check('sku.name', 'A0'), - self.check('sku.tier', 'Free'), - ]) - - # delete the assignment and validate it's gone - self.cmd('policy assignment delete -n {pan} -g {rg}') - self.cmd('policy assignment list --disable-scope-strict-match', checks=self.check("length([?name=='{pan}'])", 0)) - - # delete the policy set - cmd = self.cmdstring('policy set-definition delete -n {psn}', management_group, subscription) - self.cmd(cmd) - time.sleep(10) # ensure the policy is gone when run live. - - cmd = self.cmdstring('policy set-definition list', management_group, subscription) - self.cmd(cmd, checks=self.check("length([?name=='{psn}'])", 0)) - - # delete the policy - cmd = self.cmdstring('policy definition delete -n {pn}', management_group, subscription) - self.cmd(cmd) - time.sleep(10) # ensure the policy is gone when run live. - - cmd = self.cmdstring('policy definition list', management_group, subscription) - self.cmd(cmd, checks=self.check("length([?name=='{pn}'])", 0)) - - @ResourceGroupPreparer(name_prefix='cli_test_policy') - @AllowLargeResponse(8192) - def test_resource_policy_default(self, resource_group): - self.resource_policy_operations(resource_group) - - @record_only() - @unittest.skip('mock doesnt work when the subscription comes from --scope') - @ResourceGroupPreparer(name_prefix='cli_test_policy_subscription_id') - @AllowLargeResponse() - def test_resource_policy_subscription_id(self, resource_group): - # under playback, we mock it so the subscription id will be '00000000...' and it will match - # the same sanitized value in the recording - if not self.in_recording: - with mock.patch('azure.cli.command_modules.resource.custom._get_subscription_id_from_subscription', - return_value=MOCKED_SUBSCRIPTION_ID): - self.resource_policy_operations(resource_group, None, 'e8a0d3c2-c26a-4363-ba6b-f56ac74c5ae0') - else: - self.resource_policy_operations(resource_group, None, 'e8a0d3c2-c26a-4363-ba6b-f56ac74c5ae0') - - @AllowLargeResponse(8192) - def test_show_built_in_policy(self): - # get the list of builtins, then retrieve each via show and validate the results match - results = self.cmd('policy definition list --query "[?policyType==\'BuiltIn\']"').get_output_in_json() - if results: - result = results[0] - self.kwargs['pn'] = result['name'] - self.kwargs['dn'] = result['displayName'] - self.kwargs['desc'] = result['description'] - self.kwargs['id'] = result['id'] - self.cmd('policy definition show -n {pn}', checks=[ - self.check('name', '{pn}'), - self.check('description', '{desc}'), - self.check('displayName', '{dn}'), - self.check('id', '{id}') - ]) - - -class ManagedAppDefinitionScenarioTest(ScenarioTest): - @ResourceGroupPreparer() - def test_managedappdef_inline(self, resource_group): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'loc': 'eastus', - 'adn': self.create_random_name('testappdefname', 20), - 'addn': self.create_random_name('test_appdef', 20), - 'ad_desc': 'test_appdef_123', - 'auth': '5e91139a-c94b-462e-a6ff-1ee95e8aac07:8e3af657-a8ff-443c-a75c-2fe8c4bcb635', - 'lock': 'None', - 'ui_file': os.path.join(curr_dir, 'sample_create_ui_definition.json').replace('\\', '\\\\'), - 'main_file': os.path.join(curr_dir, 'sample_main_template.json').replace('\\', '\\\\') - }) - - # create a managedapp definition with inline params for create-ui-definition and main-template - self.kwargs['ad_id'] = self.cmd('managedapp definition create -n {adn} --create-ui-definition @"{ui_file}" --main-template @"{main_file}" --display-name {addn} --description {ad_desc} -l {loc} -a {auth} --lock-level {lock} -g {rg}', checks=[ - self.check('name', '{adn}'), - self.check('displayName', '{addn}'), - self.check('description', '{ad_desc}'), - self.check('authorizations[0].principalId', '5e91139a-c94b-462e-a6ff-1ee95e8aac07'), - self.check('authorizations[0].roleDefinitionId', '8e3af657-a8ff-443c-a75c-2fe8c4bcb635'), - self.check('artifacts[0].name', 'ApplicationResourceTemplate'), - self.check('artifacts[0].type', 'Template'), - self.check('artifacts[1].name', 'CreateUiDefinition'), - self.check('artifacts[1].type', 'Custom') - ]).get_output_in_json()['id'] - - self.cmd('managedapp definition list -g {rg}', - checks=self.check('[0].name', '{adn}')) - - self.cmd('managedapp definition show --ids {ad_id}', checks=[ - self.check('name', '{adn}'), - self.check('displayName', '{addn}'), - self.check('description', '{ad_desc}'), - self.check('authorizations[0].principalId', '5e91139a-c94b-462e-a6ff-1ee95e8aac07'), - self.check('authorizations[0].roleDefinitionId', '8e3af657-a8ff-443c-a75c-2fe8c4bcb635'), - self.check('artifacts[0].name', 'ApplicationResourceTemplate'), - self.check('artifacts[0].type', 'Template'), - self.check('artifacts[1].name', 'CreateUiDefinition'), - self.check('artifacts[1].type', 'Custom') - ]) - - self.cmd('managedapp definition delete -g {rg} -n {adn}') - self.cmd('managedapp definition list -g {rg}', checks=self.is_empty()) - - -# TODO: Change back to ScenarioTest and re-record when issue #5110 is fixed. -class ManagedAppScenarioTest(LiveScenarioTest): - @ResourceGroupPreparer() - def test_managedapp(self, resource_group): - - self.kwargs.update({ - 'loc': 'westcentralus', - 'adn': 'testappdefname', - 'addn': 'test_appdef_123', - 'ad_desc': 'test_appdef_123', - 'uri': 'https://wud.blob.core.windows.net/appliance/SingleStorageAccount.zip', - 'auth': '5e91139a-c94b-462e-a6ff-1ee95e8aac07:8e3af657-a8ff-443c-a75c-2fe8c4bcb635', - 'lock': 'None', - 'sub': self.get_subscription_id() - }) - - self.kwargs['ad_id'] = self.cmd('managedapp definition create -n {adn} --package-file-uri {uri} --display-name {addn} --description {ad_desc} -l {loc} -a {auth} --lock-level {lock} -g {rg}').get_output_in_json()['id'] - - # create a managedapp - self.kwargs.update({ - 'man': 'mymanagedapp', - 'ma_loc': 'westcentralus', - 'ma_kind': 'servicecatalog', - 'ma_rg': self.create_random_name('climanagedapp', 25) - }) - self.kwargs['ma_rg_id'] = '/subscriptions/{sub}/resourceGroups/{ma_rg}'.format(**self.kwargs) - - self.kwargs['ma_id'] = self.cmd('managedapp create -n {man} -g {rg} -l {ma_loc} --kind {ma_kind} -m {ma_rg_id} -d {ad_id}', checks=[ - self.check('name', '{man}'), - self.check('type', 'Microsoft.Solutions/applications'), - self.check('kind', 'servicecatalog'), - self.check('managedResourceGroupId', '{ma_rg_id}') - ]).get_output_in_json()['id'] - - self.cmd('managedapp list -g {rg}', checks=self.check('[0].name', '{man}')) - - self.cmd('managedapp show --ids {ma_id}', checks=[ - self.check('name', '{man}'), - self.check('type', 'Microsoft.Solutions/applications'), - self.check('kind', 'servicecatalog'), - self.check('managedResourceGroupId', '{ma_rg_id}') - ]) - - self.cmd('managedapp delete -g {rg} -n {man}') - self.cmd('managedapp list -g {rg}', checks=self.is_empty()) - - -class CrossRGDeploymentScenarioTest(ScenarioTest): - - @ResourceGroupPreparer(name_prefix='cli_test_cross_rg_alt', parameter_name='resource_group_cross') - @ResourceGroupPreparer(name_prefix='cli_test_cross_rg_deploy') - def test_group_deployment_crossrg(self, resource_group, resource_group_cross): - curr_dir = os.path.dirname(os.path.realpath(__file__)) - - self.kwargs.update({ - 'rg1': resource_group, - 'rg2': resource_group_cross, - 'tf': os.path.join(curr_dir, 'crossrg_deploy.json').replace('\\', '\\\\'), - 'dn': self.create_random_name('azure-cli-crossrgdeployment', 40), - 'sa1': create_random_name(prefix='crossrg'), - 'sa2': create_random_name(prefix='crossrg') - }) - - self.cmd('group deployment validate -g {rg1} --template-file "{tf}" --parameters CrossRg={rg2} StorageAccountName1={sa1} StorageAccountName2={sa2}', checks=[ - self.check('properties.provisioningState', 'Succeeded') - ]) - self.cmd('group deployment create -g {rg1} -n {dn} --template-file "{tf}" --parameters CrossRg={rg2}', checks=[ - self.check('properties.provisioningState', 'Succeeded'), - self.check('resourceGroup', '{rg1}'), - ]) - self.cmd('group deployment list -g {rg1}', checks=[ - self.check('[0].name', '{dn}'), - self.check('[0].resourceGroup', '{rg1}') - ]) - self.cmd('group deployment show -g {rg1} -n {dn}', checks=[ - self.check('name', '{dn}'), - self.check('resourceGroup', '{rg1}') - ]) - self.cmd('group deployment operation list -g {rg1} -n {dn}', checks=[ - self.check('length([])', 3), - self.check('[0].resourceGroup', '{rg1}') - ]) - - -class InvokeActionTest(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_invoke_action') - def test_invoke_action(self, resource_group): - - self.kwargs.update({ - 'vm': self.create_random_name('cli-test-vm', 30), - 'user': 'ubuntu', - 'pass': self.create_random_name('Longpassword#1', 30) - }) - - self.kwargs['vm_id'] = self.cmd('vm create -g {rg} -n {vm} --use-unmanaged-disk --image Canonical:UbuntuServer:18.04-LTS:latest --admin-username {user} --admin-password {pass} --authentication-type password --nsg-rule None').get_output_in_json()['id'] - - self.cmd('resource invoke-action --action powerOff --ids {vm_id}') - self.cmd('resource invoke-action --action generalize --ids {vm_id}') - self.cmd('resource invoke-action --action deallocate --ids {vm_id}') - - self.kwargs['request_body'] = '{\\"vhdPrefix\\":\\"myPrefix\\",\\"destinationContainerName\\":\\"container\\",\\"overwriteVhds\\":\\"true\\"}' - - self.cmd('resource invoke-action --action capture --ids {vm_id} --request-body {request_body}') - - -class GlobalIdsScenarioTest(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_global_ids') - def test_global_ids(self, resource_group): - - self.kwargs.update({ - 'vnet': 'vnet1' - }) - self.kwargs['vnet_id'] = self.cmd('network vnet create -g {rg} -n {vnet}').get_output_in_json()['newVNet']['id'] - # command will fail if the other parameters were actually used - self.cmd('network vnet show --subscription fakesub --resource-group fakerg -n fakevnet --ids {vnet_id}') - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_custom.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_custom.py deleted file mode 100644 index 103005071d9..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_custom.py +++ /dev/null @@ -1,355 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import os -import tempfile -import unittest - -from urllib.request import pathname2url -from urllib.parse import urljoin - -from unittest import mock - -from azure.cli.core.util import CLIError, get_file_json, shell_safe_json_parse -from azure.cli.command_modules.resource.custom import \ - (_get_missing_parameters, _extract_lock_params, _process_parameters, _find_missing_parameters, - _prompt_for_parameters, _load_file_string_or_uri) - - -def _simulate_no_tty(): - from knack.prompting import NoTTYException - raise NoTTYException - - -@mock.patch('knack.prompting.verify_is_a_tty', _simulate_no_tty) -class TestCustom(unittest.TestCase): - def test_file_string_or_uri(self): - data = '{ "some": "data here"}' - with tempfile.NamedTemporaryFile(delete=False) as tmp: - tmp.write(data.encode('utf-8')) - tmp.close() - - output = _load_file_string_or_uri(tmp.name, 'test') - self.assertEqual(get_file_json(tmp.name), output) - - uri = urljoin('file:', pathname2url(tmp.name)) - output = _load_file_string_or_uri(uri, 'test') - self.assertEqual(get_file_json(tmp.name), output) - - os.unlink(tmp.name) - - output = _load_file_string_or_uri(data, 'test') - self.assertEqual(shell_safe_json_parse(data), output) - - self.assertEqual(None, _load_file_string_or_uri(None, 'test', required=False)) - self.assertRaises(CLIError, _load_file_string_or_uri, None, 'test') - - def test_extract_parameters(self): - tests = [ - { - 'input': {}, - 'expected': {}, - 'name': 'empty' - }, - { - 'input': { - 'resource_group_name': 'foo', - }, - 'expected': { - 'resource_group_name': 'foo', - }, - 'name': 'resource_group' - }, - { - 'input': { - 'resource_type': 'foo', - }, - 'expected': {}, - 'name': 'missing resource_group' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_type': 'bar', - }, - 'expected': { - 'resource_group_name': 'foo', - }, - 'name': 'missing resource_name' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar', - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar', - }, - 'name': 'missing resource_name' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'bar/blah', - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'name': 'slashes' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah', - 'resource_provider_namespace': 'bar' - }, - 'name': 'separate' - }, - { - 'input': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah/bug', - 'resource_provider_namespace': 'bar' - }, - 'expected': { - 'resource_group_name': 'foo', - 'resource_name': 'baz', - 'resource_type': 'blah/bug', - 'resource_provider_namespace': 'bar' - }, - 'name': 'separate' - } - - ] - - for test in tests: - resource_group_name = test['input'].get('resource_group_name', None) - resource_type = test['input'].get('resource_type', None) - resource_name = test['input'].get('resource_name', None) - resource_provider_namespace = test['input'].get('resource_provider_namespace', None) - - output = _extract_lock_params(resource_group_name, resource_provider_namespace, - resource_type, resource_name) - - resource_group_name = test['expected'].get('resource_group_name', None) - resource_type = test['expected'].get('resource_type', None) - resource_name = test['expected'].get('resource_name', None) - resource_provider_namespace = test['expected'].get('resource_provider_namespace', None) - - self.assertEqual(resource_group_name, output[0], test['name']) - self.assertEqual(resource_name, output[1], test['name']) - self.assertEqual(resource_provider_namespace, output[2], test['name']) - self.assertEqual(resource_type, output[3], test['name']) - - def test_resource_missing_parameters(self): - template = { - "parameters": { - "def": { - "type": "string", - "defaultValue": "default" - }, - "present": { - "type": "string", - }, - "missing": { - "type": "string", - } - } - } - parameters = { - "present": { - "value": "foo" - } - } - out_params = _get_missing_parameters(parameters, template, lambda x: {"missing": "baz"}) - - expected = { - "present": { - "value": "foo" - }, - "missing": { - "value": "baz" - } - } - - self.assertDictEqual(out_params, expected) - - def test_deployment_parameters(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - # test different ways of passing in parameters - tests = [ - { # empty JSON works - "parameter_list": [["{}"]], - "expected": {}, - }, - { # empty parameters works - "parameter_list": [], - "expected": {}, - }, - { # loading from file - "parameter_list": [[parameters_path]], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { # KEY=VALUE syntax with extra equal sign - "parameter_list": [['stringParam=foo=bar']], - "expected": {"stringParam": {"value": "foo=bar"}}, - }, - { # raw JSON (same as @file) - "parameter_list": [['{\"stringParam\": {\"value\": \"foo\"}}']], - "expected": {"stringParam": {"value": "foo"}}, - }, - { # multiple KEY=VALUE - "parameter_list": [['stringParam=foo', 'intParam=3']], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 3}}, - }, - { # KEY=VALUE where last in wins - "parameter_list": [['stringParam=foo', 'stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}}, - }, - { # file loading overriden by KEY=VALUE - "parameter_list": [[parameters_path], ['stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - } - ] - - for i, test in enumerate(tests): - parameter_list = test['parameter_list'] - result_parameters = _process_parameters(template, parameter_list) - self.assertEqual(result_parameters, test['expected'], i) - - def test_deployment_parameters_with_type_references(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template-$ref-indirection.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - # test different ways of passing in parameters - tests = [ - { # empty JSON works - "parameter_list": [["{}"]], - "expected": {}, - }, - { # empty parameters works - "parameter_list": [], - "expected": {}, - }, - { # loading from file - "parameter_list": [[parameters_path]], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { # KEY=VALUE syntax with extra equal sign - "parameter_list": [['stringParam=foo=bar']], - "expected": {"stringParam": {"value": "foo=bar"}}, - }, - { # raw JSON (same as @file) - "parameter_list": [['{\"stringParam\": {\"value\": \"foo\"}}']], - "expected": {"stringParam": {"value": "foo"}}, - }, - { # multiple KEY=VALUE - "parameter_list": [['stringParam=foo', 'intParam=3']], - "expected": {"stringParam": {"value": "foo"}, "intParam": {"value": 3}}, - }, - { # KEY=VALUE where last in wins - "parameter_list": [['stringParam=foo', 'stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}}, - }, - { # file loading overriden by KEY=VALUE - "parameter_list": [[parameters_path], ['stringParam=bar']], - "expected": {"stringParam": {"value": "bar"}, "intParam": {"value": 10}, "madeupParam": {"value": "bar"}}, - }, - { - "parameter_list": [['boolParam=true', 'tupleParam=[21]']], - "expected": {"boolParam": {"value": True}, "tupleParam": {"value": [21]}}, - } - ] - - for i, test in enumerate(tests): - parameter_list = test['parameter_list'] - result_parameters = _process_parameters(template, parameter_list) - self.assertEqual(result_parameters, test['expected'], i) - - def test_deployment_missing_values(self): - - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - template_param_defs = template.get('parameters', {}) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - # ensure that parameters with default values are not considered missing - params_with_defaults = [x for x in template_param_defs if 'defaultValue' in template_param_defs[x]] - for item in params_with_defaults: - self.assertTrue(item not in missing_parameters) - - # ensure that a parameter that specifies a reference does not prompt - self.assertTrue('secretReference' not in missing_parameters) - self.assertTrue('secretReference' in result_parameters) - - def test_deployment_prompt_file_order(self): - # check that params are prompted for in file order when the file is loaded with preserve_order=True - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=True) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - param_file_order = ["['secureParam', 'boolParam', 'enumParam', 'arrayParam', 'objectParam']"] - results = _prompt_for_parameters(missing_parameters, fail_on_no_tty=False) - self.assertTrue(str(list(results.keys())) in param_file_order) - - def test_deployment_prompt_alphabetical_order(self): - # check that params are prompted for in alphabetical order when the file is loaded with preserve_order=False - curr_dir = os.path.dirname(os.path.realpath(__file__)) - template_path = os.path.join(curr_dir, 'param-validation-template.json').replace('\\', '\\\\') - parameters_path = os.path.join(curr_dir, 'param-validation-params.json').replace('\\', '\\\\') - parameters_with_reference_path = os.path.join(curr_dir, 'param-validation-ref-params.json').replace('\\', '\\\\') - - template = get_file_json(template_path, preserve_order=False) - - parameter_list = [[parameters_path], [parameters_with_reference_path]] - result_parameters = _process_parameters(template, parameter_list) - missing_parameters = _find_missing_parameters(result_parameters, template) - - param_alpha_order = ["['arrayParam', 'boolParam', 'enumParam', 'objectParam', 'secureParam']"] - results = _prompt_for_parameters(dict(missing_parameters), fail_on_no_tty=False) - self.assertTrue(str(list(results.keys())) in param_alpha_order) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_id_deletes.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_id_deletes.py deleted file mode 100644 index 98b7101edef..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_id_deletes.py +++ /dev/null @@ -1,29 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- -import os -import unittest -from azure.cli.testsdk import ScenarioTest, JMESPathCheck, ResourceGroupPreparer, live_only - - -@live_only() -class ResourceDeleteTests(ScenarioTest): - @ResourceGroupPreparer(name_prefix='cli_test_delete_dependent_resources', location='southcentralus') - def test_delete_dependent_resources(self, resource_group): - vm_name = self.create_random_name('cli-test-vm', 30) - tag_name = self.create_random_name('cli-test-tag', 20) - username = 'ubuntu' - password = self.create_random_name('Password#1', 30) - - self.cmd('vm create -n {} -g {} --image Canonical:UbuntuServer:18.04-LTS:latest --tag {} ' - '--admin-username {} --admin-password {} --authentication-type {} --nsg-rule None' - .format(vm_name, resource_group, tag_name, username, password, 'password')) - - rsrc_list = self.cmd('resource list --tag {} --query [].id'.format(tag_name)).get_output_in_json() - self.cmd('resource delete --ids {}'.format(' '.join(rsrc_list))) - self.cmd('resource wait --ids {} --deleted --timeout 300'.format(''.join(rsrc_list))) - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_list_odata_filter.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_list_odata_filter.py deleted file mode 100644 index d497f5063da..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_list_odata_filter.py +++ /dev/null @@ -1,77 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -from azure.cli.command_modules.resource.custom import (_list_resources_odata_filter_builder, - _find_missing_parameters) -from azure.cli.core.parser import IncorrectUsageError - - -class TestDeployResource(unittest.TestCase): - def test_find_missing_parameters_none(self): - template = { - "parameters": { - "foo": { - "defaultValue": "blah" - }, - "bar": {}, - "baz": {}, - } - } - - missing = _find_missing_parameters(None, template) - self.assertEqual(2, len(missing)) - - def test_find_missing_parameters(self): - parameters = { - "foo": "value1", - "bar": "value2" - } - - template = { - "parameters": { - "foo": { - "defaultValue": "blah" - }, - "bar": {}, - "baz": {}, - } - } - - missing = _find_missing_parameters(parameters, template) - self.assertEqual(1, len(missing)) - - -class TestListResources(unittest.TestCase): - def test_tag_name(self): - odata_filter = _list_resources_odata_filter_builder(tag='foo') - self.assertEqual(odata_filter, "tagname eq 'foo'") - - def test_tag_name_starts_with(self): - odata_filter = _list_resources_odata_filter_builder(tag='f*') - self.assertEqual(odata_filter, "startswith(tagname, 'f')") - - def test_tag_name_value_equals(self): - odata_filter = _list_resources_odata_filter_builder(tag={'foo': 'bar'}) - self.assertEqual(odata_filter, "tagname eq 'foo' and tagvalue eq 'bar'") - - def test_name_location_equals_resource_type_equals(self): - odata_filter = _list_resources_odata_filter_builder( - name='wonky', location='dory', resource_provider_namespace='resource', - resource_type='type') # pylint: disable=line-too-long - self.assertEqual(odata_filter, - "name eq 'wonky' and location eq 'dory' and resourceType eq 'resource/type'") # pylint: disable=line-too-long - - def test_name_location_equals(self): - odata_filter = _list_resources_odata_filter_builder(name='wonky', location='dory') - self.assertEqual(odata_filter, "name eq 'wonky' and location eq 'dory'") - - def test_tag_and_name_fails(self): - with self.assertRaises(IncorrectUsageError): - _list_resources_odata_filter_builder(tag='foo=bar', name='should not work') - - -if __name__ == '__main__': - unittest.main() diff --git a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_validators.py b/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_validators.py deleted file mode 100644 index 2536cb57466..00000000000 --- a/src/azure-cli/azure/cli/command_modules/resource/tests/hybrid_2019_03_01/test_resource_validators.py +++ /dev/null @@ -1,146 +0,0 @@ -# -------------------------------------------------------------------------------------------- -# Copyright (c) Microsoft Corporation. All rights reserved. -# Licensed under the MIT License. See License.txt in the project root for license information. -# -------------------------------------------------------------------------------------------- - -import unittest -import os.path -from unittest import mock -from io import StringIO - -from knack.util import CLIError -from azure.cli.command_modules.resource._validators import ( - _validate_deployment_name, - validate_lock_parameters, -) - - -class NamespaceObject: - pass - - -class TestResourceValidators(unittest.TestCase): - def setUp(self): - self.io = StringIO() - - def tearDown(self): - self.io.close() - - def test_validate_lock_params(self): - valid = [ - { - 'test': 'just name', - 'name': 'foo' - }, - { - 'test': 'name and group', - 'name': 'foo', - 'resource_group': 'foo', - }, - { - 'test': 'name, group, type [compact]', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'Microsoft.Compute/VirtualMachines' - }, - { - 'test': 'name, group, type, namespace', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - }, - { - 'test': 'name, group, type, namespace, parent', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - 'parent_resource_path': 'Foo.Bar/baz', - } - ] - for valid_namespace in valid: - namespace_obj = NamespaceObject() - for key in valid_namespace: - setattr(namespace_obj, key, valid_namespace[key]) - try: - # If unexpected invalid, this throws, so no need for asserts - validate_lock_parameters(namespace_obj) - except CLIError as ex: - self.fail('Test {} failed. {}'.format(valid_namespace['test'], ex)) - - def test_validate_lock_params_invalid(self): - invalid = [ - { - 'test': 'just name and type', - 'name': 'foo', - 'resource_type': 'baz' - }, - { - 'test': 'name and group and type', - 'name': 'foo', - 'resource_group': 'foo', - 'resource_type': 'bar', - }, - { - 'test': 'name, group, no type', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - }, - { - 'test': 'name, group, type, namespace', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_name': 'baz', - 'resource_provider_namespace': 'Microsoft.Compute', - }, - { - 'test': 'name, group, type, namespace, parent', - 'name': 'foo', - 'resource_group': 'bar', - 'resource_type': 'VirtualMachines', - 'resource_provider_namespace': 'Microsoft.Compute', - 'parent_resource_path': 'Foo.Bar/baz', - } - ] - for invalid_namespace in invalid: - with self.assertRaises(CLIError): - namespace_obj = NamespaceObject() - for key in invalid_namespace: - setattr(namespace_obj, key, invalid_namespace[key]) - validate_lock_parameters(namespace_obj) - - def test_generate_deployment_name_from_file(self): - # verify auto-gen from uri - namespace = mock.MagicMock() - namespace.template_uri = 'https://templates/template123.json?foo=bar' - namespace.template_file = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - self.assertEqual('template123', namespace.deployment_name) - - namespace = mock.MagicMock() - namespace.template_file = __file__ - namespace.template_uri = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - - file_base_name = os.path.basename(__file__) - file_base_name = file_base_name[:str.find(file_base_name, '.')] - self.assertEqual(file_base_name, namespace.deployment_name) - - # verify use default if get a file content - namespace = mock.MagicMock() - namespace.template_file = '{"foo":"bar"}' - namespace.template_uri = None - namespace.deployment_name = None - _validate_deployment_name(namespace) - self.assertEqual('deployment1', namespace.deployment_name) - - -if __name__ == '__main__': - unittest.main()